ROS-20260908-73-0047

The vulnerability in python-daphne is related to unlimited resource distribution. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

PT-2026-87032

Name of the Vulnerable Software and Affected Versions libxml2 affected versions not specified podman affected versions not specified container-tools:rhel8/podman affected versions not specified swift-lang affected versions not specified openshift/ose-rhel-coreos-8 affected versions not specified...

CVE-2026-74860: Release of Invalid Pointer or Reference

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition DTD with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callbac...

CVE-2026-74860: Release of Invalid Pointer or Reference

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition DTD with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callbac...

CVE-2026-86597: Insertion of Sensitive Information into Log File

Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions to be written to diagnostic logs in circumstances where the...

NewStart CGSL MAIN 7.02 : python-webob Vulnerability (NS-SA-2026-0107)

The remote NewStart CGSL host, running version MAIN 7.02, has python-webob packages installed that are affected by a vulnerability: - WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Location header to include the request hostname, it does so by parsing the U...

RHEL 10 : python3.14-cryptography (RHSA-2026:64795)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:64795 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

Security update for python-sqlparse (moderate)

openSUSE security update: security update for python-sqlparse ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21777-1 Rating: moderate References: bsc1278097 Cross-References: CVE-2026-84305 CVSS scores: CVE-2026-84305 SUSE : 4...

Security update for python-Authlib (moderate)

openSUSE security update: security update for python-authlib ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21795-1 Rating: moderate References: bsc1275231 Cross-References: CVE-2026-41479 CVSS scores: CVE-2026-41479 SUSE : 5.4...

EulerOS 2.0 SP12 : python-pyasn1 (EulerOS-SA-2026-3377)

According to the versions of the python-pyasn1 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the pyasn1 library is vulnerable to a Denial of Service DoS attack caused by...

ROS-20260908-73-0021

The vulnerability in python-pip is related to an incorrect restriction on the path name of the directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

EulerOS 2.0 SP12 : python-idna (EulerOS-SA-2026-3299)

According to the versions of the python-idna package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Internationalized Domain Names in Applications IDNA for Python provides support for Internationalized Domain Names in Applications IDNA and...

EulerOS 2.0 SP12 : python-pip (EulerOS-SA-2026-3376)

According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pip would treat consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to the installation...

EulerOS 2.0 SP12 : python-idna (EulerOS-SA-2026-3374)

According to the versions of the python-idna package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Internationalized Domain Names in Applications IDNA for Python provides support for Internationalized Domain Names in Applications IDNA and...

EulerOS 2.0 SP12 : python-sphinx (EulerOS-SA-2026-3303)

According to the versions of the python-sphinx packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Underscore.js is a utility-belt library for JavaScript. Prior to 1.13.8, the .flatten and .isEqual functions use recursion without a depth...

AlmaLinux 9 : python3.14-cryptography (ALSA-2026:64774)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:64774 advisory. python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building CVE-2026-69249 python-cryptography:...

AlmaLinux 10 : python3.14-cryptography (ALSA-2026:64795)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:64795 advisory. python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building CVE-2026-69249 python-cryptography:...

EulerOS 2.0 SP12 : python-pip (EulerOS-SA-2026-3301)

According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pip would treat consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to the installation...

Linux Distros Unpatched Vulnerability : CVE-2026-74860

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document...

NewStart CGSL MAIN 7.02 : python-PyJWT Multiple Vulnerabilities (NS-SA-2026-0091)

The remote NewStart CGSL host, running version MAIN 7.02, has python-PyJWT packages installed that are affected by multiple vulnerabilities: - PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit Critical Header Parameter defined in RFC 7515 4.1.11...