bedrock (0.1.0.dev10), dbcollection (>=0.2.2, <=0.2.6) +19 more potentially affected by CVE-2021-27921 via pillow (5.1.0)

pillow PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - bedrock 0.1.0.dev10 - dbcollection =0.2.2, =0.0.6, =1.0.0, =0.0.0a1, =0.1.0, =4.0.0, =4.0.0, =4.0.0, =4.1.1 and more Source cves: CVE-2021-27921...

py-markdown2 -- regular expression denial of service vulnerability

Ben Caller reports: markdown2 =1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of service vulnerability. If an attacker provides a malicious string, it can make markdown2 processing difficult or delayed for an extended period of time...

polyswarm-api (>=0.1.0, <=0.2.2), polyswarm-client (>=1.0.0rc0, <=1.0.2) +1 more potentially affected by CVE-2021-21330 via aiohttp (2.3.1)

aiohttp PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - polyswarm-api =0.1.0, =1.0.0rc0, =0.2.0a7, =0.2.0a10 Source cves: CVE-2021-21330 Source advisory: OSV:GHSA-V6WP-4M6F-GCJG...

tensorflow-py:sparseCountSparseOutput_fuzz: Crash in std::pair<absl::lts_NUMBER_02_25::container_internal::raw_hash_set<absl::lts_NUM

Detailed Report: https://oss-fuzz.com/testcase?key=5658018218901504 Project: tensorflow-py Fuzzing Engine: libFuzzer Fuzz Target: sparseCountSparseOutputfuzz Job Type: libfuzzerasantensorflow-py Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62c000093d20 Crash State:...

Moderate Photon OS Security Update - PHSA-2021-0362

Updates of 'unbound', 'binutils', 'mysql' packages of Photon OS have been released...

Updated python-py packages fix a security vulnerability

A denial of service via regular expression in the py.path.svnwc component of python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality CVE-2020-29651...

MGASA-2021-0071 Updated python-py packages fix a security vulnerability

A denial of service via regular expression in the py.path.svnwc component of python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality CVE-2020-29651...

tensorflow-py:immutableConst_fuzz: Segv on unknown address in tensorflow::TensorHandle::TensorHandle

Detailed Report: https://oss-fuzz.com/testcase?key=5351196414050304 Project: tensorflow-py Fuzzing Engine: libFuzzer Fuzz Target: immutableConstfuzz Job Type: libfuzzerasantensorflow-py Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

tensorflow-py:immutableConst_fuzz: Segv on unknown address in tensorflow::EagerContext::FindDeviceFromName

Detailed Report: https://oss-fuzz.com/testcase?key=4713652877918208 Project: tensorflow-py Fuzzing Engine: libFuzzer Fuzz Target: immutableConstfuzz Job Type: libfuzzerasantensorflow-py Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

admindjango-ckeditor-blog (0.1.0), demosys-py (>=0.3.13, <=0.4.0) +3 more potentially affected by CVE-2020-35653 via pillow (4.1.1)

pillow PYPI version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - admindjango-ckeditor-blog 0.1.0 - demosys-py =0.3.13, =0.9.0, =1.1.0, =1.3.1 Source cves: CVE-2020-35653 Source advisory: OSV:PYSEC-2021-69...

admindjango-ckeditor-blog (0.1.0), demosys-py (>=0.3.13, <=0.4.0) +3 more potentially affected by CVE-2020-35654 via pillow (4.1.1)

pillow PYPI version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - admindjango-ckeditor-blog 0.1.0 - demosys-py =0.3.13, =0.9.0, =1.1.0, =1.3.1 Source cves: CVE-2020-35654 Source advisory: OSV:PYSEC-2021-70...

bedrock (0.1.0.dev10), dbcollection (>=0.2.2, <=0.2.6) +19 more potentially affected by CVE-2020-35653 via pillow (5.1.0)

pillow PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - bedrock 0.1.0.dev10 - dbcollection =0.2.2, =0.0.6, =1.0.0, =0.0.0a1, =0.1.0, =4.0.0, =4.0.0, =4.0.0, =4.1.1 and more Source cves: CVE-2020-35653...

CVE-2020-29651 affecting package python-py 1.6.0-4

CVE-2020-29651 affecting package python-py 1.6.0-4. An upgraded version of the package is available that resolves this issue...

Fedora: Security Advisory for python-py (FEDORA-2020-8371993b6b)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 32 Update: python-py-1.10.0-1.fc32

The py lib is a Python development support library featuring the following tools and modules: py.path: uniform local and svn path objects py.apipkg: explicit API control and lazy-importing py.iniconfig: easy parsing of .ini files py.code: dynamic code generation and introspection py.path: uniform...

Fedora 33 : python-py (2020-8371993b6b)

1.10.0 2020-12-12 - Fix a regular expression DoS vulnerability in the py.path.svnwc SVN blame functionality CVE-2020-29651 - Update vendored apipkg: 1.4 = 1.5 - Update vendored iniconfig: 1.0.0 = 1.1.1 Note that Tenable Network Security has extracted the preceding description block directly from...

CVE-2020-35917

An issue was discovered in the pyo3 crate before 0.12.4 for Rust. There is a reference-counting error and use-after-free in From...

CVE-2020-35917

An issue was discovered in the pyo3 crate before 0.12.4 for Rust. There is a reference-counting error and use-after-free in From...

FreeBSD : py-matrix-synapse -- DoS on Federation API (cfa0be42-3cd7-11eb-9de7-641c67a117d8)

Matrix developers reports : A malicious or poorly-implemented homeserver can inject malformed events into a room by specifying a different room id in the path of a /sendjoin, /sendleave, /invite or /exchangethirdpartyinvite request. This can lead to a denial of service in which future events will...

c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840) potentially affected by CVE-2020-26270 via tensorflow-cpu (2.3.1)

tensorflow-cpu PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - c4v-py =0.1.0.dev1, =0.1.0.dev202107081840 Source cves: CVE-2020-26270 Source advisory: OSV:PYSEC-2020-301...