5 matches found
CVE-2026-33154
Relatório de Vulnerabilidade de SSTI no Dynaconf Resumo O Dynaconf é vulnerável a Injeção de Template no Servidor SSTI devido à avaliação insegura de templates no resolvedor @Jinja. Quando o pacote jinja2 está instalado, o Dynaconf avalia expressões de template incorporadas em valores de...
CVE-2026-33229
CVE-2026-33229 — RCE no XWiki via Bypass do Sandbox do Apache Velocity Uma vulnerabilidade de Execução Remota de Código na Plataforma XWiki que permite a um usuário autenticado com permissões de script contornar completamente o sandbox do Apache Velocity — sem necessidade de Reflection em Java —...
Important: Red Hat Security Advisory: python security update
Updated Python packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team Python is an interpreted, interactive, object-oriented programming language. An object...
Important: Red Hat Security Advisory: python security update
Updated Python packages that fix a security issue are now available for Red Hat Enterprise Linux 3. Python is an interpreted, interactive, object-oriented programming language. An object traversal bug was found in the Python SimpleXMLRPCServer. This bug could allow a remote untrusted user to do...
RHEL 3 : python (RHSA-2005:109)
Updated Python packages that fix a security issue are now available for Red Hat Enterprise Linux 3. Python is an interpreted, interactive, object-oriented programming language. An object traversal bug was found in the Python SimpleXMLRPCServer. This bug could allow a remote untrusted user to do...