AZL-108435 CVE-2026-97032 affecting package python-tensorboard 2.16.2-6

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...

AZL-108441 CVE-2026-97030 affecting package python-tensorboard 2.16.2-6

A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped...

AZL-108468 CVE-2026-94439 affecting package python-tensorboard 2.16.2-6

When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server...

AZL-107856 CVE-2026-78669 affecting package python-tensorboard 2.16.2-6

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...

AZL-108474 CVE-2026-78667 affecting package python-tensorboard 2.16.2-6

When parsing a Range header containing a large number of small ranges, FileServerFS, ServeContent, and ServeFileFS can consume an excessive amount of CPU...

AZL-108438 CVE-2026-78660 affecting package python-tensorboard 2.16.2-6

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...

AZL-108471 CVE-2026-78659 affecting package python-tensorboard 2.16.2-6

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

AZL-108465 CVE-2026-78663 affecting package python-tensorboard 2.16.2-6

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...

AZL-107853 CVE-2026-56866 affecting package python-tensorboard 2.16.2-6

When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the server rejects the CONNECT request with a non-2xx keep-alive response, Transport returns the connection to the idle...

CLSA-2026-1791449247 python-setuptools: Fix of 2 CVEs

Fix NameError on file:// downloads in the CVE-2024-6345 backport...

CLSA-2026-1791500952 python-setuptools: Fix of CVE-2022-40897

CVE-2022-40897: fix ReDoS in the packageindex REL regular expression...

CLSA-2026-1791448913 python-setuptools: Fix of CVE-2024-6345

Fix NameError on file:// downloads in the CVE-2024-6345 backport...

CLSA-2026-1791424578 python: Fix of CVE-2026-19445

CVE-2026-19445: fix use-after-free in the ssl servername SNI callback - the callback reached its SSLContext through a borrowed pointer registered with OpenSSL, so once the callback switched SSLSocket.context to another context and nothing else referenced the original one, the freed object was...

GHSA-86GH-39M5-HHG6 Duplicate Advisory: PYTHON-6110 Out-of-bounds read in BSON decoding via a malformed Regex element

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-98qm-wvgf-w4cf. This link is maintained to preserve external references. Original Description The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON...

Duplicate Advisory: PYTHON-6110 Out-of-bounds read in BSON decoding via a malformed Regex element

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-98qm-wvgf-w4cf. This link is maintained to preserve external references. Original Description The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON...

CVE-2026-106435

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...

AZL-107129 CVE-2026-106435 affecting package python-pymongo 4.2.0-9

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...

DEBIAN-CVE-2026-106435

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...

UBUNTU-CVE-2026-106435

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...

CVE-2026-106435

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...