Lucene search
+L

3 matches found

osv_clsa
osv_clsa
•added 2026/08/29 10:59 a.m.•12 views

CLSA-2026-1788001146 python3.11: Fix of CVE-2026-0864

CVE-2026-0864: normalize CR and CRLF line endings when configparser writes multi-line values, preventing key/value injection into the written file...

5.5CVSS5.9AI score0.00126EPSS
SaveExploits0References2
osv_clsa
osv_clsa
•added 2026/08/24 9:57 a.m.•10 views

CLSA-2026-1787559267 python3: Fix of 2 CVEs

CVE-2026-0864: normalize all line endings CR, CRLF, and LF in configparser to prevent key/value injection when writing multi-line values - CVE-2026-11940: fix symlink escape via the tarfile hardlink-extraction fallback by validating the symlink at the path it is recreated at, and route the...

7.8CVSS6AI score0.0075EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/30 12:00 a.m.•35 views

PT-2026-53971

Name of the Vulnerable Software and Affected Versions Paymenter affected versions not specified Description Authenticated users can inject arbitrary key-value pairs into server provisioning parameters due to improper input validation and mass assignment of user-controlled fields. The system fails...

8.5CVSS6AI score0.00402EPSS
SaveExploits0References6
Rows per page
Query Builder