65457 matches found
[SECURITY] Fedora 44 Update: python-jiter-0.16.0-1.fc44
Fast iterable JSON parser...
PT-2026-56836
Name of the Vulnerable Software and Affected Versions pyload-ng affected versions not specified Description An issue exists where the software is susceptible to Server-Side Request Forgery SSRF. The is global address and is global host functions in src/pyload/core/utils/web/check.py rely on...
AlmaLinux 9 : python3.14-pip (ALSA-2026:36315)
The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:36315 advisory. python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite CVE-2026-8643 Tenable has extracted the...
ROS-20260709-73-0034
The vulnerability in python-pip relates to an incorrect restriction on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
PT-2026-56882
Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.10.0 Description Authenticated users can execute Python code or tools within another user's session. This occurs because the get event call function delivers execute:python and execute:tool Socket.IO events to a...
CVE-2026-55865: Loop with Unreachable Exit Condition
Python Liquid is a Python engine for the Liquid template language. Prior to 2.2.1, given a malformed % case % tag without an associated % when % or % else % block and no terminating % endcase % tag, Python Liquid hangs in an infinite loop at parse time because liquid.TokenStream.eof did not give...
OPENSUSE-SU-2026:11239-1 python313-tornado6-6.5.7-2.1 on GA media
These are all security issues fixed in the python313-tornado6-6.5.7-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11236-1 python313-Django6-6.0.7-1.1 on GA media
These are all security issues fixed in the python313-Django6-6.0.7-1.1 package on the GA media of openSUSE Tumbleweed...
MiracleLinux 9 : python-markdown-3.3.4-4.el9_8.2 (AXSA:2026-1228:01)
The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1228:01 advisory. python-markdown: denial of service via malformed HTML-like sequences CVE-2025-69534 Tenable has extracted the preceding description block directly from the...
AlmaLinux 10 : python3.14-pip (ALSA-2026:36193)
The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:36193 advisory. python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite CVE-2026-8643 Tenable has extracted the...
Oracle Linux 9 : python3.14-pip (ELSA-2026-36315)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-36315 advisory. 25.2-5 - Fix gating plan - removed unnecessary older VERSION= tests - removed bootstrap test - fix pipinstallupgrade to run pip-3.14 - fix bash completion +...
Oracle Linux 8 : python-urllib3 (ELSA-2026-36732)
The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-36732 advisory. 1.24.2-10 - Security fix for CVE-2026-44431 Resolves: RHEL-184858 Tenable has extracted the preceding description block directly from the Oracle Linux security...
AlmaLinux 8 : python-urllib3 (ALSA-2026:36732)
The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:36732 advisory. urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers CVE-2026-44431 Tenable has extracted the preceding description...
openSUSE 16 Security Update : python-msgpack (openSUSE-SU-2026:21239-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21239-1 advisory. This update for python-msgpack fixes the following issue - CVE-2026-57585: reusing an Unpacker instance after an error has been caught can lead to an...
Linux Distros Unpatched Vulnerability : CVE-2026-53511
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - calibre is an e-book manager. Prior to 9.10.0, a malicious EPUB, OPF, or PDF file can execute arbitrary Python code when its metadata is read by calibre,...
Linux Distros Unpatched Vulnerability : CVE-2026-59923
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, HTMLRenderer.safeurl does not block percent-encoded javascript URIs, allowing...
PT-2026-56827
Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.10.0 Description Open WebUI runs client-side Python using Pyodide a Python distribution for the browser within a same-origin web worker. This allows stored chat payloads to utilize pyodide.http.pyfetch, the js...
RHEL 8 : python-urllib3 (RHSA-2026:36732)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:36732 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...