1143 matches found
OESA-2025-2741 python-pip security update
pip is the package installer for Python. You can use pip to install packages from the Python Package Index and other indexes. %global bashcompdir %b=$pkg-config --variable=completionsdir bash-completion 2/dev/null; echo $b:-/bashcompletion.d Name: python-pip Version: 20.2.2 Release: 4 Summary: A...
Isar 安全漏洞
Isar is a file generation script open-sourced by ilbers GmbH. A security vulnerability exists in Isar versions 0.11-rc1 and 0.11, which stems from the fact that a separate definition of ISARAPTSNAPSHOTDATE fails to set the correct timestamps for security distributions, resulting in missed securit...
EulerOS 2.0 SP12 : python3 (EulerOS-SA-2025-2339)
According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some fil...
MAL-2025-95468 Malicious code in mighty_jaguar_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dac786c84073ced3b553aff1ca9e0f9889c65f06e434ac754ac93a2c886d900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
[SECURITY] Fedora 41 Update: uv-0.9.5-1.fc41
An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...
Improper Validation of Syntactic Correctness of Input
Overview uv is an An extremely fast Python package and project manager, written in Rust. Affected versions of this package are vulnerable to Improper Validation of Syntactic Correctness of Input in ZIP archives filenames processing. An attacker can cause malicious code to be executed or files to ...
Linux Distros Unpatched Vulnerability : CVE-2025-12428
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium securit...
GHSA-W476-P2H3-79G9 uv has differential in tar extraction with PAX headers
Impact In versions 0.9.4 and earlier of uv, tar archives containing PAX headers with file size overrides were not handled properly. As a result, an attacker could contrive a source distribution as a tar archive that would extract differently when installed via uv versus other Python package...
Linux Distros Unpatched Vulnerability : CVE-2022-50461
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ethernet: ti: am65-cpsw: Fix PM runtime leakage in am65cpswnussndoslaveopen Ensure pmruntimeput is issued in error path. CVE-2022-50461 Note that Nessus...
EUVD-2019-11428
Malware in sbrugna...
EUVD-2002-1217
Malware in sbrugna...
EUVD-2001-0723
Malware in sbrugna...
EUVD-2020-4366
Malware in sbrugna...
EUVD-2019-11470
Malware in sbrugna...
EUVD-2018-17504
Malware in sbrugna...
EUVD-2019-9475
Malware in sbrugna...
EUVD-2021-27183
Malware in sbrugna...
EUVD-2007-3095
Malware in sbrugna...