python313-MechanicalSoup-1.4.0-2.4 on GA media (moderate)

python313-MechanicalSoup-1.4.0-2.4 on GA media Announcement ID: openSUSE-SU-2026:11993-1 Rating: moderate Cross-References: CVE-2023-34457 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

PT-2026-105702

These are all security issues fixed in the python313-MechanicalSoup-1.4.0-2.4 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11993-1 python313-MechanicalSoup-1.4.0-2.4 on GA media

These are all security issues fixed in the python313-MechanicalSoup-1.4.0-2.4 package on the GA media of openSUSE Tumbleweed...

EUVD-2023-0143

Malicious code in bioql PyPI...

Fedora: Security Advisory (FEDORA-2024-45b02f63e4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2023-34457

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MechanicalSoup is a Python library for automating interaction with websites. Starting in version 0.2.0 and prior to version 1.3.0, a malicious web server can re...

Fedora 41 : python-mechanicalsoup (2024-45b02f63e4)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-45b02f63e4 advisory. Automatic update for python-mechanicalsoup-1.3.0-1.fc41. Changelog Sun Apr 7 2024 Fabian Affolter - 1.3.0-1 - Update to latest upstream version 1.3.0 closes...

OPENSUSE-SU-2024:13499-1 python310-MechanicalSoup-1.3.0-1.1 on GA media

These are all security issues fixed in the python310-MechanicalSoup-1.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

Arbitrary File Read

MechanicalSoup is vulnerable to Arbitrary File Read. The vulnerability is due to improper file path sanitization which allows an attacker to read arbitrary files on the web server using the tag inside an HTML form...

SUSE CVE-2023-34457

MechanicalSoup is a Python library for automating interaction with websites. Starting in version 0.2.0 and prior to version 1.3.0, a malicious web server can read arbitrary files on the client using a inside HTML form. All users of MechanicalSoup's form submission are affected, unless they took...

aib2ofx (>=0.70.0a1, <=0.71.1), cooar-cli (>=0.1.0, <=0.2.0) +7 more potentially affected by CVE-2023-34457 via mechanicalsoup (>=0.6.0, <=0.12.0)

mechanicalsoup PYPI version =0.6.0, =0.70.0a1, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.2.3, =0.4.11, =0.4.12 Source cves: CVE-2023-34457 Source advisory: GHSA-X456-3CCM-M6J4...

aib2ofx (>=0.70.0a1, <=0.71.1), cooar-cli (>=0.1.0, <=0.2.0) +7 more potentially affected by CVE-2023-34457 via mechanicalsoup (>=0.6.0, <=0.12.0)

mechanicalsoup PYPI version =0.6.0, =0.70.0a1, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.2.3, =0.4.11, =0.4.12 Source cves: CVE-2023-34457 Source advisory: OSV:GHSA-X456-3CCM-M6J4...

MechanicalSoup vulnerable to malicious web server reading arbitrary files on client using file input inside HTML form

Summary A malicious web server can read arbitrary files on the client using a inside HTML form. Details This affects the extremely common pattern of form submission: python b = mechanicalsoup.StatefulBrowser b.selectform... b.submitselected The problem is with the code in...

GHSA-X456-3CCM-M6J4 MechanicalSoup vulnerable to malicious web server reading arbitrary files on client using file input inside HTML form

Summary A malicious web server can read arbitrary files on the client using a inside HTML form. Details This affects the extremely common pattern of form submission: python b = mechanicalsoup.StatefulBrowser b.selectform... b.submitselected The problem is with the code in...

CVE-2023-34457

MechanicalSoup is a Python library for automating interaction with websites. Starting in version 0.2.0 and prior to version 1.3.0, a malicious web server can read arbitrary files on the client using a inside HTML form. All users of MechanicalSoup's form submission are affected, unless they took...

DEBIAN-CVE-2023-34457

MechanicalSoup is a Python library for automating interaction with websites. Starting in version 0.2.0 and prior to version 1.3.0, a malicious web server can read arbitrary files on the client using a inside HTML form. All users of MechanicalSoup's form submission are affected, unless they took...

PYSEC-2023-108

MechanicalSoup is a Python library for automating interaction with websites. Starting in version 0.2.0 and prior to version 1.3.0, a malicious web server can read arbitrary files on the client using a inside HTML form. All users of MechanicalSoup's form submission are affected, unless they took...

playlist-kreator (0.0.3) potentially affected by CVE-2023-34457 via mechanicalsoup (0.10.0)

mechanicalsoup PYPI version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on mechanicalsoup and may be impacted: - playlist-kreator 0.0.3 Source cves: CVE-2023-34457 Source advisory: OSV:PYSEC-2023-108...

mautrix-hangouts (>=0.1.0, <=0.1.1), tulir-hangups (>=0.4.11, <=0.4.12) potentially affected by CVE-2023-34457 via mechanicalsoup (0.6.0)

mechanicalsoup PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on mechanicalsoup and may be impacted: - mautrix-hangouts =0.1.0, =0.4.11, =0.4.12 Source cves: CVE-2023-34457 Source advisory: OSV:PYSEC-2023-108...

playlist-kreator (>=0.0.1, <=0.0.2) potentially affected by CVE-2023-34457 via mechanicalsoup (0.8.0)

mechanicalsoup PYPI version 0.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on mechanicalsoup and may be impacted: - playlist-kreator =0.0.1, =0.0.2 Source cves: CVE-2023-34457 Source advisory: OSV:PYSEC-2023-108...