tarnish

tarnish tarnish is a static-analysis tool to aid researchers in security reviews of Chrome extensions. It automates much of the regular grunt work and helps you quickly identify potential security vulnerabilities. This tool accompanies the research blog post which can be found here. If you don't...

EulerOS Virtualization 2.15.1 : python-pip (EulerOS-SA-2026-4787)

According to the versions of the python-pip packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pip would treat consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to t...

CVE-2026-114636

A flaw was found in Traefik. This vulnerability allows an unauthenticated remote attacker to bypass access control restrictions. When handling Kubernetes Ingress resources configured for SSL Secure Sockets Layer passthrough, the HTTP router generated on non-TLS Transport Layer Security entry poin...

CVE-2026-112244 Duplicator 5.0.0 - 5.0.6 - Unauthenticated Full Path Disclosure via Installer Entry Points

The Duplicator WordPress plugin before 5.1.0, duplicator-pro WordPress plugin before 5.1.0 does not prevent direct access to some of its bundled PHP files, which initialise without their expected context, trigger a fatal error, and return a stack trace that discloses the server's absolute...

CLEANSTART-2026-DU78582 pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed o...

Security vulnerability affects the k8s-sidecar package. pip would treat consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in pip (CVE-2026-8643)

Summary IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in pip due to a flaw where pip treats consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory. Pip is used in our Speech Service Runtimes...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: s390/entry: Scrub r12 register on kernel entry Prior to commit f33f2d4c7c80 “s390/bp: remove TIFISOLATEBP”, all entry handlers loaded r12 with the current task pointer lg %r12, LCCURRENT for use by the BPENTER/BPEXIT macros. That...

Docling imports plugin entry points before the allow_external_plugins check

Summaryallowexternalplugins=False the default, and the CLI default is meant to restrict docling to its own model plugins. However, docling's plugin factories call pluggy's loadsetuptoolsentrypoints, which imports every module registered under docling's plugin entry-point group. Only afterwards do...

K000163624: Python vulnerability CVE-2026-8643

Security Advisory Description pip would treat consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory. CVE-2026-8643 Impact There is no...

Docling imports plugin entry points before the allow_external_plugins check

Summary allowexternalplugins=False the default, and the CLI default is meant to restrict docling to its own model plugins. However, docling's plugin factories call pluggy's loadsetuptoolsentrypoints, which imports every module registered under docling's plugin entry-point group. Only afterwards...

EUVD-2026-92805

Docling imports plugin entry points before the allowexternalplugins check...

CVE-2026-105745

A flaw was found in Docling. Docling imports registered plugin entry points before evaluating whether external plugins are permitted. A local attacker or compromised package installed in the environment can exploit this flaw to achieve arbitrary code execution during startup, even when external...

CVE-2026-105745 Docling: Plugin entry points are imported before the allow_external_plugins check

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.27.0 until 2.131.0, Docling plugin factories in docling/models/factories/basefactory.py call loadsetuptoolsentrypoints before applying the allowexternalplugins...

CVE-2026-53940

Conda is a system-level binary package and environment manager that runs on major operating systems and platforms. Prior to 26.5.2, parseentrypointdef in conda/common/path/python.py accepted an unvalidated entry-point command from a noarch:python package's info/link.json metadata...

EulerOS 2.0 SP10 : python-pip (EulerOS-SA-2026-3716)

According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pip would treat consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to the installation...

Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by multiple path traversal vulnerabilities due to pip

Summary pip is used by IBM Integrated Analytics System as the standard Python package installer. Multiple vulnerabilities affect pip. CVE-2026-8643 involves improper sanitization of resolved absolute paths for consolescripts and guiscripts entry points, where pip treats them as paths instead of...

EulerOS Virtualization 2.13.0 : python-pip (EulerOS-SA-2026-3233)

According to the versions of the python-pip packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pip would treat consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to t...

python3.14-pip security update

25.2-5 - Fix gating plan - removed unnecessary older VERSION= tests - removed bootstrap test - fix pipinstallupgrade to run pip-3.14 - fix bash completion + remove unused metadata file 25.2-4 - Security fix for CVE-2026-8643: path traversal in wheel entry points...

Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by multiple vulnerabilities due to pip

Summary pip is used by IBM Cloud Pak for Data System 1.0 as the Python package installer for managing and installing Python software packages. Multiple vulnerabilities affect pip. CVE-2026-1703 involves a path traversal vulnerability where files from a maliciously crafted wheel archive may be...

Oracle Linux 9 : python3.14-pip (ELSA-2026-36315)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-36315 advisory. 25.2-5 - Fix gating plan - removed unnecessary older VERSION= tests - removed bootstrap test - fix pipinstallupgrade to run pip-3.14 - fix bash completion +...