PyPDF Resource Exhaustion

The vulnerability of the Python library for working with PDF files, PyPDF, is related to the unlimited distribution of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

PyPDF Uncontrolled Resource Consumption DoS

The vulnerability of the Python library for working with PDF files, PyPDF, is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a hacker to cause service failures...

PyPDF Loop DoS

The vulnerability of the Python library for working with PDF files, PyPDF, is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

PyPDF Loop DoS

The vulnerability of the Python library for working with PDF files, PyPDF, is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

PyPDF Uncontrolled Memory Allocation DoS

The vulnerability of the Python library for working with PDF files, PyPDF, is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

PyPDF Algorithmic Complexity DoS

The vulnerability of the Python library for working with PDF files, PyPDF, is related to its algorithmic complexity. Exploiting this vulnerability could allow an attacker to cause a service failure...

SQLparse Reindent Filter Heap Buffer Overflow

The vulnerability of the ReindentFilter.getoffset function in the sqlparse/filters/reindent.py file of the SQL parser module for Python’s Sqlparse is related to algorithmic complexity. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

CVE-2026-85525: Improper Certificate Validation

Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be accepted as valid, because OCSP responses were not reliably bound to the certificate being validated and definitive verification failures were treated as transient. A...

ROS-20260904-73-0017

The vulnerability of the Repo.clonefrom function in the Python library for interacting with Git repositories in GitPython is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability may allow a malicious actor to execute arbitrary code remotely...

aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python. An attacker could exploit this vulnerability by providing untrusted input to the CookieJar.load function. This could potentially lead to arbitrary code execution, allowing the attacker to run malicio...

Important: Red Hat Security Advisory: Satellite 6.16.13 Async Update

An update is now available for Red Hat Satellite 6.16 for RHEL 8 and RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

GitPython: GitPython: Arbitrary command execution due to bypass of dangerous Git option checks

A flaw was found in GitPython, a Python library used to interact with Git repositories. This vulnerability allows an attacker to achieve arbitrary command execution by providing specially crafted arguments kwargs to functions such as Repo.clonefrom, Remote.fetch, Remote.pull, or Remote.push. This...

aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python. An attacker could exploit this vulnerability by providing untrusted input to the CookieJar.load function. This could potentially lead to arbitrary code execution, allowing the attacker to run malicio...

Important: Red Hat Security Advisory: Satellite 6.19.4 Async Update

A new release is now available for Red Hat Satellite 6.19 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python. An attacker could exploit this vulnerability by providing untrusted input to the CookieJar.load function. This could potentially lead to arbitrary code execution, allowing the attacker to run malicio...

aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python. An attacker could exploit this vulnerability by providing untrusted input to the CookieJar.load function. This could potentially lead to arbitrary code execution, allowing the attacker to run malicio...

GHSA-3QF3-8W2G-RQMX python-jose algorithm confusion guard bypassed by DER-encoded public keys

python-jose through 3.5.0 fails to properly validate asymmetric keys in HMAC initialization, accepting DER-encoded public keys that lack PEM armor or SSH prefixes. Attackers holding the service's public key can forge HS256 tokens that pass verification when algorithms are not explicitly restricte...

1xn-vmcp (>=0.1.0, <=0.6.1), a2 (>=0.1.0, <=0.8.3) +2052 more potentially affected by CVE-2026-85394 via python-jose (>=3.0.0, <=3.5.0)

python-jose PYPI version =3.0.0, =0.1.0, =0.1.0, =0.3.6, =0.1.0a1, =0.1.2b0, =0.0.1a1, =0.1.0, =0.1.1, =3.1.0b1, =0.0.3, =1.0.0, =1.0.3, =0.1.0a0, =1.0.0, =1.1.0 and more Source cves: CVE-2026-85394 Source advisory: GHSA-3QF3-8W2G-RQMX...

flask-adfs (>=0.1.9, <=0.1.19), ghoauth (>=0.5.1, <=0.6.1) +1 more potentially affected by CVE-2024-33663 +1 more via python-jose (1.3.2)

python-jose PYPI version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on python-jose and may be impacted: - flask-adfs =0.1.9, =0.5.1, =0.3.2, =0.3.3 Source cves: CVE-2024-33663, CVE-2026-85394 Source advisory: OSV:GHSA-3QF3-8W2G-RQMX...

core-devoops (>=0.0.1, <=0.0.2) potentially affected by CVE-2024-33663 +1 more via python-jose (1.4.0)

python-jose PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-jose and may be impacted: - core-devoops =0.0.1, =0.0.2 Source cves: CVE-2024-33663, CVE-2026-85394 Source advisory: OSV:GHSA-3QF3-8W2G-RQMX...