ROS-20260420-73-0022

Vulnerability in python-aiohttp related to redundant data logging. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

OPENSUSE-SU-2026:10583-1 python311-pypdf-6.10.2-1.1 on GA media

These are all security issues fixed in the python311-pypdf-6.10.2-1.1 package on the GA media of openSUSE Tumbleweed...

📄 openDCIM 25.01 SQL Injection

openDCIM version 25.01 remote SQL injection exploit that can be leveraged to execute arbitrary code. ================================================================================================================================== | Title : openDCIM 25.01 Python Exploit – Authenticated &...

RHEL 7 : python-urllib3 (RHSA-2026:9031)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:9031 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...

Fedora 43 : python-pillow (2026-5ab72c7957)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5ab72c7957 advisory. Fix CVE-2026-40192. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...

PT-2026-33800

Name of the Vulnerable Software and Affected Versions python-dotenv versions prior to 1.2.2 Description The set key and unset key functions in python-dotenv follow symbolic links when rewriting .env files. This occurs when the rewrite context manager in dotenv/main.py writes to a temporary file i...

python-dotenv 安全漏洞

python-dotenv is a Python environment management tool developed by Saurabh Kumar. Versions of python-dotenv prior to version 1.2.2 contained security vulnerabilities. These vulnerabilities stemmed from defects in the setkey and unsetkey functions when dealing with symbolic links, which could allo...

python310-3.10.20-5.1 on GA media (moderate)

python310-3.10.20-5.1 on GA media Announcement ID: openSUSE-SU-2026:10579-1 Rating: moderate Cross-References: CVE-2026-3446 CVSS scores: CVE-2026-3446 SUSE : 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N CVE-2026-3446 SUSE : 6 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N...

Fedora 45 : python3.11 (2026-a5ba8297fd)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a5ba8297fd advisory. Automatic update for python3.11-3.11.15-4.fc45. Changelog Fri Apr 17 2026 Charalampos Stratakis - 3.11.15-4 - Security fixes for CVE-2026-1502,...

ROS-20260420-73-0020

Vulnerability ASN.1 in the pyasn1 library of the Python programming language is related to unrestricted resource allocation. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

ROS-20260420-73-0039

Vulnerability in python-pyasn1 related to uncontrolled recursion. Exploitation of the vulnerability may allow an attacker to cause a denial of service...

ROS-20260420-73-0021

Vulnerability in python-aiohttp related to unrestricted resource allocation. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

ROS-20260420-73-0026

Vulnerability in python-aiohttp related to a flaw in http request handling. Exploitation of the vulnerability could allow a remote attacker to send a hidden http request http request smuggling attack...

ROS-20260420-73-0024

Vulnerability in python-aiohttp related to execution of a loop with an unreachable exit condition. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260420-73-0027

Vulnerability in python-aiohttp related to a flaw in http request handling. Exploitation of the vulnerability could allow a remote attacker to send a hidden http request http request smuggling attack...

AgentScope 安全漏洞

AgentScope is an open-source application developed by ModelScope. It simplifies the development of multi-agent applications based on LLMs. Versions of AgentScope prior to 1.0.18 contain security vulnerabilities, which stem from incorrect operations on the function...

OPENSUSE-SU-2026:10582-1 python311-PyPDF2-2.11.1-9.1 on GA media

These are all security issues fixed in the python311-PyPDF2-2.11.1-9.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-33709

Name of the Vulnerable Software and Affected Versions modelscope agentscope versions prior to 1.0.19 Description A code injection flaw exists that allows remote attackers to execute arbitrary code. The issue is located in the execute python code and execute shell command functions within the...

Fedora 45 : python3.9 (2026-77d74cf57f)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-77d74cf57f advisory. Automatic update for python3.9-3.9.25-9.fc45. Changelog Fri Apr 17 2026 Charalampos Stratakis - 3.9.25-9 - Security fixes for CVE-2026-4786 and...

RHEL 9 : python3.11 (RHSA-2026:9042)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:9042 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...