Letta configuration error vulnerability

Letta versions 0.16.8 and earlier have a configuration error vulnerability. This vulnerability stems from the fact that LETTASERVERSECURE is not enabled in the compose.yaml file. As a result, the password middleware is not added, all API routes are not authenticated, and the PostgreSQL port of th...

djust-org djust path traversal vulnerability

Versions djust-org djust from 0.9.0 up to 1.0.10, from 1.1.0 up to 1.1.7, from 1.2.0.dev0 up to 1.2.4, and from 1.3.0.dev0 up to 1.3.0rc8 contain a path traversal vulnerability. This vulnerability arises because the findhandlersfortemplate MCP tool in python/djust/mcp/server.py fails to restrict...

Python Packaging Authority virtualenv encryption vulnerability

The Python Packaging Authority virtualenv version 21.14.8 has a security vulnerability. This vulnerability stems from downloadwheel, which downloads the package index into a reusable cache before validating the target based on the Saved output from pip. Due to a flaw in the digest comparison, a...

Oracle MySQL Connectors security vulnerabilities

Oracle MySQL Connectors version 26.7.0 contains security vulnerabilities. These vulnerabilities stem from issues with the Connector/Python component. Unauthorized attackers may gain network access through various protocols, potentially allowing them to access critical data or all accessible data...

Vulnerability related to improper handling of virtualenv output by Python Packaging Authority

A security vulnerability exists in Python Packaging Authority virtualenv versions prior to 21.14.2. This vulnerability arises because FishActivator inherits from ViaTemplateActivator.quote and calls POSIX shlex.quote. However, fish interprets backslashes and single quotes differently. Attackers c...

CLSA-2026-1791486224 python: Fix of 3 CVEs

CVE-2026-82049: resolve a hard link's target with os.path.realpath before creating the link, so extracting a hard link to a symlink stored deeper in the archive cannot relocate that symlink to a shallower path where its relative target escapes the destination directory - CVE-2026-11940: re-filter...

CLSA-2026-1791486047 python: Fix of 3 CVEs

CVE-2026-82049: resolve a hard link's target with os.path.realpath before creating the link, so extracting a hard link to a symlink stored deeper in the archive cannot relocate that symlink to a shallower path where its relative target escapes the destination directory - CVE-2026-11940: re-filter...

CLSA-2026-1791485785 python: Fix of 3 CVEs

CVE-2026-82049: resolve a hard link's target with os.path.realpath before creating the link, so extracting a hard link to a symlink stored deeper in the archive cannot relocate that symlink to a shallower path where its relative target escapes the destination directory - CVE-2026-11940: re-filter...

ROOT-APP-PYPI-CVE-2024-37891 CVE-2024-37891 in urllib3 - Patched by Root

Root has patched CVE-2024-37891 in the urllib3 package for Root:PyPI. Multiple fixed versions available...

Important: Red Hat Security Advisory: pcs security update

An update for pcs is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

Security update for python

This update for python fixes the following issue: CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure bsc1280459. Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2026:4738-1 Security update for python

This update for python fixes the following issue: - CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure bsc1280459...

CVE-2026-112140

A vulnerability was found in llSourcell Doctor-Dignity up to 3f2ffb6c892f13b50a708d05900d3227acb40ded. This impacts the function getlibmodule of the file python/mlcchat/chatmodule.py. The manipulation of the argument modellib results in code injection. The attack may be launched remotely. The...

EUVD-2026-104249

A vulnerability was found in llSourcell Doctor-Dignity up to 3f2ffb6c892f13b50a708d05900d3227acb40ded. This impacts the function getlibmodule of the file python/mlcchat/chatmodule.py. The manipulation of the argument modellib results in code injection. The attack may be launched remotely. The...

Important: Red Hat Security Advisory: pcs security update

An update for pcs is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System...

Important: Red Hat Security Advisory: pcs security update

An update for pcs is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

Important: Red Hat Security Advisory: pcs security update

An update for pcs is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

Important: Red Hat Security Advisory: python-lxml security update

An update for python-lxml is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

Important: Red Hat Security Advisory: python-lxml security update

An update for python-lxml is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

[SECURITY] Fedora 44 Update: GitPython-3.2.1-1.fc44

GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing. It provides abstractions of git objects for easy access of repository data, a nd additionally allows you to access the git repository more directly using eith er a...