c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840) potentially affected by CVE-2020-26270 via tensorflow-cpu (2.3.1)

tensorflow-cpu PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - c4v-py =0.1.0.dev1, =0.1.0.dev202107081840 Source cves: CVE-2020-26270 Source advisory: GHSA-M648-33QF-V3GP...

c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840) potentially affected by CVE-2020-26270 via tensorflow-cpu (2.3.1)

tensorflow-cpu PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - c4v-py =0.1.0.dev1, =0.1.0.dev202107081840 Source cves: CVE-2020-26270 Source advisory: OSV:GHSA-M648-33QF-V3GP...

CVE-2020-29651

A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...

CVE-2020-29651

A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...

CVE-2020-29651

A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...

DEBIAN-CVE-2020-29651

A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...

PYSEC-2020-92

A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...

abracadabra (>=0.0.0, <=0.0.5), adamalib (0.1.0) +185 more potentially affected by CVE-2020-29651 via py (>=1.4.26, <=1.9.0)

py PYPI version =1.4.26, =0.0.0, =0.2.0, =1.0.0, =0.3.0, =1.4.6, =0.1.0, =0.2.0, =1.0.0, =1.0.2, =0.0.6, =0.0.7 and more Source cves: CVE-2020-29651 Source advisory: OSV:PYSEC-2020-92...

PYSEC-2020-92

A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...

CVE-2020-29651

A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...

CVE-2020-29651

A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...

CVE-2020-29651

CVE-2020-29651 affects the Python-py (py) package, specifically the py.path.svnwc component, where a denial-of-service can be triggered by crafted input to blame due to a regular-expression vulnerability. The IBM/X-Force entry lists a high/severe risk (base 7.5) and notes the issue stems from a c...

CVE-2020-29651

A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...

abracadabra (>=0.0.0, <=0.0.5), adamalib (0.1.0) +185 more potentially affected by CVE-2020-29651 via py (>=1.4.26, <=1.9.0)

py PYPI version =1.4.26, =0.0.0, =0.2.0, =1.0.0, =0.3.0, =1.4.6, =0.1.0, =0.2.0, =1.0.0, =1.0.2, =0.0.6, =0.0.7 and more Source cves: CVE-2020-29651 Source advisory: MEND:CVE-2020-29651...

CVE-2020-29651: Undefined Security Weakness

A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...

py-matrix-synapse -- DoS on Federation API

Matrix developers reports: A malicious or poorly-implemented homeserver can inject malformed events into a room by specifying a different room id in the path of a /sendjoin, /sendleave, /invite or /exchangethirdpartyinvite request. This can lead to a denial of service in which future events will...

Reference counting error in `From<Py<T>>`

A bug in From would lead to an extra reference count decrement, often leading to use-after-free issues...

RUSTSEC-2020-0074 Reference counting error in `From<Py<T>>`

A bug in From would lead to an extra reference count decrement, often leading to use-after-free issues...

WS-2020-0205

A vulnerability was found in PyO3 before version 0.12.4. A bug in From would lead to an extra reference count decrement, often leading to use-after-free issues. This issue affects only versions 0.12.0 through 0.12.3...

PT-2020-17549

Name of the Vulnerable Software and Affected Versions pyo3 crate versions prior to 0.12.4 Description An issue in the pyo3 crate leads to a reference-counting error and use-after-free in From. This is caused by a bug that results in an extra reference count decrement, often leading to...