70011 matches found
debloat
Debloat Debloat is a GUI and CLI tool to remove excess garbage from bloated executables. By excess garbage, I mean 100 - 800 MB of junk bytes added to a binary to keep it from going into a sandbox. This method of adding junk is called "inflating" or "pumping" a binary. Debloat currently handles t...
CLEANSTART-2026-CX71098 Tornado is a Python web framework and asynchronous networking library
CVE-2026-82397 affects multiple packages. Tornado is a Python web framework and asynchronous networking library. See references for individual vulnerability details...
CLEANSTART-2026-PH27311 sqlparse is a non-validating SQL parser module for Python
Security vulnerability affects the airflow-3 package. sqlparse is a non-validating SQL parser module for Python...
CLEANSTART-2026-JF73384 sqlparse is a non-validating SQL parser module for Python
Security vulnerability affects the airflow-3 package. sqlparse is a non-validating SQL parser module for Python...
CLEANSTART-2026-JQ90440 joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards
Security vulnerability affects the airflow-3 package. joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards...
CLEANSTART-2026-JT70619 sqlparse is a non-validating SQL parser module for Python
Security vulnerability affects the airflow-3 package. sqlparse is a non-validating SQL parser module for Python...
...[ More ]
Apache BuildStream's tar source plugin extracts archives without safely resolving symbolic links link following. A malicious source tarball can include a symlink entry that points outside the staging directory and then a file entry that writes through it, so a crafted upstream source can create o...
PT-2026-98314
Name of the Vulnerable Software and Affected Versions IO::Socket::SSL::SelfCertificate version 1.00 Description This software contains malware that executes Python code retrieved from an obfuscated URL. The generate certificate function runs a Python script stored as a certificate file located in...
CVE-2026-57176
Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the Vend OAuth2 backend used only the numeric Vend userid as the social-auth UID. When multiple Vend shops authenticate through the same application, users from different shops with the same internal Ven...
PT-2026-98233
Name of the Vulnerable Software and Affected Versions MongoDB Python Driver affected versions not specified Description An integer overflow exists in the BSON document encoding component of the bundled native extension. This occurs when a single document is constructed using an excessively large...
CVE-2026-96749: Integer Overflow or Wraparound
An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually large amount of caller-supplied data. Size arithmetic is performed in a signed 32-bit type, and the guard meant to catch...
PT-2026-98187
Name of the Vulnerable Software and Affected Versions Python Social Auth versions prior to 5.0.0 Description The SAML backend accepts SAML responses on the Assertion Consumer Service endpoint without verifying that they match a previously issued AuthnRequest. This flaw allows an attacker with a...
CVE-2026-57178: Improper Authentication
Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the vk-app backend accepted VK application callback data without verifying the callback signature when the authkey parameter was omitted. Applications using this backend could treat unsigned...
CVE-2026-57176: Authentication Bypass by Alternate Name
Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the Vend OAuth2 backend used only the numeric Vend userid as the social-auth UID. When multiple Vend shops authenticate through the same application, users from different shops with the same internal Ven...
PT-2026-105029
An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually large amount of caller-supplied data. Size arithmetic is performed in a signed 32-bit type, and the guard meant to catch...
CVE-2026-96747
The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...
CVE-2026-57175: Improper Authentication
Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the SAML backend accepted SAML responses on the Assertion Consumer Service endpoint without verifying that they matched a previously issued AuthnRequest. Applications using SAML account association could...
ALSA-2026:71586 Important: libxml2 security update
The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow CVE-2026-86138 libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks...
PT-2026-98191
Name of the Vulnerable Software and Affected Versions Python Social Auth versions prior to 5.0.0 Description The partial-pipeline resume mechanism accepts the partial token as a bearer credential without binding it to the browser session that created it. This allows an attacker to initiate an...
CVE-2026-57179: Session Fixation
Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the partial-pipeline resume mechanism accepted partialtoken as a bearer credential without binding it to the browser session that created it. Applications using resumable partial pipeline steps could all...