72625 matches found
Oracle Linux 10 : python-idna (ELSA-2026-54481)
The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-54481 advisory. - Fix CVE-2026-45409: quadratic time complexity in IDNA validation Tenable has extracted the preceding description block directly from the Oracle Linux securi...
RockyLinux 8 : python-idna (RLSA-2026:54290)
The remote RockyLinux 8 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:54290 advisory. python-idna: idna: Denial of Service via specially crafted long inputs CVE-2026-45409 Tenable has extracted the preceding description block directly from the...
MiracleLinux 9 : python3.14-3.14.5-1.el9_8.1 (AXSA:2026-1523:05)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1523:05 advisory. python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations CVE-2026-15308 Tenable has extracted the preceding...
Linux Distros Unpatched Vulnerability : CVE-2026-48804
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - python-socketio is a Python implementation of the Socket.IO realtime client and server. The python- socketio server stores binary EVENT and ACK messages in memo...
SUSE SLES12: libpython3_4m1_0 / libpython3_4m1_0-32bit / python3 / python3-base / etc (SUSE-SU-2026:3601-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3601-1 advisory. - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the configparser module is used...
Linux Distros Unpatched Vulnerability : CVE-2026-48802
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - python-engineio is a Python implementation of the Engine.IO realtime client and server. Prior to version 4.13.2, an attacker can cause the creation of unnecessa...
Oracle Linux 8 : python-idna (ELSA-2026-54290)
The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-54290 advisory. 2.5-8 - Security fix for CVE-2026-45409 Resolves: RHEL-215650 Tenable has extracted the preceding description block directly from the Oracle Linux security...
python-idna security update
2.10-8 - Security fix for CVE-2026-45409 Resolves: RHEL-215653...
ALSA-2026:54481 Moderate: python-idna security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
ALSA-2026:54484 Moderate: python-idna security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
AlmaLinux 8 : vim (ALSA-2026:38510)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:38510 advisory. vim: command injection when decompressing .tgz archives CVE-2026-46483 vim: Vim: Arbitrary Code Execution via crafted directory names CVE-2026-47162 vim:...
CVE-2026-59890 affecting package python-setuptools for versions less than 69.0.3-6
CVE-2026-59890 affecting package python-setuptools for versions less than 69.0.3-6. A patched version of the package is available...
[SECURITY] [DLA 4736-1] python-django security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4736-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb August 12, 2026 https://wiki.debian.org/LTS -...
CVE-2026-18750 CVE-2026-18750
vinny/views.py: ModifyEmailNotifications IDOR: view fetches VinceCommEmail by raw pk from URL and toggles emailfunction/name without checking the record's contact belongs to the requesting group-admin. Lets a vendor admin flip notification routing or read email/name for another vendor's contact...
External Control of File Name or Path
Overview dspy is a DSPy Affected versions of this package are vulnerable to External Control of File Name or Path via the parsing of untrusted output fields in the Image and Audio adapters. An attacker can access arbitrary local files by injecting a filesystem path into the url field, causing the...
OWASP-Bypass-Docs
📘 OWASP Bypass — Documentação Técnica Documentação oficia...
vpulse
VPulse Automated web security audit toolkit with screenshot...
Important: Red Hat Security Advisory: python-pillow security update
An update for python-pillow is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scori...
airflow-calendar (>=0.5.0, <=0.9.1), airflow-provider-great-expectations (1.0.0) +2 more potentially affected by CVE-2026-67587 via apache-airflow-task-sdk (>=1.3.0, <=1.3.1rc2)
apache-airflow-task-sdk PYPI version =1.3.0, =0.5.0, =3.3.0, =3.3.1rc2 - apache-airflow-core 3.3.0 Source cves: CVE-2026-67587 Source advisory: SNYK:PYTHON-APACHEAIRFLOWTASKSDK-18748192...
airflow-balancer (>=0.7.0, <=0.7.6), airflow-calendar (>=0.5.0, <=0.9.1) +45 more potentially affected by CVE-2026-59244 via apache-airflow-task-sdk (>=1.0.0rc4, <=1.3.1rc2)
apache-airflow-task-sdk PYPI version =1.0.0rc4, =0.7.0, =0.5.0, =1.5.0, =0.6.1, =1.10.7, =0.6.0a1, =0.1.0, =1.4.3, =0.3.0, =1.2.10, =3.0.0rc3, =3.0.0rc3, =3.3.0 - apache-airflow-providers-box 2.0.6 and more Source cves: CVE-2026-59244 Source advisory: SNYK:PYTHON-APACHEAIRFLOWTASKSDK-18748199...