ROOT-OS-DEBIAN-12-CVE-2026-11940 CVE-2026-11940 in python3.11 - Patched by Root

Root has patched CVE-2026-11940 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2023-22946 CVE-2023-22946 in pyspark - Patched by Root

Root has patched CVE-2023-22946 in the pyspark package for Root:PyPI. Multiple fixed versions available...

Security update for python-Django

This update for python-Django fixes the following issues: CVE-2026-15307: server-side file-write and request forgery via spatial lookups bsc1272997. CVE-2026-15337: potential denial-of-service vulnerability in checkforlanguage bsc1272998. CVE-2026-15830: potential denial-of-service vulnerability...

EUVD-2026-53369

Fledge's backup-restore upload handler, uploadbackup python/fledge/services/core/api/backuprestore.py, takes the first extracted tar member's filename tarfilenames0 and builds a shell command via string formatting: cmd = "cp ".formatsource, backuppath; retcode = os.systemcmd. The only pre-check o...

CVE-2026-71259 ESPHome external_components file:// Scheme Validation Bypass Leading to Remote Code Execution

ESPHome through 2026.7.0-dev contains an operator-precedence bug in the cv.url validator in esphome/configvalidation.py: if parsed.scheme and parsed.netloc or parsed.scheme == "file": return parsed.geturl. Because and binds tighter than or, any file: URI passes validation regardless of netloc. Th...

python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

A flaw was found in Python. Its incremental HTML parser can be exploited by a remote attacker. By sending specially crafted, uncontrolled data with repeated, incomplete markup declarations, the attacker can cause the system to consume excessive central processing unit CPU resources. This leads to...

Important: Red Hat Security Advisory: python3.12 security update

An update for python3.12 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHSA-2026:50065 Red Hat Security Advisory: python3 security update

Bulletin has no description...

RHSA-2026:50064 Red Hat Security Advisory: python3 security update

Bulletin has no description...

ROOT-APP-PYPI-CVE-2026-41182 CVE-2026-41182 in langsmith - Patched by Root

Root has patched CVE-2026-41182 in the langsmith package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-45134 CVE-2026-45134 in langsmith - Patched by Root

Root has patched CVE-2026-45134 in the langsmith package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-48775 CVE-2026-48775 in langgraph-checkpoint - Patched by Root

Root has patched CVE-2026-48775 in the langgraph-checkpoint package for Root:PyPI. Multiple fixed versions available...

CVE-2026-69249 vulnerabilities

Vulnerabilities for packages: openstack-nova-2026.1, openstack-glance-2025.2, openstack-nova-2025.2, apache-beam-python-3.12-sdk, openstack-glance-2025.1, apache-beam-python-3.13-sdk, openstack-glance-2026.1, openstack-nova-2025.1, apache-beam-python-3.11-sdk...

CVE-2026-69248 vulnerabilities

Vulnerabilities for packages: openstack-nova-2026.1, openstack-glance-2025.2, openstack-nova-2025.2, apache-beam-python-3.12-sdk, openstack-glance-2025.1, apache-beam-python-3.13-sdk, openstack-glance-2026.1, openstack-nova-2025.1, apache-beam-python-3.11-sdk...

GHSA-JWV3-5HGF-82WW vulnerabilities

Vulnerabilities for packages: openstack-nova-2026.1, openstack-glance-2025.2, openstack-nova-2025.2, apache-beam-python-3.12-sdk, openstack-glance-2025.1, apache-beam-python-3.13-sdk, openstack-glance-2026.1, openstack-nova-2025.1, apache-beam-python-3.11-sdk...

GHSA-M2H6-J472-RP4C vulnerabilities

Vulnerabilities for packages: openstack-nova-2026.1, openstack-glance-2025.2, openstack-nova-2025.2, apache-beam-python-3.12-sdk, openstack-glance-2025.1, apache-beam-python-3.13-sdk, openstack-glance-2026.1, openstack-nova-2025.1, apache-beam-python-3.11-sdk...

ROOT-APP-PYPI-GHSA-GR75-JV2W-4656 GHSA-gr75-jv2w-4656 in langchain - Patched by Root

Root has patched GHSA-gr75-jv2w-4656 in the langchain package for Root:PyPI. Multiple fixed versions available...

MAL-2026-12113 Malicious code in python-bitcoinlib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfb9c83260c4fb83a678636e1e1c028f2aff3e3c0a0ac13728cfa2056a13389f This npm package, published under the well-known PyPI name python-bitcoinlib, ships a postinstall.js lifecycle script that runs automatically on npm...

CVE-2026-6879

A flaw was found in Python's xml.etree.ElementPath component. This vulnerability can lead to a denial of service DoS when processing specially crafted XML documents. Specifically, certain XPath index predicates used with functions like Element.findall and Element.iterfind can cause the processing...

Security update for python-nltk (important)

openSUSE Security Update: Security update for python-nltk Announcement ID: openSUSE-SU-2026:0277-1 Rating: important References: 1273252 1273254 1273255 Cross-References: CVE-2026-12061 CVE-2026-12072 CVE-2026-12074 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes three...