Hunk Companion < 1.9.0 - Unauthenticated Plugin Installation

The plugin does not correctly authorize some REST API endpoints, allowing unauthenticated requests to install and activate arbitrary plugins from the WordPress.org repo, including vulnerable plugins that have been closed. id: CVE-2024-11972 info: name: Hunk Companion 1.9.0 - Unauthenticated Plugi...

ROOT-OS-DEBIAN-12-CVE-2026-11972 CVE-2026-11972 in python3.11 - Patched by Root

Root has patched CVE-2026-11972 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...

AlmaLinux 9.6 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc (ALMALINUX9.6:CLSA-2026:1785457027)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785457027 advisory. - When using the tarfile module with a file opened in streaming mode mode=r| the tarfile module did not properly handle EOF, making archive...

ROOT-OS-ALPINE-320-CVE-2026-11972 CVE-2026-11972 in python3 - Patched by Root

Root has patched CVE-2026-11972 in the python3 package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-11972 CVE-2026-11972 in python3.9 - Patched by Root

Root has patched CVE-2026-11972 in the python3.9 package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-11972 CVE-2026-11972 in python3.13 - Patched by Root

Root has patched CVE-2026-11972 in the python3.13 package for Root:Debian:13. Multiple fixed versions available...

Security update for python313 (important)

openSUSE security update: security update for python313 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21595-1 Rating: important References: bsc1257041 bsc1257044 bsc1265268 bsc1268977 bsc1269066 bsc1269788 bsc1269959 bsc1271192 Cross-References:...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.14: python-unversioned-command-3.14.7-1.hum1 noarch python3-3.14.7-1.hum1 aarch64, x8664 python3-debug-3.14.7-1.hum1 aarch64, x8664 python3-devel-3.14.7-1.hum1 aarch64, x8664...

Photon OS 5.0: Python3 PHSA-2026-5.0-92-0910

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0910. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

python: Fix of CVE-2026-11972

CVE-2026-11972: fix an unbounded loop CPU DoS in the tarfile module when a member header in a streaming-mode archive mode="r|" declares a huge size, by breaking out of the Stream.seek read loop at EOF...

CVE-2020-11972

creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:05+00:00| seen| https://t.me/timcorehacking/890 2026-08-06 00:00:53+00:00| seen| https://t.me/timcorehacking/890...

Important: python3.11

Issue Overview: When using the "configparser" module to write configuration files containing multi-line text values with carriage return characters \r the resulting file could be injected with unexpected keys and values if the attacker controls the written value. CVE-2026-0864 When using the...

Amazon Linux 2023 : python3.11, python3.11-devel, python3.11-idle (ALAS2023-2026-1953)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1953 advisory. When using the configparser module to write configuration filescontaining multi-line text values with carriage return characters \r theresulting file could be injected with unexpected keys and...

Amazon Linux 2023 : python3.14, python3.14-devel, python3.14-freethreading (ALAS2023-2026-1962)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1962 advisory. When using the tarfile module with a file opened in streaming mode mode=r| the tarfile module did not properly handle EOF, making archive parsing take exponentially longer. CVE-2026-11972 Tenable has...

OESA-2026-3072 python3 security update

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C...

CVE-2026-11972 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-11972 vulnerabilities

Vulnerabilities for packages: python...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.13: python3.13-3.13.14-1.2.hum1 aarch64, x8664 python3.13-debug-3.13.14-1.2.hum1 aarch64, x8664 python3.13-devel-3.13.14-1.2.hum1 aarch64, x8664 python3.13-freethreading-3.13.14-1.2.hum1...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.11: python3.11-3.11.15-4.4.hum1 aarch64, x8664 python3.11-debug-3.11.15-4.4.hum1 aarch64, x8664 python3.11-devel-3.11.15-4.4.hum1 aarch64, x8664 python3.11-idle-3.11.15-4.4.hum1 aarch64,...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.14: python3.14-3.14.6-1.2.hum1 aarch64, x8664 python3.14-debug-3.14.6-1.2.hum1 aarch64, x8664 python3.14-devel-3.14.6-1.2.hum1 aarch64, x8664 python3.14-freethreading-3.14.6-1.2.hum1...