72625 matches found
GHSA-77QW-3XM6-R2PP vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-6879 vulnerabilities
Vulnerabilities for packages: python...
GHSA-77QW-3XM6-R2PP vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-73248
A flaw was found in calibre, an e-book manager. A remote attacker could craft a malicious e-book file such as EPUB, OPF, or PDF containing specially crafted metadata. When a user opens or imports this file, the application's processing of nested templates can bypass Python template restrictions,...
Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six
No d...
CVE-2026-19594
Insufficient input sanitization in Snowflake Python API snowflake.core versions prior to 1.13.0 allowed confused-deputy privilege escalation through two related weaknesses: path traversal CWE-22 via unencoded .. identifier path segments, and HTTP parameter pollution CWE-141 via unencoded &//=...
CVE-2026-19594
Insufficient input sanitization in Snowflake Python API snowflake.core versions prior to 1.13.0 allowed confused-deputy privilege escalation through two related weaknesses: path traversal CWE-22 via unencoded .. identifier path segments, and HTTP parameter pollution CWE-141 via unencoded &//=...
CLSA-2026-1786503821 TuxCare security update for python-multipart (1 CVE)
TuxCare rebuilt python-multipart to address 1 CVE. Fixed in 0.0.6.post7+tuxcare...
python3.9 security update
3.9.25-7.0.1.el98.3 - Remove upstream URL reference 3.9.25-7.3 - Security fix for CVE-2026-11940 Resolves: RHEL-227228 3.9.25-7.2 - Security fix for CVE-2026-15308 Resolves: RHEL-193786 3.9.25-7.1 - Fix ssl.SSLError: ASN1: NOTENOUGHDATA not enough data with OpenSSL 3.5.7+ Resolves: RHEL-194207...
CVE-2026-19594: Improper Limitation of a Pathname to a Restricted Directory
Insufficient input sanitization in Snowflake Python API snowflake.core versions prior to 1.13.0 allowed confused-deputy privilege escalation through two related weaknesses: path traversal CWE-22 via unencoded .. identifier path segments, and HTTP parameter pollution CWE-141 via unencoded &//=...
PT-2026-80092
TuxCare rebuilt python-multipart to address 1 CVE. Fixed in 0.0.6.post7+tuxcare...
Important: python3.9 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
Moderate: python-idna security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
RHEL 8 : python-pillow (RHSA-2026:54417)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:54417 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...
Debian dla-4736 : python-django-doc - security update
The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4736 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4736-1 [email protected]...
Linux Distros Unpatched Vulnerability : CVE-2026-73248
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - calibre is an e-book manager. Prior to 9.12.0, calibre processes attacker-controlled compositetemplate metadata from a malicious EPUB, OPF, PDF, or similar file...
AlmaLinux 8 : python-idna (ALSA-2026:54290)
The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:54290 advisory. python-idna: idna: Denial of Service via specially crafted long inputs CVE-2026-45409 Tenable has extracted the preceding description block directly from the...
RHEL 8 : python-idna (RHSA-2026:54290)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:54290 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...
ALSA-2026:54290 Moderate: python-idna security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...