ROOT-APP-PYPI-CVE-2026-44307 CVE-2026-44307 in mako - Patched by Root

Root has patched CVE-2026-44307 in the mako package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-41066 CVE-2026-41066 in lxml - Patched by Root

Root has patched CVE-2026-41066 in the lxml package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2025-69277 CVE-2025-69277 in PyNaCl - Patched by Root

Root has patched CVE-2025-69277 in the PyNaCl package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-59204 CVE-2026-59204 in pillow - Patched by Root

Root has patched CVE-2026-59204 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2023-44271 CVE-2023-44271 in pillow - Patched by Root

Root has patched CVE-2023-44271 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2023-28370 CVE-2023-28370 in tornado - Patched by Root

Root has patched CVE-2023-28370 in the tornado package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-31958 CVE-2026-31958 in tornado - Patched by Root

Root has patched CVE-2026-31958 in the tornado package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-W235-7P84-XX57 GHSA-w235-7p84-xx57 in tornado - Patched by Root

Root has patched GHSA-w235-7p84-xx57 in the tornado package for Root:PyPI. Multiple fixed versions available...

Astra Linux – Vulnerability in python-setuptools

A vulnerability exists in the packageindex module of pypa/setuptools versions up to 69.1.1, allowing for remote code execution through its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are vulnerable t...

ROOT-APP-PYPI-CVE-2025-4565 CVE-2025-4565 in protobuf - Patched by Root

Root has patched CVE-2025-4565 in the protobuf package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-47265 CVE-2026-47265 in aiohttp - Patched by Root

Root has patched CVE-2026-47265 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-34993 CVE-2026-34993 in aiohttp - Patched by Root

Root has patched CVE-2026-34993 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-54280 CVE-2026-54280 in aiohttp - Patched by Root

Root has patched CVE-2026-54280 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2025-67221 CVE-2025-67221 in orjson - Patched by Root

Root has patched CVE-2025-67221 in the orjson package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2023-41419 CVE-2023-41419 in gevent - Patched by Root

Root has patched CVE-2023-41419 in the gevent package for Root:PyPI. Multiple fixed versions available...

SUSE SLED15 / SLES15 Security Update : python3-pip (SUSE-SU-2026:3588-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3588-1 advisory. This update for python3-pip fixes the following issue: - CVE-2026-13346: incorrect handling of doubly-encoded package...

ROOT-APP-PYPI-CVE-2026-34520 CVE-2026-34520 in aiohttp - Patched by Root

Root has patched CVE-2026-34520 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2023-49082 CVE-2023-49082 in aiohttp - Patched by Root

Root has patched CVE-2023-49082 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

SUSE-SU-2026:3588-1 Security update for python3-pip

This update for python3-pip fixes the following issue: - CVE-2026-13346: incorrect handling of doubly-encoded package URLs from malicious indexes allows files to be installed to arbitrary locations on disk bsc1273090...

MAL-2026-13682 Malicious code in btcflx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 839c411e8d33badaebd5e59b2d966dc000e631843a49ce9352caafd1b7dd9e12 Package advertises itself as an HTTP speed-up library but on import of the top-level module unconditionally locates the user's Monero wallet director...