CVE-2026-63073 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

CVE-2026-63074 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

CVE-2026-63076 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

GHSA-3J55-QF57-HQC2 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

GHSA-826X-QG76-XQJX vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

GHSA-97G4-HHWH-C697 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

CVE-2026-63075 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

GHSA-6M2H-7HRP-6JW8 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

GHSA-CJ75-R57J-R5V8 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

GHSA-WP5F-6Q39-Q2F4 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

CVE-2026-75803 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

CVE-2026-63072 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

EUVD-2026-70251

HTTPX2: Streaming response decompression does not bound peak memory decompression amplification...

aetherpost (>=1.1.0, <=1.9.0), afterdark-llm-firewall (0.1.0) +145 more potentially affected by CVE-2026-84379 via httpx2 (>=2.2.0, <=2.10.0)

httpx2 PYPI version =2.2.0, =1.1.0, =0.1.5, =0.1.12, =1.3.155, =0.0.2, =0.2.0, =0.1.0, =0.1.1, =0.1.2, =0.8.3, =0.3.4, =0.1.0, =0.0.1, =0.1.8, =0.1.12 and more Source cves: CVE-2026-84379 Source advisory: SNYK:PYTHON-HTTPX2-20361638...

EUVD-2026-70246

HTTPX2: Multipart part header injection via unvalidated file Content-Type and custom headers...

EUVD-2026-70242

HTTPX2: Quadratic SSE line buffering can cause CPU denial of service...

aetherpost (>=1.1.0, <=1.9.0), afterdark-llm-firewall (0.1.0) +102 more potentially affected by CVE-2026-84381 via httpx2 (>=2.6.0, <=2.9.1)

httpx2 PYPI version =2.6.0, =1.1.0, =0.1.5, =0.1.12, =1.3.155, =0.0.2, =0.2.0, =0.1.1, =0.1.2, =0.8.3, =0.3.4, =0.1.0, =0.0.1, =0.1.8, =0.1.12 - async-hermes-agent 0.20.4.1 and more Source cves: CVE-2026-84381 Source advisory: OSV:GHSA-7MJ9-2MP8-4M2P...

GHSA-W3V8-GMH9-3WV7 NLTK: ReDoS in nltk.tgrep via unvalidated user-supplied regular expressions

Summary The NLTK tgrep module accepts user-supplied regular expressions and passes them to the Python re engine without a timeout or validation, enabling catastrophic backtracking ReDoS. Applications that expose the tgrep API to external input are vulnerable to a single-request denial of service...

cabrita (>=2.2.2b1, <=2.2.2b2), cico (>=0.1.0, <=0.1.8) +4 more potentially affected by CVE-2026-78679 via gitpython (2.1.10)

gitpython PYPI version 2.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - cabrita =2.2.2b1, =0.1.0, =0.1.0, =3.11.1, =0.9.0, =0.9.7.2 Source cves: CVE-2026-78679 Source advisory: OSV:GHSA-3WXW-XV34-2FRG...

sealights-python-agent (>=0.2.213, <=0.2.247) potentially affected by CVE-2026-78679 via gitpython (2.1.13)

gitpython PYPI version 2.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - sealights-python-agent =0.2.213, =0.2.247 Source cves: CVE-2026-78679 Source advisory: OSV:GHSA-3WXW-XV34-2FRG...