59282 matches found
MAL-2026-1577 Malicious code in ropie (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 5a7814d65bb3b0e5187be5d4ae9b0a11b4030ea5d911fdef3f5e614b6c15e95d Installation embeds a malicious PTH file that then during import downloads and executes remote code. During analysis, the remote code was a test starting...
CVE-2026-3479
DISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.getdata has the same security model as open. The documentation has been updated to clarify this point. There is no vulnerability in the function if following the intended security model. pkgutil.getdata did...
CVE-2026-3479
DISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.getdata has the same security model as open. The documentation has been updated to clarify this point. There is no vulnerability in the function if following the intended security model. pkgutil.getdata did...
CVE-2026-3479 pkgutil.get_data() does not enforce documented restrictions
DISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.getdata has the same security model as open. The documentation has been updated to clarify this point. There is no vulnerability in the function if following the intended security model. pkgutil.getdata did...
CVE-2026-3479
DISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.getdata has the same security model as open. The documentation has been updated to clarify this point. There is no vulnerability in the function if following the intended security model. pkgutil.getdata did...
CVE-2026-3479
DISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.getdata has the same security model as open. The documentation has been updated to clarify this point. There is no vulnerability in the function if following the intended security model. pkgutil.getdata did...
OPENSUSE-SU-2026:20392-1 Security update for python-Authlib
This update for python-Authlib fixes the following issues: Changes in python-Authlib: - CVE-2026-27962: JWS deserializecompact allows for signature bypass by accepting user-controlled embedded JWK as verification key bsc1259738 - CVE-2026-28490: cryptographic padding oracle in JWE RSA15 key...
OPENSUSE-SU-2026:20393-1 Security update for python-simpleeval
This update for python-simpleeval fixes the following issues: Changes in python-simpleeval: - CVE-2026-32640: Objects including modules can leak dangerous modules through to direct access inside the sandbox bsc1259685...
Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in urllib3 (CVE-2026-21441, CVE-2025-66471)
Summary IBM Sterling Control Center is affected by a vulnerability CVE-2026-21441, CVE-2025-66471 reported for urllib3. Vulnerability Details CVEID:CVE-2026-21441 DESCRIPTION: urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTT...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 — Apache Path Traversal & RCE Internship Tas...
Malicious code in tabullate (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-1914 Malicious code in tabullate (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-1913 Malicious code in suficloud (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in suficloud (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in quantumania (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-1912 Malicious code in quantumania (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in prometheus-quick-analysis (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-1910 Malicious code in prometheus-quick-analysis (PyPI)
--- -= Per source details. Do not edit below this line.=-...