68061 matches found
PT-2026-56882
Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.10.0 Description Authenticated users can execute Python code or tools within another user's session. This occurs because the get event call function delivers execute:python and execute:tool Socket.IO events to a...
PT-2026-61518
This update for python-sqlparse fixes the following issue - Fixed an issue where formatting list of tuples leads to denial of service bsc1268597...
OPENSUSE-SU-2026:11240-1 python313-websockets-16.0-2.1 on GA media
These are all security issues fixed in the python313-websockets-16.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11236-1 python313-Django6-6.0.7-1.1 on GA media
These are all security issues fixed in the python313-Django6-6.0.7-1.1 package on the GA media of openSUSE Tumbleweed...
RHEL 8 : python-urllib3 (RHSA-2026:36732)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:36732 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...
Fedora 43 : python-jiter / rust-jiter (2026-f774d1a878)
The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-f774d1a878 advisory. Update rust-jiter to 0.16.0, adding a serde Deserializer implementation; update python-jiter to match. Both packages now use PyO3 0.29, with fixes for...
Linux Distros Unpatched Vulnerability : CVE-2026-53511
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - calibre is an e-book manager. Prior to 9.10.0, a malicious EPUB, OPF, or PDF file can execute arbitrary Python code when its metadata is read by calibre,...
OPENSUSE-SU-2026:11238-1 python313-pypdf-6.14.2-1.1 on GA media
These are all security issues fixed in the python313-pypdf-6.14.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11239-1 python313-tornado6-6.5.7-2.1 on GA media
These are all security issues fixed in the python313-tornado6-6.5.7-2.1 package on the GA media of openSUSE Tumbleweed...
Malicious code in tronsev (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 74ab279920219404ed526a79d48c3e9135856fd7905a135ce506c1c148557500 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...
MAL-2026-7025 Malicious code in tronsev (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 74ab279920219404ed526a79d48c3e9135856fd7905a135ce506c1c148557500 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...
CVE-2026-54499
Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. Prior to 1.12.2, Stanza model loaders such as stanza.models.common.pretrain.Pretrain.load attempt torch.load..., weightsonly=True but fall back to torch.load...,...
CVE-2026-55830
RestrictedPython is a tool that helps to define a subset of the Python language which allows to provide a program input into a trusted environment. Prior to 8.3, checkfunctionargumentnames rejected protected guard hook names for regular, variadic, and keyword-only arguments but omitted...
UBUNTU-CVE-2026-55830
RestrictedPython is a tool that helps to define a subset of the Python language which allows to provide a program input into a trusted environment. Prior to 8.3, checkfunctionargumentnames rejected protected guard hook names for regular, variadic, and keyword-only arguments but omitted...
MAL-2026-7023 Malicious code in dbzy-tools (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0432a46ed92acb897826fc16d26cba900bd3d18f0de5baa7f2909a44d9ec625 The package advertises itself as a network debugging tool but its CLI and modules compose a remote-access toolkit. The dbzy-tools console entry calls...
DEBIAN-CVE-2026-54590
AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Version 2.23.0 contains an incomplete fix for CVE-2026-45309 in SSHServerConfig.settokens that blocks /, , and .. before %u substitution in...
UBUNTU-CVE-2026-55195
py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Prior to 1.1.3, py7zr's Worker.decompress extracted archive entries without tracking total decompressed size, allowing a crafted .7z file such as a 15.6 KB archive that expan...
UBUNTU-CVE-2026-55206
py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Prior to 1.1.3, PackInfo.read in archiveinfo.py used an On^2 cumulative sum pattern for attacker-controlled numstreams values parsed from archive headers, allowing a crafted...
