async-notify (>=0.8.0, <=0.8.11), navigator-api (>=2.3.10, <=2.3.17) potentially affected by CVE-2026-55558 via aiosmtplib (2.0.0)

aiosmtplib PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - async-notify =0.8.0, =2.3.10, =2.3.17 Source cves: CVE-2026-55558 Source advisory: OSV:PYSEC-2026-3805...

async-notify (>=0.5.17, <=0.6.3), async-sender (1.4.4) +8 more potentially affected by CVE-2026-55558 via aiosmtplib (1.1.6)

aiosmtplib PYPI version 1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - async-notify =0.5.17, =0.1.3, =0.2.3, =1.0.4, =2.0.11, =0.9.13.1, =0.8.4, =0.1.0a0, =0.1.6a0 Source cves: CVE-2026-55558 Source advisory:...

async-notify (>=1.0.0, <=1.2.4), async-sender (2.0.0) +2 more potentially affected by CVE-2026-55558 via aiosmtplib (2.0.1)

aiosmtplib PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - async-notify =1.0.0, =0.8.2, =0.1.0, =0.1.6 Source cves: CVE-2026-55558 Source advisory: OSV:GHSA-VXJ7-4XRP-5VR4...

async-notify (>=0.8.0, <=0.8.11), navigator-api (>=2.3.10, <=2.3.17) potentially affected by CVE-2026-55558 via aiosmtplib (2.0.0)

aiosmtplib PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - async-notify =0.8.0, =2.3.10, =2.3.17 Source cves: CVE-2026-55558 Source advisory: OSV:GHSA-VXJ7-4XRP-5VR4...

aos-keys (>=1.7.0b1, <=1.10.0b1), aos-prov (>=4.5.0b3, <=4.5.0b6) +61 more potentially affected by CVE-2026-69248 via cryptography (42.0.4)

cryptography PYPI version 42.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - aos-keys =1.7.0b1, =4.5.0b3, =1.1.2, =1.2.0, =2.6.18, =0.0.79, =0.0.58, =0.0.69, =0.0.51, =1.0.579, =0.20.1, =0.23.0 and more Source...

asphalt-mailer (>=3.0.0, <=3.0.4), async-notify (>=0.6.1, <=0.7.0) +24 more potentially affected by CVE-2026-53533 via aiosmtplib (1.1.7)

aiosmtplib PYPI version 1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - asphalt-mailer =3.0.0, =0.6.1, =19.7.0, =0.4.0.4, =0.0.1, =0.9.27, =0.0.1, =2.3.0, =2.3.9 - own-comments 0.1.0a4 and more Source cves:...

async-notify (>=0.5.17, <=0.6.3), async-sender (1.4.4) +8 more potentially affected by CVE-2026-53533 via aiosmtplib (1.1.6)

aiosmtplib PYPI version 1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - async-notify =0.5.17, =0.1.3, =0.2.3, =1.0.4, =2.0.11, =0.9.13.1, =0.8.4, =0.1.0a0, =0.1.6a0 Source cves: CVE-2026-53533 Source advisory:...

async-notify (>=1.0.0, <=1.2.4), async-sender (2.0.0) +2 more potentially affected by CVE-2026-53533 via aiosmtplib (2.0.1)

aiosmtplib PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - async-notify =1.0.0, =0.8.2, =0.1.0, =0.1.6 Source cves: CVE-2026-53533 Source advisory: OSV:PYSEC-2026-2338...

async-notify (>=0.8.0, <=0.8.11), navigator-api (>=2.3.10, <=2.3.17) potentially affected by CVE-2026-53533 via aiosmtplib (2.0.0)

aiosmtplib PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - async-notify =0.8.0, =2.3.10, =2.3.17 Source cves: CVE-2026-53533 Source advisory: OSV:PYSEC-2026-2338...

async-notify (>=1.0.0, <=1.2.4), async-sender (2.0.0) +2 more potentially affected by CVE-2026-53533 via aiosmtplib (2.0.1)

aiosmtplib PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - async-notify =1.0.0, =0.8.2, =0.1.0, =0.1.6 Source cves: CVE-2026-53533 Source advisory: OSV:GHSA-V3Q9-HJ7J-63HQ...

async-notify (>=0.8.0, <=0.8.11), navigator-api (>=2.3.10, <=2.3.17) potentially affected by CVE-2026-53533 via aiosmtplib (2.0.0)

aiosmtplib PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - async-notify =0.8.0, =2.3.10, =2.3.17 Source cves: CVE-2026-53533 Source advisory: OSV:GHSA-V3Q9-HJ7J-63HQ...

aos-keys (>=1.7.0b1, <=1.10.0b1), aos-prov (>=4.5.0b3, <=4.5.0b6) +61 more potentially affected by CVE-2026-34073 via cryptography (42.0.4)

cryptography PYPI version 42.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - aos-keys =1.7.0b1, =4.5.0b3, =1.1.2, =1.2.0, =2.6.18, =0.0.79, =0.0.58, =0.0.69, =0.0.51, =1.0.579, =0.20.1, =0.23.0 and more Source...

aos-keys (>=1.7.0b1, <=1.10.0b1), aos-prov (>=4.5.0b3, <=4.5.0b6) +61 more potentially affected by CVE-2026-34073 via cryptography (42.0.4)

cryptography PYPI version 42.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - aos-keys =1.7.0b1, =4.5.0b3, =1.1.2, =1.2.0, =2.6.18, =0.0.79, =0.0.58, =0.0.69, =0.0.51, =1.0.579, =0.20.1, =0.23.0 and more Source...

aos-keys (>=1.7.0b1, <=1.10.0b1), aos-prov (>=4.5.0b3, <=4.5.0b6) +61 more potentially affected by CVE-2026-26007 via cryptography (42.0.4)

cryptography PYPI version 42.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - aos-keys =1.7.0b1, =4.5.0b3, =1.1.2, =1.2.0, =2.6.18, =0.0.79, =0.0.58, =0.0.69, =0.0.51, =1.0.579, =0.20.1, =0.23.0 and more Source...

kernel: tls: race between async notify and socket close

A race condition vulnerability was found in the tls subsystem of the Linux kernel. The submitting thread that calls recvmsg/sendmsg may exit as soon as the async crypto handler calls complete; any code past that point risks touching already freed data. This could lead to a use-after-free issue an...

kernel: tls: race between async notify and socket close

A race condition vulnerability was found in the tls subsystem of the Linux kernel. The submitting thread that calls recvmsg/sendmsg may exit as soon as the async crypto handler calls complete; any code past that point risks touching already freed data. This could lead to a use-after-free issue an...

CBL Mariner 2.0 Security Update: hyperv-daemons / kernel (CVE-2024-26583)

The version of hyperv-daemons / kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26583 advisory. - In the Linux kernel, the following vulnerability has been resolved: tls: fix race between...

Medium: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: tls: fix race between async notify and socket close The submitting thread one which called recvmsg/sendmsg may exit as soon as the async crypto handler calls complete so any code past that point risks touching...

SUSE CVE-2024-26583

In the Linux kernel, the following vulnerability has been resolved: tls: fix race between async notify and socket close The submitting thread one which called recvmsg/sendmsg may exit as soon as the async crypto handler calls complete so any code past that point risks touching already freed data...

AZL-35799 CVE-2024-26583 affecting package kernel for versions less than 6.6.22.1-2

In the Linux kernel, the following vulnerability has been resolved: tls: fix race between async notify and socket close The submitting thread one which called recvmsg/sendmsg may exit as soon as the async crypto handler calls complete so any code past that point risks touching already freed data...