Lucene search
+L

3 matches found

OSV
OSV
added 2026/08/07 2:30 p.m.9 views

SUSE-SU-2026:3530-1 Security update for python310

This update for python310 fixes the following issues: Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the configparser module is used bsc1269066. - CVE-2026-3276: quadratic complexity in unicodedata.normalize can le...

8.7CVSS5.5AI score0.00811EPSS
SaveExploits0References21
Tenable Nessus
Tenable Nessus
added 2026/07/16 12:0 a.m.11 views

Amazon Linux 2023 : python3.12, python3.12-devel, python3.12-idle (ALAS2023-2026-1931)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1931 advisory. The tarfile module would still apply normalization of AREGTYPE \x00 blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPELONGNAME or GNUTYPELONGLINK. This could result ...

7.8CVSS6.1AI score0.02655EPSS
SaveExploits0References10
Amazon
Amazon
added 2026/07/07 12:0 a.m.14 views

Important: python3.11

Issue Overview: The "tarfile" module would still apply normalization of AREGTYPE \x00 blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPELONGNAME or GNUTYPELONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other...

7.8CVSS5.9AI score0.00811EPSS
SaveExploits0
Rows per page
Query Builder