PT-2026-127219

Name of the Vulnerable Software and Affected Versions Model Context Protocol Python SDK versions 1.10.0 through 1.29.1 Model Context Protocol Python SDK versions 2.0.0 through 2.1.1 Description When a connected server declares an outputSchema for a tool, the SDK client validates call tool results...

PT-2026-127225

Name of the Vulnerable Software and Affected Versions MLflow versions 3.12.0 through 3.16.x Description Third-party scorer deserialization in mlflow/genai/scorers/base.py allows the import of request-selected descendants of allowed modules rather than requiring an exact match. An attacker can use...

python-urllib3 security update

1.24.2-11 - CVE-2026-97689 python-urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser memory allocation in chunk parser Resolves: RHEL-282251...

ALSA-2026:90759 Important: python-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

TencentOS Server 4: python-urllib3 (TSSA-2026:1192)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1192 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Oracle Linux 9 : python-urllib3 (ELSA-2026-90494)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-90494 advisory. - CVE-2026-97687 python-urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override Resolves: RHEL-282326 Tenable has extracted...

TencentOS Server 4: python-pip (TSSA-2026:1191)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1191 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Oracle Linux 8 : python-urllib3 (ELSA-2026-90759)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-90759 advisory. 1.24.2-11 - CVE-2026-97689 python-urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser memory allocation in chunk parser Resolve...

AlmaLinux 8 : python-urllib3 (ALSA-2026:90759)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:90759 advisory. urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser CVE-2026-97689 Tenable has extracted the preceding description block directly...

OpenSSH 9.7p1 regreSSHion Mitigation

An Ansible role and Python tool detect OpenSSH versions affected by the regreSSHion signal-handler race and upgrade openssh-server or apply the documented LoginGraceTime 0 workaround...

PT-2026-127745

Summary MLflow 3.12.0 introduced registration and deserialization support for third-party scorers in OSS MLflow. During scorer deserialization, the server accepts a request-controlled Python module path beneath one of four allowed package prefixes, imports that module, obtains a request-controlle...

XZ Utils 5.6.1 Backdoor Detection / Mitigation

An Ansible role and Python tool detect backdoored XZ Utils versions and liblzma libraries associated with CVE-2024-3094, back up affected files, upgrade supported distribution packages, and optionally restart sshd...

PT-2026-127242

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, ast loggrabber executes a Python script from the world-writable /tmp directory. An attacker already authorized to open a...

MiracleLinux 9 : python3.9-3.9.25-7.el9_8.6 (AXSA:2026-2165:08)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2165:08 advisory. python: python: Arbitrary file deletion via race condition during temporary directory cleanup CVE-2026-12345 python: python: Certificate verificatio...

RockyLinux 9 : python3.9 (RLSA-2026:89742)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89742 advisory. python: python: Arbitrary file deletion via race condition during temporary directory cleanup CVE-2026-12345 python: python: Certificate verification...

PT-2026-127213

Name of the Vulnerable Software and Affected Versions Model Context Protocol Python SDK versions 1.10.0 through 1.29.1 Model Context Protocol Python SDK versions 2.0.0 through 2.1.1 Description Server-side bearer authentication configured through AuthSettings with token verifier fails to...

Important: python-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

python-Twisted-doc-26.4.0-4.1 on GA media (moderate)

python-Twisted-doc-26.4.0-4.1 on GA media Announcement ID: openSUSE-SU-2026:12137-1 Rating: moderate Cross-References: CVE-2026-106454 CVSS scores: CVE-2026-106454 SUSE : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerabilit...

python-M2Crypto-doc-0.50.0-2.1 on GA media (moderate)

python-M2Crypto-doc-0.50.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:12136-1 Rating: moderate Cross-References: CVE-2026-109087 CVSS scores: CVE-2026-109087 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2026-109087 SUSE : 9.1...

homoglyphs

THE PROJECT IS ARCHIVED Forks: https://github.com/orsinium/forks Homoglyphs Homoglyphs -- python library for getting homoglyphs and converting to ASCII. Features It's smarter version of confusablehomoglyphs: Autodect or manual choosing category aliases from ISO 15924. Auto or manual load only...