3 matches found
CLSA-2026-1788001146 python3.11: Fix of CVE-2026-0864
CVE-2026-0864: normalize CR and CRLF line endings when configparser writes multi-line values, preventing key/value injection into the written file...
CLSA-2026-1787559267 python3: Fix of 2 CVEs
CVE-2026-0864: normalize all line endings CR, CRLF, and LF in configparser to prevent key/value injection when writing multi-line values - CVE-2026-11940: fix symlink escape via the tarfile hardlink-extraction fallback by validating the symlink at the path it is recreated at, and route the...
PT-2026-53971
Name of the Vulnerable Software and Affected Versions Paymenter affected versions not specified Description Authenticated users can inject arbitrary key-value pairs into server provisioning parameters due to improper input validation and mass assignment of user-controlled fields. The system fails...