CLEANSTART-2026-BS13854 urllib3 is an HTTP client library for Python

Security vulnerability affects the apache-superset package. urllib3 is an HTTP client library for Python...

CLEANSTART-2026-IP34517 urllib3 is an HTTP client library for Python

Security vulnerability affects the apache-superset package. urllib3 is an HTTP client library for Python...

Linux Distros Unpatched Vulnerability : CVE-2026-114614

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.13 until 1.8.0, authlib.common.security.issecuretransport uses a textual prefi...

Linux Distros Unpatched Vulnerability : CVE-2026-114615

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Authlib is a Python library which builds OAuth and OpenID Connect servers. From 1.3.1 until 1.9.0, OctKey.importkey checks asymmetric-key markers only at byte...

AlmaLinux 9.2 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc (ALMALINUX9.2:CLSA-2026:1792794952)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792794952 advisory. - The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replac...

Linux Distros Unpatched Vulnerability : CVE-2026-114145

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython is a python library used to interact with Git repositories. Prior to 3.2.1, createsubmodule in git/objects/submodule/base.py accepts an...

Linux Distros Unpatched Vulnerability : CVE-2026-114610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fpdf2 is a PDF creation library for Python. From 2.5.0 until 2.8.8, fpdf2's SVGObject.buildxref passes nested SVG references to GraphicsContext.additem, whose...

ROS-20261023-73-0175

The vulnerability in python-multipart is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

angr 10.0.5

angr is an open-source binary analysis platform for Python. It combines both static and dynamic symbolic "concolic" analysis, providing tools to solve a variety of tasks...

PT-2026-122202

Name of the Vulnerable Software and Affected Versions AWS MCP Server affected versions not specified Description An incomplete list of disallowed inputs in the Python code validator of the 'run script' tool allows an authenticated remote user to execute arbitrary code within their own isolated...

SUSE SLES16 Security Update : python-soupsieve (SUSE-SU-2026:24267-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:24267-1 advisory. - CVE-2026-85999: quadratic complexity when running the whitespace/comment trimming regex REWSEND can lead to DoS bsc1281119. -...

MiracleLinux 8 : python3-3.6.8-79.el8_10.ML.1 (AXSA:2026-2123:11)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2123:11 advisory. python: python: Arbitrary file deletion via race condition during temporary directory cleanup CVE-2026-12345 python: python: Certificate verificatio...

PT-2026-122146

Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to execute arbitrary Python code by crafting a malicious pickle file loaded through the deprecated pandas packaged builder. Attackers can supply a pickle-backed dataset that is processed b...

Linux Distros Unpatched Vulnerability : CVE-2026-83404

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Python. The supported version that is affected is 26.7.0. Easily exploitable...

ROS-20261023-73-0177

The vulnerability in python-multipart is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20261023-73-0172

The vulnerability in python-multipart is related to incorrect input of configuration data. The vulnerability can be exploited remotely...

ROS-20261023-73-0179

The vulnerability in python-multipart is related to the occurrence of interpretation conflicts. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20261023-73-0133

The vulnerability in python-pulpcore is related to the lack of protection for the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

ROS-20261023-73-0181

The vulnerability in python-multipart is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Linux Distros Unpatched Vulnerability : CVE-2026-114617

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, OpenIDMixin.parseidtoken reads the noncesupported decision from the...