CVE-2026-85087

The Apache Thrift python bindings are vulnerable to improper certificate validation and the return of wrong status codes in versions before 0.25.0 . A specific underlying cause involves the host-name check silently becoming a no-op when using Python ≥3.12 . This vulnerability can lead to security...

CVE-2026-85087 Apache Thrift: Python ≥3.12 host-name check silently becomes a no-op

Improper certificate validation, Return of wrong status code vulnerability in Apache Thrift python bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-85087 Apache Thrift: Python ≥3.12 host-name check silently becomes a no-op

Improper certificate validation, Return of wrong status code vulnerability in Apache Thrift python bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-94634

Allocation of resources without limits or throttling, Initialization of a resource with an insecure default vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

EUVD-2026-91364

Allocation of resources without limits or throttling, Initialization of a resource with an insecure default vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-94634

The Apache Thrift Python bindings are vulnerable to allocation of resources without limits or throttling and initialization of a resource with an insecure default (CWE-770, CWE-1188). Specifically, the Python TJSONProtocol has a string length limit that is disabled by default. This issue affects ...

die-python

DetectItEasy-Python Native Python 3.11+ bindings for @horsicq's Detect-It-Easy Install From PIP The easiest and recommended installation is through pip. pip install die-python Using Git git clone https://github.com/elastic/die-python cd die-python Install Qt into the build. It can be easily...

AlmaLinux 9.2 [TuxCare] Security Update: libxml2 / libxml2-devel / libxml2-static / python3-libxml2 (ALMALINUX9.2:CLSA-2026:1790833998)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1790833998 advisory. - A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially craft...

Rocky Linux 9.6 [TuxCare] Security Update: libxml2 / libxml2-devel / libxml2-static / python3-libxml2 (ALMALINUX9.6:CLSA-2026:1790786185)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790786185 advisory. - A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially...

Amazon Linux 2 : libxml2 (ALAS-2026-3940)

The version of libxml2 installed on the remote host is prior to 2.9.1-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3940 advisory. A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing ...

pyjadx

pyjadx Python bindings for JADX via JPype. Decompile Android APK and DEX files to Java source from Python. from pyjadx import Jadx with Jadx"app.apk" as jadx: for cls in jadx.classes: printcls.fullname printcls.code Why pyjadx? JADX is the leading open-source Android decompiler — it produces clea...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in Apache Thrift (CVE-2026-41608, CVE-2026-66053)

Summary Multiple Denial of Service vulnerabilities in Apache Thrift CVE-2026-41608, CVE-2026-66053 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 0.24.0. Vulnerability Details CVEID:CVE-2026-41608 DESCRIPTION: Improper Handling of Highly...

SUSE CVE-2026-74860

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition DTD with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callbac...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : libxml2 vulnerabilities (USN-8787-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8787-1 advisory. It was discovered that libxml2 incorrectly handled certain XML elements under...

libxml2: double-free/UAF in libxml2 Python bindings

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition DTD with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callbac...

libxml2: double-free/UAF in libxml2 Python bindings

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition DTD with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callbac...

libxml2: double-free/UAF in libxml2 Python bindings

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition DTD with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callbac...

ALSA-2026:71586 Important: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow CVE-2026-86138 libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks...

USN-8787-1: libxml2 vulnerabilities

It was discovered that libxml2 incorrectly handled certain XML elements under certain circumstances. An attacker could possibly use this issue to cause libxml2 to crash or execute arbitrary code. CVE-2026-86140 It was discovered that libxml2 incorrectly handled certain XML documents when used wit...

USN-8787-1 libxml2 vulnerabilities

It was discovered that libxml2 incorrectly handled certain XML elements under certain circumstances. An attacker could possibly use this issue to cause libxml2 to crash or execute arbitrary code. CVE-2026-86140 It was discovered that libxml2 incorrectly handled certain XML documents when used wit...