263380 matches found
EUVD-2026-64847
Xinference loads models with Hugging Face remote code execution unconditionally enabled, and before version 2.12.0 exposes no setting to disable it. Six loader call sites pass trustremotecode=True as a literal or as an unconditional default: RerankModel.gettokenizer in...
CVE-2026-76841
Xinference (by XorbitsAI) through version 2.11.0 unconditionally sets trust_remote_code=True at six model loader call sites spanning the rerank, embedding, and LLM modules. An attacker with model launch access can register a model with an unknown type and an arbitrary path, causing AutoTokenizer....
ROOT-APP-MAVEN-CVE-2019-16335 CVE-2019-16335 in com.fasterxml.jackson.core:jackson-databind - Patched by Root
Root has patched CVE-2019-16335 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2020-24750 CVE-2020-24750 in com.fasterxml.jackson.core:jackson-databind - Patched by Root
Root has patched CVE-2020-24750 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2018-19362 CVE-2018-19362 in com.fasterxml.jackson.core:jackson-databind - Patched by Root
Root has patched CVE-2018-19362 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...
RLSA-2026:58561 Important: python-urwid security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
python-urwid security update
An update is available for python-urwid. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...
python-urwid security update
An update is available for python-urwid. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...
RLSA-2026:58562 Important: python-urwid security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
Important: Red Hat Security Advisory: python-urwid security update
An update for python-urwid is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure
A flaw was found in the urwid web display backend. This vulnerability arises from the use of a cryptographically insecure pseudo-random number generator PRNG for web session identifiers, making them predictable. An attacker could either observe enough session IDs to reconstruct the PRNG state or,...
urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure
A flaw was found in the urwid web display backend. This vulnerability arises from the use of a cryptographically insecure pseudo-random number generator PRNG for web session identifiers, making them predictable. An attacker could either observe enough session IDs to reconstruct the PRNG state or,...
Important: Red Hat Security Advisory: python-urwid security update
An update for python-urwid is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...
Important: Red Hat Security Advisory: python-urwid security update
An update for python-urwid is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...
urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure
A flaw was found in the urwid web display backend. This vulnerability arises from the use of a cryptographically insecure pseudo-random number generator PRNG for web session identifiers, making them predictable. An attacker could either observe enough session IDs to reconstruct the PRNG state or,...
Important: Red Hat Security Advisory: python-urwid security update
An update for python-urwid is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...
urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure
A flaw was found in the urwid web display backend. This vulnerability arises from the use of a cryptographically insecure pseudo-random number generator PRNG for web session identifiers, making them predictable. An attacker could either observe enough session IDs to reconstruct the PRNG state or,...
CVE-2026-78314
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...