Lucene search
+L

425 matches found

osv_clsa
osv_clsa
•added 2026/09/18 12:47 p.m.•7 views

CLSA-2026-1789735614 python3.11: Fix of 5 CVEs

CVE-2026-87910: tarfile: skip a link member when the extraction filter returns None for its hardlink-extraction fallback instead of ignoring the filter result - CVE-2026-17084: stringprep: build the RFC 3454 B.2/B.3 tables from Unicode 3.2.0 data so IDNA 2003 encoding of newly case-folding...

8.2CVSS7.7AI score0.00734EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/09/16 2:12 p.m.•16 views

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.11: python3.11-3.11.16-1.4.hum1 aarch64, x8664 python3.11-debug-3.11.16-1.4.hum1 aarch64, x8664 python3.11-devel-3.11.16-1.4.hum1 aarch64, x8664 python3.11-idle-3.11.16-1.4.hum1 aarch64,...

8.4CVSS6.2AI score0.00672EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2026/09/15 2:27 p.m.•11 views

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.11: python3.11-3.11.16-1.3.hum1 aarch64, x8664 python3.11-debug-3.11.16-1.3.hum1 aarch64, x8664 python3.11-devel-3.11.16-1.3.hum1 aarch64, x8664 python3.11-idle-3.11.16-1.3.hum1 aarch64,...

5.7CVSS6AI score0.00609EPSS
SaveExploits0References3
osv_root
osv_root
•added 2026/09/11 6:31 a.m.•12 views

ROOT-OS-DEBIAN-12-CVE-2025-69534 CVE-2025-69534 in python3.11 - Patched by Root

Root has patched CVE-2025-69534 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...

7.5CVSS7.3AI score0.00602EPSS
SaveExploits1
RedHat Linux
RedHat Linux
•added 2026/09/08 3:16 p.m.•17 views

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.11: python3.11-3.11.16-1.2.hum1 aarch64, x8664 python3.11-debug-3.11.16-1.2.hum1 aarch64, x8664 python3.11-devel-3.11.16-1.2.hum1 aarch64, x8664 python3.11-idle-3.11.16-1.2.hum1 aarch64,...

6.3CVSS6AI score0.00734EPSS
SaveExploits0References6
osv_root
osv_root
•added 2026/09/07 12:37 p.m.•18 views

ROOT-OS-DEBIAN-12-CVE-2026-6019 CVE-2026-6019 in python3.11 - Patched by Root

Root has patched CVE-2026-6019 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...

6.1CVSS6.8AI score0.00211EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2026/08/31 12:00 a.m.•22 views

Amazon Linux 2023 : python3.11-pip, python3.11-pip-wheel (ALAS2023-2026-2090)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2090 advisory. Internationalized Domain Names in Applications IDNA for Python provides support for Internationalized Domain Names in Applications IDNA and Unicode IDNA Compatibility Processing. In versions...

8.9CVSS6.7AI score0.00682EPSS
SaveExploits0References5
Amazon
Amazon
•added 2026/08/31 12:00 a.m.•29 views

Low: python3.11

Issue Overview: Attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU when applications pass unbounded input to csv.Sniffer.sniff. CVE-2026-18503 Element.findall and fully-consumed Element.iterfind exhibit On^2 time...

2.4CVSS6.1AI score0.00355EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/08/31 12:00 a.m.•22 views

Amazon Linux 2023 : python3.11, python3.11-devel, python3.11-idle (ALAS2023-2026-2125)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2125 advisory. Attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU when applications pass unbounded input to csv.Sniffer.sniff...

2.4CVSS6.2AI score0.00355EPSS
SaveExploits0References6
osv_clsa
osv_clsa
•added 2026/08/29 10:59 a.m.•8 views

CLSA-2026-1788001146 python3.11: Fix of CVE-2026-0864

CVE-2026-0864: normalize CR and CRLF line endings when configparser writes multi-line values, preventing key/value injection into the written file...

5.5CVSS5.9AI score0.00126EPSS
SaveExploits0References2
Fedora
Fedora
•added 2026/08/26 1:13 a.m.•24 views

[SECURITY] Fedora 44 Update: python3.11-3.11.16-1.fc44

Python 3.11 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.11 package provides the "python3.11" executable:...

8.7CVSS7.4AI score0.00672EPSS
SaveExploits0
Fedora
Fedora
•added 2026/08/26 1:04 a.m.•20 views

[SECURITY] Fedora 43 Update: python3.11-3.11.16-1.fc43

Python 3.11 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.11 package provides the "python3.11" executable:...

8.7CVSS7.4AI score0.00672EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/08/26 12:00 a.m.•20 views

Fedora 43 : python3.11 (2026-22170bd5c0)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-22170bd5c0 advisory. Security release of Python 3.11 interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

8.7CVSS7.6AI score0.00672EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/08/26 12:00 a.m.•16 views

Fedora 44 : python3.11 (2026-4d5b2df275)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4d5b2df275 advisory. Security release of Python 3.11 interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

8.7CVSS7.6AI score0.00672EPSS
SaveExploits0References4
osv_clsa
osv_clsa
•added 2026/08/25 12:32 p.m.•10 views

CLSA-2026-1787312520 python3.11: Fix of CVE-2026-0864

CVE-2026-0864: normalize all line endings CR, CRLF, and LF when writing multi-line configparser values to prevent configuration injection...

5.5CVSS5.9AI score0.00126EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/08/25 12:00 a.m.•16 views

TencentOS Server 4: python3.11 (TSSA-2026:0861)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0861 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

7.8CVSS6.5AI score0.00939EPSS
SaveExploits2References2
RedHat Linux
RedHat Linux
•added 2026/08/20 6:45 p.m.•23 views

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.11: python3.11-3.11.16-1.hum1 aarch64, x8664 python3.11-debug-3.11.16-1.hum1 aarch64, x8664 python3.11-devel-3.11.16-1.hum1 aarch64, x8664 python3.11-idle-3.11.16-1.hum1 aarch64, x8664...

6.1CVSS6.1AI score0.00248EPSS
SaveExploits1References5
osv_clsa
osv_clsa
•added 2026/08/20 1:32 p.m.•7 views

CLSA-2026-1787043977 python3.11: Fix of 2 CVEs

CVE-2026-11940: tarfile: validate the link target at the path it is actually extracted to, so a hardlink referencing a deeper symlink can no longer create a symlink outside the destination directory bypass of CVE-2025-4330...

7.8CVSS6.6AI score0.00939EPSS
SaveExploits2References3
osv_clsa
osv_clsa
•added 2026/08/17 11:19 a.m.•9 views

CLSA-2026-1786965561 python3.11: Fix of CVE-2026-11940

CVE-2026-11940: prevent tarfile hardlink fallback symlink escape outside the extraction destination...

7.8CVSS6AI score0.0075EPSS
SaveExploits0References2
osv_clsa
osv_clsa
•added 2026/08/05 8:13 a.m.•8 views

CLSA-2026-1784036547 python3.11: Fix of 2 CVEs

CVE-2026-15308: fix quadratic complexity CPU DoS in incremental HTMLParser feed by buffering pending data until a parse threshold...

8.7CVSS5.9AI score0.00637EPSS
SaveExploits0References3
Rows per page
Query Builder