Lucene search
K

33 matches found

OSV
OSV
added 2026/05/18 12:17 a.m.4 views

OPENSUSE-SU-2026:20763-1 Security update for go1.25

This update for go1.25 fixes the following issues Security issues: - CVE-2026-33811: net: crash when handling long CNAME response bsc1264508. - CVE-2026-33814: net/http: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1264506. - CVE-2026-39817: cmd/go: "go tool pack" does...

7.5CVSS6AI score0.00054EPSS
Exploits0References24
RedhatCVE
RedhatCVE
added 2026/04/14 7:23 p.m.3 views

CVE-2026-40112

PraisonAI is a multi-agent teams system. Prior to 4.5.128, the Flask API endpoint in src/praisonai/api.py renders agent output as HTML without effective sanitization. The sanitizehtml function relies on the nh3 library, which is not listed as a required or optional dependency in pyproject.toml...

6.1CVSS5.9AI score0.00038EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/04/09 9:16 p.m.0 views

CVE-2026-40112 PraisonAI has Stored XSS via Unsanitized Agent Output in HTML Rendering (nh3 Not a Required Dependency)

PraisonAI is a multi-agent teams system. Prior to 4.5.128, the Flask API endpoint in src/praisonai/api.py renders agent output as HTML without effective sanitization. The sanitizehtml function relies on the nh3 library, which is not listed as a required or optional dependency in pyproject.toml...

5.4CVSS5.9AI score0.00038EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-7799

Malicious code in bioql PyPI...

8.8CVSS8.1AI score0.21763EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-27607

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger was vulnerable to RCE through a missing...

8.8CVSS7.2AI score0.21763EPSS
Exploits1References2
SUSE CVE
SUSE CVE
added 2025/03/11 3:47 a.m.1 views

SUSE CVE-2025-27607

Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger was vulnerable to RCE through a missing dependency. This occurred because msgspec-python313-pre was deleted by the owner leaving the name open to being claimed by a third party...

8.8CVSS7.5AI score0.21763EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/03/09 4:33 p.m.8 views

CVE-2025-27607

A flaw was found in the Python JSON Logger library python-json-logger. In affected versions, python-json-logger was vulnerable to remote code execution RCE due to a missing dependency. This issue occurred because msgspec-python313-pre was deleted by the owner, leaving the name open to being claim...

8.8CVSS9AI score0.21763EPSS
Exploits1References6
NVD
NVD
added 2025/03/07 5:15 p.m.12 views

CVE-2025-27607

Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger was vulnerable to RCE through a missing dependency. This occurred because msgspec-python313-pre was deleted by the owner leaving the name open to being claimed by a third party...

8.8CVSS0.21763EPSS
Exploits1References3
OSV
OSV
added 2025/03/07 5:15 p.m.1 views

UBUNTU-CVE-2025-27607

Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger was vulnerable to RCE through a missing dependency. This occurred because msgspec-python313-pre was deleted by the owner leaving the name open to being claimed by a third party...

8.8CVSS7.1AI score0.21763EPSS
Exploits1References5
CVE
CVE
added 2025/03/07 4:18 p.m.204 views

CVE-2025-27607

Technical details are not publicly available in the provided connected documents; monitor for updates.

8.8CVSS7.1AI score0.21763EPSS
Exploits1References3Affected Software1
Debian CVE
Debian CVE
added 2025/03/07 4:18 p.m.7 views

CVE-2025-27607

Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger was vulnerable to RCE through a missing dependency. This occurred because msgspec-python313-pre was deleted by the owner leaving the name open to being claimed by a third party...

8.8CVSS7.8AI score0.21763EPSS
Exploits1
Cvelist
Cvelist
added 2025/03/07 4:18 p.m.18 views

CVE-2025-27607 Python JSON Logger has a Potential RCE via missing `msgspec-python313-pre` dependency

Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger was vulnerable to RCE through a missing dependency. This occurred because msgspec-python313-pre was deleted by the owner leaving the name open to being claimed by a third party...

8.8CVSS0.21763EPSS
Exploits1References3
OSV
OSV
added 2025/03/07 4:18 p.m.5 views

CVE-2025-27607 Python JSON Logger has a Potential RCE via missing `msgspec-python313-pre` dependency

Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger was vulnerable to RCE through a missing dependency. This occurred because msgspec-python313-pre was deleted by the owner leaving the name open to being claimed by a third party...

8.8CVSS7.9AI score0.21763EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/03/07 12:0 a.m.2 views

Python JSON Logger 安全漏洞

Python JSON Logger is a JSON formatting tool for Python logs by the individual developer Nicholas Hairs. A security vulnerability exists in Python JSON Logger versions prior to 3.3.0, which stems from a missing dependency that could lead to remote code execution...

8.8CVSS8.3AI score0.21763EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2024/12/16 12:0 a.m.2 views

PT-2025-10116 · Unknown · Msgspec-Python313-Pre +1

Name of the Vulnerable Software and Affected Versions: Python JSON Logger versions 3.2.0 through 3.2.1 Description: The issue is related to a missing dependency in the Python JSON Logger library, which could allow an attacker to execute arbitrary code on affected systems. This occurred because th...

10CVSS7.9AI score0.21763EPSS
Exploits1References55
OSV
OSV
added 2024/04/05 8:52 a.m.6 views

SUSE-SU-2024:1119-1 Security update for gradle, gradle-bootstrap

This update for gradle, gradle-bootstrap fixes the following issues: - CVE-2021-29429: Fixed information disclosure through temporary directory permissions bsc1184799. - CVE-2019-15052: Fixed authentication credentials disclosure bsc1145903. gradle: - Fixed RPM package building issues due to...

9.8CVSS6.6AI score0.00307EPSS
Exploits2References5
CNNVD
CNNVD
added 2024/03/18 12:0 a.m.2 views

Rocket.Chat Security Vulnerability

Rocket.Chat is an open source team chat software. A security vulnerability exists in Rocket.Chat.Audit 5ad78e8 and earlier versions, which stems from a missing dependency...

9.1CVSS6.7AI score0.00048EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2020/09/28 12:0 a.m.30 views

Fedora 31 : perl-DBI (2020-f30298614a)

This release fixes CVE-2020-14392 a memory corruption in XS functions when Perl stack is reallocated, CVE-2019-20919 a NULL profile dereference in dbiprofile, a documentation that old API functions are vulnerable to an overflow, and CVE-2020-14393 a buffer overlfow on an overlong DBD class name. ...

7.1CVSS6.6AI score0.00131EPSS
Exploits0References4
OSV
OSV
added 2020/02/13 3:15 p.m.0 views

CVE-2020-0021

In removeUnusedPackagesLPw of PackageManagerService.java, there is a possible permanent denial-of-service due to a missing package dependency test. This could lead to remote denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product:...

6.5CVSS6.7AI score0.01807EPSS
Exploits0References1
OPENSUSE Linux
OPENSUSE Linux
added 2019/05/28 12:0 a.m.189 views

Security update for nmap (moderate)

openSUSE Security Update: Security update for nmap Announcement ID: openSUSE-SU-2019:1462-1 Rating: moderate References: 1104139 1133512 Cross-References: CVE-2018-15173 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that solves one vulnerability and has one errata is now...

7.5CVSS7.4AI score0.02051EPSS
Exploits1References2
Rows per page
Query Builder