76 matches found
SUSE-SU-2026:23048-1 Security update for python-urllib3
This update for python-urllib3 fixes the following issue: - CVE-2026-9375: oversized Brotli payload via the streaming API can lead to a denial of service bsc1268683...
Security Bulletin: IBM Edge Data Collector uses multiple dependencies which are vulnerable to multiple CVEs.
Summary IBM Edge Data Collector uses pillow-12.2.0-cp314-cp314-manylinux227x8664.manylinux228x8664.whl, immutable-4.3.8.tgz, urllib3-2.6.3-py3-none-any.whl, form-data-4.0.5.tgz, pyjwt-2.12.1-py3-none-any.whl which are vulnerable to CVE-2026-54059, CVE-2026-54060, CVE-2026-55379, CVE-2026-55380,...
SUSE-SU-2026:3397-1 Security update for python-urllib3
This update for python-urllib3 fixes the following issue - CVE-2026-9375: decompression bomb bypass in the streaming API when using Brotli support can lead to a denial of service bsc1268683...
openSUSE 16 Security Update : python-urllib3 (openSUSE-SU-2026:21430-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21430-1 advisory. This update for python-urllib3 fixes the following issue - CVE-2026-9375: decompression bomb bypass in the streaming API when using Brotli support can...
OPENSUSE-SU-2026:21430-1 Security update for python-urllib3
This update for python-urllib3 fixes the following issue - CVE-2026-9375: decompression bomb bypass in the streaming API when using Brotli support can lead to a denial of service bsc1268683...
MAL-2026-9375 Malicious code in wm735526 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
OESA-2026-2815 python-urllib3 security update
HTTP library with thread-safe connection pooling, file post support, sanity friendly, and more. Security Fixes: urllib3 version 2.6.3 is vulnerable to a decompression bomb bypass in its streaming API preloadcontent=False when using Brotli support. The issue arises due to three independent code...
OESA-2026-2813 python-urllib3 security update
HTTP library with thread-safe connection pooling, file post support, sanity friendly, and more. Security Fixes: urllib3 version 2.6.3 is vulnerable to a decompression bomb bypass in its streaming API preloadcontent=False when using Brotli support. The issue arises due to three independent code...
OESA-2026-2814 python-urllib3 security update
HTTP library with thread-safe connection pooling, file post support, sanity friendly, and more. Security Fixes: urllib3 version 2.6.3 is vulnerable to a decompression bomb bypass in its streaming API preloadcontent=False when using Brotli support. The issue arises due to three independent code...
SUSE CVE-2026-9375
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2026-9375
creationtimestamp| type| source ---|---|--- 2026-06-20 23:11:09+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3moqy56mrki2s...
CVE-2026-9375
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
DEBIAN-CVE-2026-9375
Bulletin has no description...
MINI-6JH3-4QGH-9375
Bulletin has no description...
MINI-33RC-9375-9H4X
Bulletin has no description...
CGA-9375-H7WM-JWMW
Bulletin has no description...
TencentOS Server 4: python-xmltodict (TSSA-2025:0945)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0945 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
SUSE SLES15 / openSUSE 15 Security Update : python-xmltodict (SUSE-SU-2025:03511-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:03511-1 advisory. - CVE-2025-9375: XML injection vulnerability in xmltodict allows input data manipulation bsc1249036. Tenable has extracted th...
SUSE SLES15 Security Update : python-xmltodict (SUSE-SU-2025:03457-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:03457-1 advisory. - CVE-2025-9375: XML injection vulnerability in xmltodict allows input data manipulation bsc1249036. Tenable has extracted the preceding...