PYSEC-2026-3661 devpi-server may leak database contents

Impact If the replication protocol is enabled by using the primary or deprecated master role for a server instance, then the +changelog URL route can be used to read the complete database content including password hashes, and the ids and salts of tokens from devpi-tokens by using a trivially...

EUVD-2024-34271

Malicious code in bioql PyPI...

CVE-2018-25108

CVE-2018-25108 affects WAGO 750-8xx programmable logic controllers. An unauthenticated remote attacker can cause a DoS by triggering uncontrolled resource consumption in the controller, leading to unavailability. The threat context is network-based (no user interaction) with no privileges require...

Amazon Linux 2 : python38-pip (ALASPYTHON3.8-2024-015)

The version of python38-pip installed on the remote host is prior to 21.0.1-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2PYTHON3.8-2024-015 advisory. python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode CVE-2024-3651 Tenable...

ALSA-2024:4260 Moderate: python-idna security update

The hsakmt packages include a thunk library for AMD's Heterogeneous System Architecture HSA Linux kernel driver amdkfd. Security Fixes: python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode CVE-2024-3651 For more details about the security issues, includi...

Denial Of Service (DoS)

gnutls is vulnerable to Denial of ServiceDoS. The vulnerability is due to excessive resource consumption caused by the "certtool --verify-chain" command when verifying a specially crafted .pem bundle, leading to an application crash...