61152 matches found
Mageia: Security Advisory (MGASA-2026-0087)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RockyLinux 9 : python3.12 (RLSA-2026:6285)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:6285 advisory. python: Python: Command-line option injection in webbrowser.open via crafted URLs CVE-2026-4519 Tenable has extracted the preceding description block directly fro...
RHEL 9 : python3.9 (RHSA-2026:6766)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:6766 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...
python3.9 security update
3.9.25-3.0.1.el97.2 - Remove upstream URL reference 3.9.25-3.2 - Security fix for CVE-2026-4519 Resolves: RHEL-158052 3.9.25-3.1 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143108 RHEL-143169 RHEL-144893...
Important: python3.9 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
Photon OS 5.0: Python3 PHSA-2026-5.0-0802
An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0802. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
OPENSUSE-SU-2026:10499-1 python311-social-auth-app-django-5.7.0-1.1 on GA media
These are all security issues fixed in the python311-social-auth-app-django-5.7.0-1.1 package on the GA media of openSUSE Tumbleweed...
Mageia: Security Advisory (MGASA-2026-0082)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2026-25645 affecting package python-requests for versions less than 2.31.0-4
CVE-2026-25645 affecting package python-requests for versions less than 2.31.0-4. A patched version of the package is available...
CVE-2026-24049 affecting package python-virtualenv for versions less than 20.36.1-2
CVE-2026-24049 affecting package python-virtualenv for versions less than 20.36.1-2. A patched version of the package is available...
CVE-2026-30922 affecting package python-pyasn1 for versions less than 0.4.8-2
CVE-2026-30922 affecting package python-pyasn1 for versions less than 0.4.8-2. A patched version of the package is available...
CVE-2025-50181 affecting package python-virtualenv for versions less than 20.36.1-2
CVE-2025-50181 affecting package python-virtualenv for versions less than 20.36.1-2. A patched version of the package is available...
CVE-2026-1703 affecting package python-virtualenv for versions less than 20.36.1-2
CVE-2026-1703 affecting package python-virtualenv for versions less than 20.36.1-2. A patched version of the package is available...
PraisonAI Has Path Traversal in FileTools
Executive Summary: The path validation has a critical logic bug: it checks for .. AFTER normpath has already collapsed all .. sequences. This makes the check completely useless and allows trivial path traversal to any file on the system. The path validation function also does not resolve the...
GHSA-4PH2-F6PF-79WV PraisonAI Has Arbitrary File Write (Zip Slip) in Templates Extraction
The PraisonAI templates installation feature is vulnerable to a "Zip Slip" Arbitrary File Write attack. When downloading and extracting template archives from external sources e.g., GitHub, the application uses Python's zipfile.extractall without verifying if the files within the archive resolve...
CVE-2026-35050
text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.1.1, users can save extention settings in "py" format and in the app root directory. This allows to overwrite python files, for instance the "download-model.py" file could be overwritten. Then, thi...
GHSA-57CW-J6VP-2P9M OpenEXR has use after free in PyObject_StealAttrString
Summary There is a use-after-free in PyObjectStealAttrString of pyOpenEXRold.cpp. This bug was found with ZeroPath. Details The legacy adapter defines PyObjectStealAttrString that calls PyObjectGetAttrString to obtain a new reference, immediately decrefs it, and returns the pointer. Callers then...
Updated python-nltk packages fix security vulnerability
nltk Vulnerable to Cross-site Scripting. CVE-2026-33230...