843967 matches found
CGA-VXH4-FPGH-F9VH
Bulletin has no description...
CGA-9XVV-G7JC-X4F5
Bulletin has no description...
CGA-JQM5-454P-9P7V
Bulletin has no description...
GHSA-PQXQ-W44R-73XW AIOHTTP: Pure-Python parser request smuggling
Summary The pure Python parser is vulnerable to an HTTP request smuggling attack. Impact If users are using the Python parser AIOHTTPNOEXTENSIONS, or not a standard wheel installed, then an application may be vulnerable to a request smuggling attack. Workaround Switch to the default C parser...
AIOHTTP: Pure-Python parser request smuggling
Summary The pure Python parser is vulnerable to an HTTP request smuggling attack. Impact If users are using the Python parser AIOHTTPNOEXTENSIONS, or not a standard wheel installed, then an application may be vulnerable to a request smuggling attack. Workaround Switch to the default C parser...
EUVD-2026-104486
AIOHTTP: Pure-Python parser request smuggling...
EUVD-2026-104482
AIOHTTP: File descriptor exhaustion in multipart requests...
GHSA-9XW5-W5JJ-PVCG AIOHTTP: File descriptor exhaustion in multipart requests
Summary An attacker can exhaust file descriptors with specially crafted multipart requests. Impact If a handler uses Request.post, it may be possible for an attacker to use an unlimited number of file descriptors, potentially resulting in resource exhaustion...
AIOHTTP: File descriptor exhaustion in multipart requests
Summary An attacker can exhaust file descriptors with specially crafted multipart requests. Impact If a handler uses Request.post, it may be possible for an attacker to use an unlimited number of file descriptors, potentially resulting in resource exhaustion...
launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors
Summary launch-editor forwarded file paths directly to editors without sanitization. If a path resembles a CLI flag, editors like Vim may interpret it as a command, potentially causing unintended file overwrites or command execution. Impact Direct launch-editor users Only apps that match all of t...
GHSA-R825-W8MM-5PXW launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors
Summary launch-editor forwarded file paths directly to editors without sanitization. If a path resembles a CLI flag, editors like Vim may interpret it as a command, potentially causing unintended file overwrites or command execution. Impact Direct launch-editor users Only apps that match all of t...
NPM: launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors
NPM: launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors vulnerability discovered by ? in WordPress Npm vite versions = 6.4.3...
NPM: launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors
NPM: launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors vulnerability discovered by ? in WordPress Npm launch-editor versions = 2.14.1...
NPM: launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors
NPM: launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors vulnerability discovered by ? in WordPress Npm vite-plus versions = 1.0.0...
org.ow2.asm/asm: OW2 ASM: Denial of Service via infinite loop in Label.resolve()
A flaw was found in OW2 ASM. An attacker can cause a Denial of Service DoS by supplying a specially crafted Java class file with methods that grow beyond 64 kilobytes during transformation. When processing this file, an offset truncation error triggers an infinite loop within the method resolutio...
EUVD-2026-105271
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, caller-supplied prompt text can become executable syntax in the bash activation prompt. An attacker must influence the value passed to virtualenv, and a user must subsequently activate the environment and dr...
CVE-2026-113723
The virtualenv tool, used for creating isolated Python environments, is vulnerable to OS Command Injection (CWE-78) in versions prior to 21.14.9 . The root cause is that caller-supplied prompt text can be interpreted as executable syntax within the bash activation prompt when using older compatib...
CVE-2026-113723 virtualenv: Bash prompt values can change meaning under older compatibility modes
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, caller-supplied prompt text can become executable syntax in the bash activation prompt. An attacker must influence the value passed to virtualenv, and a user must subsequently activate the environment and dr...
CVE-2026-113723
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, caller-supplied prompt text can become executable syntax in the bash activation prompt. An attacker must influence the value passed to virtualenv, and a user must subsequently activate the environment and dr...
CVE-2026-113723 virtualenv: Bash prompt values can change meaning under older compatibility modes
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, caller-supplied prompt text can become executable syntax in the bash activation prompt. An attacker must influence the value passed to virtualenv, and a user must subsequently activate the environment and dr...