960 matches found
GHSA-HFQX-732W-XRRW vulnerabilities
Vulnerabilities for packages: python...
GHSA-HFQX-732W-XRRW vulnerabilities
Vulnerabilities for packages: python...
CVE-2025-12084 vulnerabilities
Vulnerabilities for packages: python...
CVE-2025-13428 RCE in SecOps SOAR server via user-provided Python packages
A vulnerability exists in the SecOps SOAR server. The custom integrations feature allowed an authenticated user with an "IDE role" to achieve Remote Code Execution RCE in the server. The flaw stemmed from weak validation of uploaded Python package code. An attacker could upload a package containi...
EUVD-2025-200121
Malicious code in spellcheckers PyPI...
GHSA-VC2M-M665-8XM2 vulnerabilities
Vulnerabilities for packages: python...
GHSA-VC2M-M665-8XM2 vulnerabilities
Vulnerabilities for packages: python...
MGASA-2025-0289 Updated python-py packages fix security vulnerability
The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS Regular expression Denial of Service attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. CVE-2022-42969...
Important Photon OS Security Update - PHSA-2025-5.0-0657
Updates of 'python3' packages of Photon OS have been released...
GHSA-49G5-F6QW-8MM7 vulnerabilities
Vulnerabilities for packages: python...
GHSA-49G5-F6QW-8MM7 vulnerabilities
Vulnerabilities for packages: python...
[SECURITY] Fedora 41 Update: maturin-1.8.7-2.fc41
Build and publish crates with pyo3, rust-cpython and cffi bindings as well as rust binaries as python packages...
[SECURITY] Fedora 42 Update: maturin-1.8.7-2.fc42
Build and publish crates with pyo3, rust-cpython and cffi bindings as well as rust binaries as python packages...
An Empirical Study of Vulnerabilities in Python Packages and Their Detection
In the rapidly evolving software development landscape, Python stands out for its simplicity, versatility, and extensive ecosystem. Python packages, as units of organization, reusability, and distribution, have become a pressing concern, highlighted by the considerable number of vulnerability...
Ubuntu: Security Advisory (USN-7710-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-8194 vulnerabilities
Vulnerabilities for packages: python...
Alibaba Cloud Linux 3 : 0121: python3.11 (ALINUX3-SA-2025:0121)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0121 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-12718: Allows modifying some file...
RHEL 9 : python3.9 (RHSA-2025:10399)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:10399 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...
MAL-2025-191733 Malicious code in fonafx (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 9441463f029726ea263225e9b0092d82b049e2d7a4e059becd24f5e23c70a906 Series of packages mostly with an obfuscated infostealer attempting to collect Chrome data. While discord webhook is usually set to an example, there are other...