995 matches found
python39:3.9 and python39-devel:3.9 security update
An update is available for module.python-cffi, module.python-more-itertools, python-cffi, python-chardet, python-attrs, module.numpy, python-ply, module.python3x-pyparsing, module.python-psutil, python-wcwidth, python-pycparser, python-psutil, module.python-chardet, module.python-pluggy,...
analysisstore (0.0.5), bluesky-browser (0.1.0a1) +14 more potentially affected by CVE-2026-35536 via tornado (5.0.0b1)
tornado PYPI version 5.0.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - analysisstore 0.0.5 - bluesky-browser 0.1.0a1 - conftrak 0.0.6 - foebackend 1.0.0 - foeworkers 1.0.4 - httpwatcher 0.5.2 - legoman =1.0.0, =0.1....
UBUNTU-CVE-2025-14009
A critical vulnerability exists in the NLTK downloader component of nltk/nltk, affecting all versions. The unzipiter function in nltk/downloader.py uses zipfile.extractall without performing path validation or security checks. This allows attackers to craft malicious zip packages that, when...
GHSA-JH94-8Q48-F3M3 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-1299 vulnerabilities
Vulnerabilities for packages: python...
GHSA-JH94-8Q48-F3M3 vulnerabilities
Vulnerabilities for packages: python...
[SECURITY] Fedora 42 Update: maturin-1.9.6-3.fc42
Build and publish crates with pyo3, rust-cpython and cffi bindings as well as rust binaries as python packages...
GHSA-HRVR-7X5W-XPMQ vulnerabilities
Vulnerabilities for packages: python...
CVE-2024-5642 vulnerabilities
Vulnerabilities for packages: python...
[SECURITY] Fedora 43 Update: maturin-1.9.6-4.fc43
Build and publish crates with pyo3, rust-cpython and cffi bindings as well as rust binaries as python packages...
QRS: A Rule-Synthesizing Neuro-Symbolic Triad for Autonomous Vulnerability Discovery
Static Application Security Testing SAST tools are integral to modern DevSecOps pipelines, yet tools like CodeQL, Semgrep, and SonarQube remain fundamentally constrained: they require expert-crafted queries, generate excessive false positives, and detect only predefined vulnerability patterns...
ado-vllm-performance (>=1.2.2, <=1.3.3), agilerl (>=2.3.5.dev0, <=2.4.1.dev1) +45 more potentially affected by CVE-2026-22778 via vllm (>=0.8.3, <=0.14.0)
vllm PYPI version =0.8.3, =1.2.2, =2.3.5.dev0, =0.2.2, =0.1.0, =0.1.0, =1.0.1rc1, =0.1.21, =0.1.10, =1.1.2, =0.0.4, =0.3.9.post2, =0.5.2, =0.1.1, =0.2.0 and more Source cves: CVE-2026-22778 Source advisory: GHSA-4R2X-XPJR-7CVV...
GHSA-G82H-MGFP-JX8G vulnerabilities
Vulnerabilities for packages: python...
CVE-2025-12781 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-0865 vulnerabilities
Vulnerabilities for packages: python...
GHSA-5MC7-P6PJ-R3F5 vulnerabilities
Vulnerabilities for packages: python...
GHSA-6RV6-R2F2-GQRC vulnerabilities
Vulnerabilities for packages: python...
GHSA-X85F-J5V8-5VRV vulnerabilities
Vulnerabilities for packages: python...