995 matches found
CVE-2026-44971 GuardDog: Blind GitHub URL rewrite in remote project scanning causes SSRF and `GH_TOKEN` exfiltration
GuardDog is a CLI tool to identify malicious PyPI packages. From 1.0.0 to 2.9.0, the programmatic remote project scanning path rewrites attacker-controlled repository URLs using a blind string replacement and then sends the caller's GitHub credentials with the resulting request. This allows an...
CVE-2026-44971
GuardDog is a CLI tool to identify malicious PyPI packages. From 1.0.0 to 2.9.0, the programmatic remote project scanning path rewrites attacker-controlled repository URLs using a blind string replacement and then sends the caller's GitHub credentials with the resulting request. This allows an...
GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack Infrastructure
CrowdStrike, in partnership with Google and the Shadowserver Foundation, has announced the simultaneous disruption of all command-and-control C2 channels associated with GlassWorm, a persistent software chain campaign targeting software developers through malicious packages and extensions. "Since...
GHSA-J989-FGGP-QGP5 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-8328 vulnerabilities
Vulnerabilities for packages: python...
GHSA-J989-FGGP-QGP5 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-8328 vulnerabilities
Vulnerabilities for packages: python...
GHSA-2755-2MM4-RM5C vulnerabilities
Vulnerabilities for packages: python...
RHEL 8 : python3 (RHSA-2026:11077)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:11077 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...
GHSA-PG25-7CX5-CVCM vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-6100 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-1502 vulnerabilities
Vulnerabilities for packages: python...
GHSA-HJXQ-7W9Q-2JW6 vulnerabilities
Vulnerabilities for packages: python...
GHSA-PG25-7CX5-CVCM vulnerabilities
Vulnerabilities for packages: python...
GHSA-HJXQ-7W9Q-2JW6 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-1502 vulnerabilities
Vulnerabilities for packages: python...
RHEL 8 : python3 (RHSA-2026:9289)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:9289 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: pytest: python3-pytest-9.0.3-1.hum1 noarch pytest-9.0.3-1.hum1.src src...
Amazon Linux 2023 : python3, python3-devel, python3-idle (ALAS2023-2026-1583)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1583 advisory. When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting headers into email message...