SUSE-SU-2026:0971-1 Security update for python39

This update for python39 fixes the following issue: - CVE-2026-2297: validation bypass via incorrectly handled hook in FileLoader bsc1259240...

python310-3.10.20-2.1 on GA media (moderate)

python310-3.10.20-2.1 on GA media Announcement ID: openSUSE-SU-2026:10404-1 Rating: moderate Cross-References: CVE-2026-1299 CVE-2026-2297 CVSS scores: CVE-2026-1299 SUSE : 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N CVE-2026-1299 SUSE : 8.3...

python314-3.14.3-3.1 on GA media (moderate)

python314-3.14.3-3.1 on GA media Announcement ID: openSUSE-SU-2026:10405-1 Rating: moderate Cross-References: CVE-2026-2297 CVSS scores: CVE-2026-2297 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVE-2026-2297 SUSE : 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N...

CVE-2026-2297 vulnerabilities

Vulnerabilities for packages: python...

BELL-CVE-2026-2297

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2026-2297

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The import hook in CPython that handles legacy .pyc files SourcelessFileLoader is incorrectly handled in FileLoader a base class and so does not use io.opencode...

CVE-2026-2297

creationtimestamp| type| source ---|---|--- 2026-03-05 00:28:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgbk4bmwco2n 2026-03-05 14:15:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mgcyckro4r2n 2026-03-05 17:23:29+00:00| seen|...

CVE-2026-2297

A flaw was found in CPython. This vulnerability allows a local user with low privileges to bypass security auditing mechanisms. The issue occurs because the SourcelessFileLoader component, responsible for handling older Python compiled files .pyc, does not properly trigger system audit events. Th...

AZL-79457 CVE-2026-2297 affecting package python3 3.12.9-9

The import hook in CPython that handles legacy .pyc files SourcelessFileLoader is incorrectly handled in FileLoader a base class and so does not use io.opencode to read the .pyc files. sys.audit handlers for this audit event therefore do not fire...

CVE-2026-2297 SourcelessFileLoader does not use io.open_code()

The import hook in CPython that handles legacy .pyc files SourcelessFileLoader is incorrectly handled in FileLoader a base class and so does not use io.opencode to read the .pyc files. sys.audit handlers for this audit event therefore do not fire...

EUVD-2025-2297

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2015-2297

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nanohttp in libcsoap allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted Authorization header...

Linux Distros Unpatched Vulnerability : CVE-2021-2297

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.20. Difficult...

BeyondTrust Privilege Management for Windows < 25.4.270.0 Multiple Vulnerabilities (BT25-05) (BTS25-06)

The version of BeyondTrust Privilege Management for Windows installed on the remote host is prior to 25.4.270.0. It is, therefore, affected by multiple vulnerabilities as referenced in the BT25-05 and BT25-06 advisories: - Prior to version 25.4.270.0, a local authenticated attacker can manipulate...

CVE-2025-2297

creationtimestamp| type| source ---|---|--- 2025-07-30 14:31:51+00:00| seen| https://bsky.app/profile/paxioncyber.bsky.social/post/3lv6tkx2p4s2e...

CVE-2025-2297

Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes into the local user registry under certain conditions. This allows users with the ability to edit their user profile files to elevate their privileges to...

CVE-2025-2297 Privilege Management for Windows - Elevation of Privilege

Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes into the local user registry under certain conditions. This allows users with the ability to edit their user profile files to elevate their privileges to...

CVE-2025-2297 Privilege Management for Windows - Elevation of Privilege

Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes into the local user registry under certain conditions. This allows users with the ability to edit their user profile files to elevate their privileges to...

CVE-2023-2297

The Profile Builder – User Profile & User Registration Forms plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 3.9.0. This is due to the plugin using native password reset functionality, with insufficient validation on the password reset function...

CVE-2022-2297

A vulnerability, which was classified as critical, was found in SourceCodester Clinics Patient Management System 2.0. Affected is an unknown function of the file /pms/updateuser.php?userid=1. The manipulation of the argument profilepicture with the input leads to unrestricted upload. It is possib...