68066 matches found
Malicious code in pyqt6darktheme (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 8cd6d16792d681b160ae1e11b3f698d8fd3004cd6019704008ad1c649fbe6f67 Package downloads and runs a remote executable, which was found to downloads further exes and starting coine mining --- Category: MALICIOUS - The campaign has...
[SECURITY] Fedora 43 Update: python-cramjam-2.11.0-12.fc43
Thin Python bindings to de/compression algorithms in Rust...
[SECURITY] Fedora 43 Update: python-rignore-0.7.6-7.fc43
rignore is a Python module that provides a high-performance, Rust-powered file system traversal functionality. It wraps the Rust ignore crate using PyO3, offering an efficient way to walk through directories while respecting various ignore rules...
[SECURITY] Fedora 43 Update: python-fastar-0.11.0-7.fc43
The fastar library wraps the Rust tar, flate2, and zstd crates, providing a high-performance way to work with compressed and uncompressed tar archives in Python...
[SECURITY] Fedora 44 Update: python-cramjam-2.11.0-12.fc44
Thin Python bindings to de/compression algorithms in Rust...
[SECURITY] Fedora 44 Update: python-rignore-0.7.6-7.fc44
rignore is a Python module that provides a high-performance, Rust-powered file system traversal functionality. It wraps the Rust ignore crate using PyO3, offering an efficient way to walk through directories while respecting various ignore rules...
[SECURITY] Fedora 44 Update: python-fastar-0.11.0-7.fc44
The fastar library wraps the Rust tar, flate2, and zstd crates, providing a high-performance way to work with compressed and uncompressed tar archives in Python...
VS Code 1.120.0 Security Audit and Integrity Scanner
This Python script performs a security audit of Visual Studio Code extensions by scanning installed extension directories, collecting metadata, and generating an integrity report...
OpenCATS 0.9.7.4 Time-Based Blind SQL Injection
This Python script targets a remote SQL injection vulnerability in OpenCATS version 0.9.7.4...
CVE-2026-15062: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerabilities in the Snowflake Snowpark Python SDK snowpark-python versions prior to 1.53.0 could allow authenticated low-privilege users to execute SQL beyond their authorization scope. An attacker could exploit these vulnerabilities by embedding SQL payloads in source database...
RockyLinux 9 : python3.14-pip (RLSA-2026:36315)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:36315 advisory. python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite CVE-2026-8643 Tenable has extracted the...
angr 9.2.223
angr is an open-source binary analysis platform for Python. It combines both static and dynamic symbolic "concolic" analysis, providing tools to solve a variety of tasks...
CVE-2026-54499: Deserialization of Untrusted Data
Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. Prior to 1.12.2, Stanza model loaders such as stanza.models.common.pretrain.Pretrain.load attempt torch.load..., weightsonly=True but fall back to torch.load...,...
VS Code 1.120.0 Extension Persistence Module for Security Assessment
This Python module demonstrates a VS Code extension persistence mechanism by creating and managing a custom extension within the Visual Studio Code extensions directory...
OPENSUSE-SU-2026:11220-1 python313-pytest-html-4.2.0-4.1 on GA media
These are all security issues fixed in the python313-pytest-html-4.2.0-4.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-59821: Improper Control of Generation of Code
LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. Prior to 1.82.0-stable, LiteLLM's Custom Code Guardrails production create and update paths did not apply the same sandboxing and validation used by the test endpoint, allowing a privileged user with access to creat...
CVE-2026-59929: Improper Neutralization of Input During Web Page Generation
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the safeurl filter in src/mistune/renderers/html.py blocks only javascript:, vbscript:, file:, and data: schemes, allowing legacy or chained schemes such as feed:, view-source:, jar:, livescript:, mocha:, ms-its:, mk:...
Moderate: python-urllib3 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
ALSA-2026:36732 Moderate: python-urllib3 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
