72581 matches found
python: Python: Denial of Service via super-linear regular expression work in csv.Sniffer.sniff()
A flaw was found in the csv.Sniffer.sniff function within Python. An attacker can exploit this by providing specially crafted CSV samples, which can trigger super-linear regular-expression processing during dialect sniffing. This excessive processing consumes significant CPU resources, potentiall...
RHSA-2026:57638 Red Hat Security Advisory: python-urwid security update
Bulletin has no description...
RHSA-2026:57637 Red Hat Security Advisory: python-urwid security update
Bulletin has no description...
Sitadel v1.5.1
Sitadel - Web Application Security Scanner root@kitploit: | || || | / | | | | | | | | | | || | | | \ | | |/ | | | | || | | | |/ | | | | | | /|| ||\ Sitadel is basically an update for WAScan making it compatible for python = 3.11 It allows more flexibility for you to write new modules and...
[SECURITY] Fedora 44 Update: python-asyncmy-0.2.14-1.fc44
asyncmy is a fast asyncio MySQL/MariaDB driver, which reuses most of pymysql and aiomysql but rewrites the core protocol with Cython to speed it up...
[SECURITY] Fedora 44 Update: python-sqlalchemy-2.0.52-1.fc44
SQLAlchemy is an Object Relational Mapper ORM that provides a flexible, high-level interface to SQL databases. Database and domain concepts are decoupled, allowing both sides maximum flexibility and power. SQLAlchemy provides a powerful mapping layer that can work as automatically or as manual ly...
[SECURITY] Fedora 44 Update: python-alembic-1.19.1-1.fc44
Alembic is a database migration tool written by the author of SQLAlchemy. A migrations tool offers the following functionality: =E2=80=A2 Can emit ALTER statements to a database in order to change the stru cture of tables and other constructs =E2=80=A2 Provides a system whereby "migration scripts...
[SECURITY] Fedora 44 Update: python3.13-3.13.15-1.fc44
Python 3.13 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.13 package provides the "python3.13" executable:...
[SECURITY] Fedora 43 Update: python-sqlalchemy-2.0.52-1.fc43
SQLAlchemy is an Object Relational Mapper ORM that provides a flexible, high-level interface to SQL databases. Database and domain concepts are decoupled, allowing both sides maximum flexibility and power. SQLAlchemy provides a powerful mapping layer that can work as automatically or as manual ly...
[SECURITY] Fedora 43 Update: python-asyncmy-0.2.14-1.fc43
asyncmy is a fast asyncio MySQL/MariaDB driver, which reuses most of pymysql and aiomysql but rewrites the core protocol with Cython to speed it up...
[SECURITY] Fedora 43 Update: python-alembic-1.19.1-1.fc43
Alembic is a database migration tool written by the author of SQLAlchemy. A migrations tool offers the following functionality: =E2=80=A2 Can emit ALTER statements to a database in order to change the stru cture of tables and other constructs =E2=80=A2 Provides a system whereby "migration scripts...
[SECURITY] Fedora 43 Update: python3.13-3.13.15-1.fc43
Python 3.13 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.13 package provides the "python3.13" executable:...
Exploit for Eval Injection in Langflow
CVE-2026-33017 Langflow RCE ★ CVE-2026-33017 Langflow Remote...
Malicious Package
Overview reqcrypts is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
SUSE CVE-2026-68939
Pyenv provides simple Python version management. Prior to 2.8.0, isversionsafe in libexec/pyenv-version-file-read accepts shell glob metacharacters in .python-version values, and unquoted PYENVVERSION expansion in libexec/pyenv-version-name, libexec/pyenv-which, libexec/pyenv-prefix,...
openSUSE 16 Security Update : python-unearth (openSUSE-SU-2026:21606-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21606-1 advisory. Changes in python-unearth: - CVE-2026-73030: iswithindirectory function fails to normalize paths before validation and allows ../ sequences to bypass...
Python Library sqlparse < 0.6.0 Multiple Vulnerabilities
The version of the sqlparse Python library installed on the remote host is prior to 0.6.0. It is, therefore, affected by multiple vulnerabilities: - A denial of service vulnerability exists in sqlparse due to the regular expressions used by the lexer to match dollar-quoted strings and multiline...
SUSE SLED15: libpython3_11-1_0 / python311 / python311-base / python311-curses / etc (SUSE-SU-2026:3648-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3648-1 advisory. - Regression in http.cookies bsc1263083. Tenable has extracted the preceding description block directly from t...
CVE-2026-68508: Improper Control of Generation of Code
Hydra is a framework for elegantly configuring complex applications. Prior to 1.3.4, hydra.utils.instantiate resolves and calls Python objects selected by configuration through resolvetarget in hydra/internal/instantiate/instantiate2.py, allowing attacker-controlled target values and arguments to...
SUSE SLED15: libpython3_13-1_0 / python313 / python313-base / python313-curses / etc (SUSE-SU-2026:3649-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3649-1 advisory. - CVE-2025-15366: user-controlled command can allow additional commands injected using newlines bsc1257044. -...