995 matches found
Important Photon OS Security Update - PHSA-2025-5.0-0657
Updates of 'python3' packages of Photon OS have been released...
npm, PyPI, and RubyGems Packages Found Sending Developer Data to Discord Channels
Cybersecurity researchers have identified several malicious packages across npm, Python, and Ruby ecosystems that leverage Discord as a command-and-control C2 channel to transmit stolen data to actor-controlled webhooks. Webhooks on Discord are a way to post messages to channels in the platform...
GHSA-49G5-F6QW-8MM7 vulnerabilities
Vulnerabilities for packages: python...
GHSA-49G5-F6QW-8MM7 vulnerabilities
Vulnerabilities for packages: python...
[SECURITY] Fedora 41 Update: maturin-1.8.7-2.fc41
Build and publish crates with pyo3, rust-cpython and cffi bindings as well as rust binaries as python packages...
[SECURITY] Fedora 42 Update: maturin-1.8.7-2.fc42
Build and publish crates with pyo3, rust-cpython and cffi bindings as well as rust binaries as python packages...
An Empirical Study of Vulnerabilities in Python Packages and Their Detection
In the rapidly evolving software development landscape, Python stands out for its simplicity, versatility, and extensive ecosystem. Python packages, as units of organization, reusability, and distribution, have become a pressing concern, highlighted by the considerable number of vulnerability...
Ubuntu: Security Advisory (USN-7710-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-8194 vulnerabilities
Vulnerabilities for packages: python...
Alibaba Cloud Linux 3 : 0121: python3.11 (ALINUX3-SA-2025:0121)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0121 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-12718: Allows modifying some file...
RHEL 9 : python3.9 (RHSA-2025:10399)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:10399 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...
MAL-2025-191733 Malicious code in fonafx (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 9441463f029726ea263225e9b0092d82b049e2d7a4e059becd24f5e23c70a906 Series of packages mostly with an obfuscated infostealer attempting to collect Chrome data. While discord webhook is usually set to an example, there are other...
GHSA-J5CC-6RX8-FF96 vulnerabilities
Vulnerabilities for packages: python...
CVE-2025-6069 vulnerabilities
Vulnerabilities for packages: python...
CVE-2025-6069 vulnerabilities
Vulnerabilities for packages: python...
Security Bulletin: IBM Maximo Application Suite uses multiple Python packages which is vulnerable to "CVE-2022-40897, CVE-2024-6345"
Summary IBM Maximo Application Suite uses multiple Python packages which is vulnerable to "CVE-2022-40897, CVE-2024-6345". This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2022-40897 DESCRIPTION: Pypa Setuptools is vulnerable to a...
Security Bulletin: IBM Maximo Application Suite uses multiple Python packages which is vulnerable to "CVE-2024-3651, CVE-2023-32681, CVE-2024-35195, CVE-2024-37891"
Summary IBM Maximo Application Suite uses multiple Python packages which is vulnerable to "CVE-2024-3651, CVE-2023-32681, CVE-2024-35195, CVE-2024-37891". This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2024-3651 DESCRIPTION: idna...
Ubuntu: Security Advisory (USN-7583-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
0xdegenmo-lighter-mcp (0.1.1), 1337x (1.2.5) +2273 more potentially affected by CVE-2025-50181 via urllib3 (>=2.0.0a4, <=2.4.0)
urllib3 PYPI version =2.0.0a4, =1.1.2, =0.1.2, =1.0.0, =0.1.0, =4.8.2, =0.0.4, =2.6.4, =0.1.0, =0.1.2, =0.0.1, =0.0.4 - adversarial-insight-ml 0.1.0 and more Source cves: CVE-2025-50181 Source advisory: GHSA-PQ67-6M6Q-MJ2V...