CVE-2026-113713

virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when creation finishes. The environment-variable and configuration-file forms of symlinkappda...

CVE-2026-113713

virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when creation finishes. The environment-variable and configuration-file forms of symlinkappda...

CVE-2026-113713

The virtualenv tool, used for creating isolated Python environments, is vulnerable in versions 21.14.8 through 21.14.10 . The app-data seeder can leave an environment linked to temporary package files that are deleted upon completion of the creation process. This occurs because the environment-va...

CVE-2026-112936

A flaw was found in filelock. The ReadWriteLock component does not properly reject symbolic links shortcuts pointing to another file path when resolving lock paths. A local user with write permissions in the lock directory can exploit this vulnerability to redirect lock file creation and database...

openssh: OpenSSH: Undocumented GSSAPIStrictAcceptorCheck behavior impacts security in Windows Active Directory

A flaw was found in OpenSSH. The sshd component has an undocumented security-relevant behavior where GSSAPIStrictAcceptorCheck has no value when the server is in a Windows Active Directory environment. This could lead to unintended information disclosure and impact data integrity...

CVE-2026-112939

A flaw was found in filelock. The SoftFileLock component can trust a forged process identifier PID in a lock marker file that an attacker can modify. A local attacker can exploit this flaw to cause an authorized process to act as a confused deputy, improperly removing an active lock marker and...

CVE-2026-112906

A flaw was found in filelock. A local attacker can manipulate lock file timestamps when multiple processes are waiting for a lock, causing the SoftFileLock component to misidentify an active lock as expired. As a result, legitimate lock files can be prematurely removed, allowing unauthorized...

Malicious code in research-probe-6150c1c915 (PyPI)

Source: kam193 a646eaf4fe72ba013abc53d52c0bf017a9c4f3bfc54a8c358f9f246d3ac41945 The package is most likely a reconnaissance of a shared infrastructure, collecting potentially sensitive data from cloud endpoints, activated via a PTH file on every Python loading. Collected data are stored in a loca...

launch-editor: escapeCmdArgs() omits % escaping on Windows

Summary launch-editor did not escape % on Windows when passing an argument to cmd. When an environment variable contained a malicious value, it was possible that that content to be executed. Impact Only apps that match all of the following conditions are affected: - The user uses Windows - An...

GHSA-698V-4R3X-3VCV launch-editor: escapeCmdArgs() omits % escaping on Windows

Summary launch-editor did not escape % on Windows when passing an argument to cmd. When an environment variable contained a malicious value, it was possible that that content to be executed. Impact Only apps that match all of the following conditions are affected: - The user uses Windows - An...

Directory Traversal

Overview uploadfs is a Store files in a web-accessible location via a simplified API. Can automatically scale and rotate images. Includes S3, Azure and local filesystem-based backends with the most convenient features of each. Affected versions of this package are vulnerable to Directory Traversa...

CVE-2026-112935

A flaw was found in filelock. A local attacker can exploit a race condition in the SoftFileLock mechanism during stale lock cleanup. Under specific timing and file system conditions involving reused file nodes, filelock may mistakenly delete an active lock marker held by another process. This...

CVE-2026-112909

A flaw was found in filelock. A local attacker can exploit this vulnerability by placing a target regular file at the expected lock file path using a file rename or hard link. When filelock acquires the lock, it can unintentionally truncate the contents of the target file and alter its permission...

CVE-2026-112911

A flaw was found in filelock. This vulnerability allows a local attacker to manipulate lock state by pre-creating a protocol directory within a shared parent directory. When filelock adopts this untrusted directory, the attacker can alter the protocol state and admit unauthorized concurrent lock...

CVE-2026-85087

A flaw was found in Apache Thrift's Python bindings. Due to improper certificate validation and incorrect status code handling, client applications fail to properly verify the authenticity of a remote server during encrypted connections. A remote attacker in a man-in-the-middle position could...

CVE-2026-89855

A flaw was found in the Linux kernel's scsi: qla2xxx component. A local attacker could exploit a race condition in the flash version read handler. By concurrently triggering a sysfs reset operation and other flash operations, an attacker could corrupt flash register reads. This could lead to data...

CVE-2026-80876

A flaw was found in the Linux kernel's ring-buffer component. When 8-byte alignment is enforced, the system incorrectly calculates the length of small events. This error causes these events to report a data length that is 4 bytes larger than their actual size. This discrepancy can lead to...

CVE-2026-93229

A flaw was found in the Linux kernel's Network File System daemon nfsd. A local user can cause a Denial of Service DoS or observe inconsistent kernel data on systems with weakly-ordered processor architectures. This issue occurs due to a missing read memory barrier in the Remote Procedure Call RP...

CVE-2026-96234

A flaw was found in .NET. An origin validation error allows an unauthorized remote attacker to disclose sensitive information over the network. Successful exploitation requires user interaction and enables an attacker to access restricted data without proper authorization...

curl: POP3: data after the end-of-body terminator is written into the retrieved message

Vulnerability Information When a POP3 server sends the end-of-body terminator and further data in the same read, curl writes the bytes after the terminator into the retrieved message's output file and still reports success. The PoC returns the message, its "." line, and then a second "+OK" respon...