EUVD-2024-2969

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2024-9979

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in PyO3. This vulnerability causes a use-after-free issue, potentially leading to memory corruption or crashes via unsound borrowing from weak...

RuStream (>=0.0.1 <=0.0.2), abd-clam (>=0.23.1 <=0.25.3) +240 more potentially affected by unknown CVE via pyo3 (>=0.1.0 <=0.23.5)

pyo3 CARGO version =0.1.0, =0.0.1, =0.23.1, =0.12.2, =0.2.1, =48.0.0, =0.1.0, =0.3.3, =0.0.1-a1, =0.0.1-a1, =0.1.0, =0.2.37, =1.0.0-beta.4 - bilbyrust =0.1.0 - bitbazaar =0.0.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-PPH8-GCV7-4QJ5...

RuStream (>=0.0.1 <=0.0.2), RustPyNet (>=0.1.0 <=0.1.3) +586 more potentially affected by unknown CVE via pyo3 (>=0.10.1 <=0.23.5)

pyo3 CARGO version =0.10.1, =0.0.1, =0.1.0, =0.21.8, =0.8.0, =0.12.0, =0.2.1, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.14 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0020...

Fedora 41 : rust-pyo3 / rust-pyo3-build-config / rust-pyo3-ffi / etc (2024-21666fa7f2)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-21666fa7f2 advisory. Update pyo3 to version 0.22.4. This version addresses a potential use-after-free RUSTSEC-2024-0378. Tenable has extracted the preceding description block...

PT-2024-40267 · Pypi · Pyo3

Name of the Vulnerable Software and Affected Versions: PyO3 versions prior to 0.23 Description: The issue concerns a family of functions in PyO3 that read "borrowed" values from Python weak references. These functions were fundamentally unsound because the weak reference does not have ownership o...

PyO3 安全漏洞

PyO3 is a Rust binding for the Python interpreter open-sourced by PyO3. A security vulnerability exists in PyO3 that stems from the presence of a post-release reuse issue that could lead to memory corruption or a crash...