CVE-2026-101918 affecting package python-jwt for versions less than 2.15.1-1

CVE-2026-101918 affecting package python-jwt for versions less than 2.15.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-102269 affecting package python-jwt for versions less than 2.15.1-1

CVE-2026-102269 affecting package python-jwt for versions less than 2.15.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-102270 affecting package python-jwt for versions less than 2.15.1-1

CVE-2026-102270 affecting package python-jwt for versions less than 2.15.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-102266 affecting package python-jwt for versions less than 2.15.1-1

CVE-2026-102266 affecting package python-jwt for versions less than 2.15.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-102273 affecting package python-jwt for versions less than 2.15.1-1

CVE-2026-102273 affecting package python-jwt for versions less than 2.15.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-106441

Hydra is a framework for elegantly configuring complex applications. Prior to 1.3.6 and 1.4.0.dev9, Hydra passes Python logging configuration to logging.config.dictConfig without applying Hydra's target policy to handler class values or formatter, filter, handler, queue, and listener factories. A...

CVE-2026-106441 Hydra logging configuration permits unsafe callable resolution

Hydra is a framework for elegantly configuring complex applications. Prior to 1.3.6 and 1.4.0.dev9, Hydra passes Python logging configuration to logging.config.dictConfig without applying Hydra's target policy to handler class values or formatter, filter, handler, queue, and listener factories. A...

CVE-2026-106441 Hydra logging configuration permits unsafe callable resolution

Hydra is a framework for elegantly configuring complex applications. Prior to 1.3.6 and 1.4.0.dev9, Hydra passes Python logging configuration to logging.config.dictConfig without applying Hydra's target policy to handler class values or formatter, filter, handler, queue, and listener factories. A...

CVE-2026-106440 Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_method

Hydra is a framework for elegantly configuring complex applications. From 1.2.0 until 1.3.0 and 1.4.0.dev10, the hydra-optuna-sweeper package accepts a configuration-controlled dotted path in hydra.sweeper.customsearchspace, resolves it with hydra.utils.getmethod, and later invokes the returned...

erl_mouse

erlmouse Version 1.1 Okay, ich habe einige Dinge verbessert, um die Chancen zu erhöhen, ein anfälliges Gerät oder Netzwerk zu finden. Die meisten sind nicht öffentlich erreichbar, wurden gepatcht oder sind so obskur, dass es schwierig sein kann, ein Ziel zu finden. Trotzdem bleiben wir dran. Sie...

openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation

Impact A malicious OpenAPI document processed by any openapi-python-client prior to 0.29.1 can generate arbitrary Python code. When anyone imports the malicious client, that arbitrary Python code will execute. Patches Versions starting with 0.29.1 have updated with guardrails to prevent arbitrary...

aas2openapi (>=0.2.0, <=0.2.4), agentics-py (>=0.0.7, <=0.3.6) +11 more potentially affected by CVE-2026-105801 via openapi-python-client (>=0.14.1, <=0.29.0)

openapi-python-client PYPI version =0.14.1, =0.2.0, =0.0.7, =1.0.36, =25.12.0, =0.1.2, =1.5.0, =0.1.0, =0.25.2rc1, =0.2.0, =0.1.0, =2.0.0, =2.3.0 Source cves: CVE-2026-105801 Source advisory: OSV:GHSA-5293-MQ8X-G3XJ...

aas2openapi (>=0.2.0, <=0.2.4), agentics-py (>=0.0.7, <=0.3.6) +11 more potentially affected by CVE-2026-105801 via openapi-python-client (>=0.14.1, <=0.29.0)

openapi-python-client PYPI version =0.14.1, =0.2.0, =0.0.7, =1.0.36, =25.12.0, =0.1.2, =1.5.0, =0.1.0, =0.25.2rc1, =0.2.0, =0.1.0, =2.0.0, =2.3.0 Source cves: CVE-2026-105801 Source advisory: GHSA-5293-MQ8X-G3XJ...

aas2openapi (>=0.2.0, <=0.2.4), agentics-py (>=0.0.7, <=0.3.6) +11 more potentially affected by CVE-2026-105801 via openapi-python-client (>=0.14.1, <=0.29.0)

openapi-python-client PYPI version =0.14.1, =0.2.0, =0.0.7, =1.0.36, =25.12.0, =0.1.2, =1.5.0, =0.1.0, =0.25.2rc1, =0.2.0, =0.1.0, =2.0.0, =2.3.0 Source cves: CVE-2026-105801 Source advisory: SNYK:PYTHON-OPENAPIPYTHONCLIENT-21692669...

Improper Neutralization

Overview openapi-python-client is a package that generates modern Python clients from OpenAPI. Affected versions of this package are vulnerable to Improper Neutralization via insufficient sanitization of OpenAPI document content when generating Python client code. An attacker who controls the...

GHSA-5293-MQ8X-G3XJ openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation

Impact A malicious OpenAPI document processed by any openapi-python-client prior to 0.29.1 can generate arbitrary Python code. When anyone imports the malicious client, that arbitrary Python code will execute. Patches Versions starting with 0.29.1 have updated with guardrails to prevent arbitrary...

CVE-2026-105801

openapi-python-client generates Python clients from OpenAPI documents. Prior to 0.29.1, the generator does not safely neutralize malicious OpenAPI document content before rendering string, docstring, and f-string contexts in generated Python. The generated Python client can contain...

CVE-2026-105801 openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation

openapi-python-client generates Python clients from OpenAPI documents. Prior to 0.29.1, the generator does not safely neutralize malicious OpenAPI document content before rendering string, docstring, and f-string contexts in generated Python. The generated Python client can contain...

CVE-2026-105801 openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation

openapi-python-client generates Python clients from OpenAPI documents. Prior to 0.29.1, the generator does not safely neutralize malicious OpenAPI document content before rendering string, docstring, and f-string contexts in generated Python. The generated Python client can contain...

CVE-2026-105801

The openapi-python-client library (prior to version 0.29.1 ) is vulnerable to arbitrary code generation because it fails to neutralize malicious content within OpenAPI documents before rendering string, docstring, and f-string contexts . An attacker providing a malicious OpenAPI document can caus...