Important: pcs security update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: python-tornado: Tornado: Denial of Service via excessive URL-encoded body fields CVE-2026-82397 python-tornado: Tornado before 6.4.1 HTTP Request Smuggling via Transfer-Encoding...

RHEL 8 : python3 (RHSA-2026:85239)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:85239 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

ALSA-2026:85239 Important: python3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

RHEL 8 : pcs (RHSA-2026:84844)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84844 advisory. The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: python-tornado:...

ROS-20261019-73-0040

The vulnerability in python-marshmallow relates to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

AlmaLinux 8 : pcs (ALSA-2026:84798)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:84798 advisory. python-tornado: Tornado: Denial of Service via excessive URL-encoded body fields CVE-2026-82397 python-tornado: Tornado before 6.4.1 HTTP Request Smuggli...

RHEL 8 : pcs (RHSA-2026:85135)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:85135 advisory. The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: python-tornado:...

openSUSE 16 Security Update : python-virtualenv (openSUSE-SU-2026:22100-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22100-1 advisory. - CVE-2026-102930: missing hash verification for network-fetched wheels can allow wheel tampering bsc1283904. - CVE-2026-102938: crafted prompt...

openSUSE 16 Security Update : python-oauthlib (openSUSE-SU-2026:22103-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22103-1 advisory. - CVE-2026-49264: Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation bsc1283526. -...

PT-2026-117520

Name of the Vulnerable Software and Affected Versions AIOHTTP versions prior to 3.14.4 Description The pure Python parser in this asynchronous HTTP client/server framework accepts ambiguous HTTP request framing. This allows an unauthenticated attacker to perform request smuggling when an...

CVE-2026-111063: Missing Encryption of Sensitive Data

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the Secure attribute for a shared cookie is not enforced. An attacker can consequently cause a shared cookie marked Secure to be sent with an unencrypted request. This issue is fixed in version 3.14.4...

mcp-patch-gap-scanner

mcp-patch-gap-scanner Deterministic version-vs-CVE report for...

Siraj Raval Doctor Dignity input validation error vulnerability

Siraj Raval Doctor Dignity has a security vulnerability, which stems from the operation of the modellib parameter in the function getlibmodule in the file python/mlcchat/chatmodule.py. This vulnerability may lead to remote code injection...

aio-libs Async HTTP client/server framework: Input validation error vulnerability

The aio-libs Async HTTP client/server framework versions prior to 3.14.4 have a vulnerability related to input validation errors. This vulnerability stems from the use of a pure Python parser that accepts ambiguous HTTP request frames. This could allow unvalidated attackers to inject HTTP request...

Security update for python-oauthlib (moderate)

openSUSE security update: security update for python-oauthlib ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22103-1 Rating: moderate References: bsc1283526 bsc1283527 Cross-References: CVE-2026-49264 CVE-2026-49265 CVSS scores: CVE-2026-49264 SUSE...

Security update for python-jwcrypto (moderate)

openSUSE security update: security update for python-jwcrypto ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22073-1 Rating: moderate References: bsc1280816 Cross-References: CVE-2026-92091 CVSS scores: CVE-2026-92091 SUSE : 5.3...

Security update for python-tornado6 (important)

openSUSE security update: security update for python-tornado6 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22059-1 Rating: important References: bsc1261922 bsc1277725 bsc1281439 bsc1281440 Cross-References: CVE-2026-82397 CVE-2026-91990...

Security update for python-urllib3 (important)

openSUSE security update: security update for python-urllib3 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22071-1 Rating: important References: bsc1283908 bsc1283909 bsc1283910 Cross-References: CVE-2026-97687 CVE-2026-97688 CVE-2026-97689 CVSS...

Security update for python-hpack (moderate)

openSUSE security update: security update for python-hpack ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22070-1 Rating: moderate References: bsc1283035 Cross-References: CVE-2026-59980 CVSS scores: CVE-2026-59980 SUSE : 5.3...

Security update for python-virtualenv (important)

openSUSE security update: security update for python-virtualenv ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22100-1 Rating: important References: bsc1283890 bsc1283904 Cross-References: CVE-2026-102930 CVE-2026-102938 CVSS scores: CVE-2026-10293...