CVE-2026-74860

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition DTD with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callbac...

CVE-2026-74860

CVE-2026-74860 affects libxml2 when compiled with Python bindings enabled. A remote attacker can supply a specially crafted XML document containing a DTD with enumerated attribute values , triggering a double-free in the SAX attributeDecl callback handler (a string is freed twice). The flaw resul...

CVE-2026-74860

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition DTD with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callbac...

CVE-2026-74860 Libxml2: double-free/uaf in libxml2 python bindings

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition DTD with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callbac...

EUVD-2026-72691

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition DTD with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callbac...

Scrapegraph-ai v2.2.4

🚀 Looking for an even faster and simpler way to scrape at scale only 5 lines of code? Check out our enhanced version at ScrapeGraphAI.com! 🚀 🕷️ ScrapeGraphAI: You Only Scrape Once English | 中文 | 日本語 | 한국어 | Русский | Türkçe | Deutsch | Español | français | Português | Italiano ScrapeGraphAI is a...

GHSA-5CWM-P7PJ-GQP2 Duplicate Advisory: Sensitive information written to logs by Snowflake drivers

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-qqj6-54q6-cxv6. This link is maintained to preserve external references. Original Description Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drive...

Duplicate Advisory: Sensitive information written to logs by Snowflake drivers

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-qqj6-54q6-cxv6. This link is maintained to preserve external references. Original Description Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drive...

CVE-2026-19672

A flaw was found in the Python tarfile module. This vulnerability allows an attacker to create empty directories outside of the intended extraction destination on POSIX Portable Operating System Interface platforms. This occurs when processing a specially crafted archive containing member names...

CVE-2026-17084

A flaw was found in the Python 'stringprep' module. This module incorrectly processed characters by using the latest Unicode codepoint attributes instead of the Unicode 3.2.0 standard specified in RFC 3454. This deviation can lead to mismatches when processing internationalized domain names IDNA...

CVE-2026-15806

A flaw was found in Python. The HTTPPasswordMgr class in the urllib.request module did not correctly consider the URL scheme when matching stored credentials against a requested URL. This allowed credentials intended for an HTTPS secure connection to be sent over an unencrypted HTTP connection to...

ae-mcp (0.2.0), analytics-agent-connector-snowflake (>=0.1.0, <=0.4.0) +30 more potentially affected by CVE-2026-86597 via snowflake-connector-python (>=4.0.0, <=4.7.2)

snowflake-connector-python PYPI version =4.0.0, =0.1.0, =2020.5.20rc1, =1.0.0b2, =0.185.0, =1.0.3, =1.0.0, =0.1.0, =1.10.7, =2.79.1a0, =3.0.0, =3.0.1.post1 - klondike 0.3.0 - lib2dlp 0.0.10 and more Source cves: CVE-2026-86597 Source advisory: SNYK:PYTHON-SNOWFLAKECONNECTORPYTHON-19666491...

Insertion of Sensitive Information into Log File

Overview snowflake-connector-python is a Snowflake Connector for Python Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the logging process. An attacker can obtain authentication tokens, encryption keys, pre-signed URLs, and SAML assertions...

security

Deskflow Security Proof-of-concept scripts for security vulne...

acedeploy (>=2.4.15, <=2.4.366.dev1), acepolicies (>=0.1.17, <=0.1.23) +286 more potentially affected by CVE-2026-86597 via snowflake-connector-python (>=1.7.11, <=4.7.2)

snowflake-connector-python PYPI version =1.7.11, =2.4.15, =0.1.17, =0.0.1.dev7, =0.1.0, =0.1.0.dev1, =0.0.1a4.post0, =1.0.6, =0.0.1, =0.1.0, =2020.5.20rc1, =1.0.0b2, =2.5.1 - arreyy 0.0.1 and more Source cves: CVE-2026-86597 Source advisory: MEND:CVE-2026-86597...

Security Bulletin: IBM Maximo Application Suite - Predict Component uses multiple dependencies which are vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite - Predict Component uses ITOM Rel 3.0.0: idna-3.11-py3-none-any.whl which are vulnerable to CVE-2026-45409. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-45409 DESCRIPTION: Internationalized Domain Names ...

Security update for python-tornado6

This update for python-tornado6 fixes the following issue CVE-2026-82397: an unauthenticated request body containing millions of separator-delimited fields can synchronously stall the single-threaded event loop and delay every connection bsc1277725. Patch Instructions: To install this SUSE update...

SUSE-SU-2026:4076-1 Security update for python-tornado6

This update for python-tornado6 fixes the following issue - CVE-2026-82397: an unauthenticated request body containing millions of separator-delimited fields can synchronously stall the single-threaded event loop and delay every connection bsc1277725...

Security update for python-tornado

This update for python-tornado fixes the following issue: CVE-2026-82397: an unauthenticated request body containing millions of separator-delimited fields can synchronously stall the single-threaded event loop and delay every connection bsc1277725. Patch Instructions: To install this SUSE update...

SUSE-SU-2026:4073-1 Security update for python-tornado

This update for python-tornado fixes the following issue: - CVE-2026-82397: an unauthenticated request body containing millions of separator-delimited fields can synchronously stall the single-threaded event loop and delay every connection bsc1277725...