28 matches found
CVE-2026-59191
TwigView plugin for CakePHP provides wrappers for common View operations and extensions that expose CakePHP functions and jasny/twig-extensions helpers. Prior to versions 1.3.3 and 2.1.2, if FileLoader::findTemplate is supplied un-validated user controlled data, arbitrary files can be read. This...
CVE-2026-59191
The TwigView plugin for CakePHP is vulnerable to arbitrary file read due to a lack of input validation in the FileLoader::findTemplate() function. An attacker supplying un-validated, user-controlled data to this function can read files from the system. This vulnerability affects versions prior to...
CVE-2026-59191 TwigView: FileLoader is vulnerable to arbitrary file read
TwigView plugin for CakePHP provides wrappers for common View operations and extensions that expose CakePHP functions and jasny/twig-extensions helpers. Prior to versions 1.3.3 and 2.1.2, if FileLoader::findTemplate is supplied un-validated user controlled data, arbitrary files can be read. This...
CVE-2026-59191
TwigView plugin for CakePHP provides wrappers for common View operations and extensions that expose CakePHP functions and jasny/twig-extensions helpers. Prior to versions 1.3.3 and 2.1.2, if FileLoader::findTemplate is supplied un-validated user controlled data, arbitrary files can be read. This...
CVE-2026-59191 TwigView: FileLoader is vulnerable to arbitrary file read
TwigView plugin for CakePHP provides wrappers for common View operations and extensions that expose CakePHP functions and jasny/twig-extensions helpers. Prior to versions 1.3.3 and 2.1.2, if FileLoader::findTemplate is supplied un-validated user controlled data, arbitrary files can be read. This...
CVE-2026-59191: cakephp twig-view: TwigView plugin for CakePHP provides wrappers for common View operations and extensions that expose CakePHP functions…
TwigView plugin for CakePHP provides wrappers for common View operations and extensions that expose CakePHP functions and jasny/twig-extensions helpers. Prior to versions 1.3.3 and 2.1.2, if FileLoader::findTemplate is supplied un-validated user controlled data, arbitrary files can be read. This...
CVE-2025-49132
CVE-2025-49132 - 10.0 Critical https://github.com/pterodactyl/panel/security/advisories/GHSA-24wv-6c99-f843 Vulnerable versions: 1.9.0 .. 1.11.10 OpSec Considerations RCE exploitation is limited but can be detected through: cat /var/www/pterodactyl/storage/logs/laravel-2025--.log | grep...
AlmaLinux 9.6 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1780481964)
The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1780481964 advisory. - The import hook in CPython that handles legacy .pyc files SourcelessFileLoader is incorrectly handled in FileLoader a base class a...
SUSE-SU-2026:1117-1 Security update for python311
This update for python311 fixes the following issues: Update to python 3.11.15: - CVE-2025-6075: quadratic complexity in os.path.expandvars bsc1252974. - CVE-2025-11468: header injection with carefully crafted inputs bsc1257029. - CVE-2025-12084: quadratic complexity in xml.minidom node ID cache...
ROS-20260713-73-0024
The vulnerability of the FileLoader class in the CPython interpreter relates to the disclosure of information in the error-prone data area. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...
Astra Linux – vulnerability in python3.11
The import hook in CPython that handles legacy .pyc files SourcelessFileLoader is mishandled in FileLoader a base class, which consequently does not utilize io.opencode to read those .pyc files. As a result, sys.audit handlers for this audit event fail to trigger...
ROS-20260623-73-0031
The vulnerability of the FileLoader class in the CPython interpreter relates to the disclosure of information in the error-prone data area. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...
ROS-20260623-73-0030
The vulnerability of the FileLoader class in the CPython interpreter relates to the disclosure of information in the error-prone data area. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...
ROS-20260623-73-0032
The vulnerability of the FileLoader class in the CPython interpreter relates to the disclosure of information in the error-prone data area. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...
ROS-20260623-73-0033
The vulnerability of the FileLoader class in the CPython interpreter relates to the disclosure of information in the error-prone data area. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...
ROS-20260623-73-0034
The vulnerability of the FileLoader class in the CPython interpreter relates to the disclosure of information in the error-prone data area. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...
Python FileLoader Data Compromise
The vulnerability of the FileLoader class in the CPython interpreter relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...
openSUSE 15 Security Update : python39 (SUSE-SU-2026:0971-1)
The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:0971-1 advisory. This update for python39 fixes the following issue: - CVE-2026-2297: validation bypass via incorrectly handled hook in FileLoader bsc1259240. Tenable has...
SUSE-SU-2026:0971-1 Security update for python39
This update for python39 fixes the following issue: - CVE-2026-2297: validation bypass via incorrectly handled hook in FileLoader bsc1259240...
BIT-PYTHON-MIN-2026-2297 SourcelessFileLoader does not use io.open_code()
The import hook in CPython that handles legacy .pyc files SourcelessFileLoader is incorrectly handled in FileLoader a base class and so does not use io.opencode to read the .pyc files. sys.audit handlers for this audit event therefore do not fire...