Lucene search
K

83 matches found

OSV
OSV
added 2026/05/15 6:25 p.m.1 views

GHSA-MQ5J-PW29-JCV3 Microsoft APM: Windows absolute-path tar member overwrite during legacy-bundle probing in `apm install`

Summary Microsoft APM contains a Windows-specific archive extraction boundary failure in the legacy-bundle probe used by apm install on supported Python 3.10 and 3.11 runtimes. When apm install is given a local .tar.gz that is not recognized as a plugin-format bundle, APM probes whether it is a...

5.5CVSS6.1AI score0.00055EPSS
Exploits0References5
NVD
NVD
added 2026/04/24 6:16 p.m.0 views

CVE-2026-41140

Poetry is a dependency manager for Python. Prior to 2.3.4, the extractall function in src/poetry/utils/helpers.py:410-426 extracts sdist tarballs without path traversal protection on Python versions where tarfile.datafilter is unavailable. Considering only Python versions which are still supporte...

2.3CVSS0.0009EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/24 5:10 p.m.21 views

CVE-2026-41140 Poetry: Path traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4

Poetry is a dependency manager for Python. Prior to 2.3.4, the extractall function in src/poetry/utils/helpers.py:410-426 extracts sdist tarballs without path traversal protection on Python versions where tarfile.datafilter is unavailable. Considering only Python versions which are still supporte...

2.3CVSS0.0009EPSS
Exploits0References1
OSV
OSV
added 2026/04/22 2:35 p.m.1 views

GHSA-73H3-MF4W-8647 Poetry has Path Traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4

Summary The extractall function in src/poetry/utils/helpers.py:410-426 extracts sdist tarballs without path traversal protection on Python versions where tarfile.datafilter is unavailable. Considering only Python versions which are still supported by Poetry, these are 3.10.0 - 3.10.12 and 3.11.0 ...

2.3CVSS5.9AI score0.0009EPSS
Exploits0References4
OSV
OSV
added 2026/04/09 12:0 a.m.0 views

OPENSUSE-SU-2026:10520-1 python310-3.10.20-4.1 on GA media

These are all security issues fixed in the python310-3.10.20-4.1 package on the GA media of openSUSE Tumbleweed...

5.8AI score0.00016EPSS
Exploits0References1
Fedora
Fedora
added 2026/03/29 12:50 a.m.1 views

[SECURITY] Fedora 43 Update: pypy3.10-7.3.19-11.3.10.fc43

PyPy's implementation of Python 3.10, featuring a Just-In-Time compiler on some CPU architectures, and various optimized implementations of the standard types strings, dictionaries, etc.. This build of PyPy has JIT-compilation enabled...

9.8CVSS7.3AI score0.00846EPSS
Exploits3
GithubExploit
GithubExploit
added 2026/03/24 6:8 p.m.173 views

BUGSCANNER---PHP-Web-Security-Scanner-for-Bug-Bounty-Penetration-Testing

!Pythonhttps://img.shields.io/badge/Python-3.10%2B-3776AB?st...

6.3AI score
Exploits0
OSV
OSV
added 2026/02/13 12:0 a.m.0 views

OPENSUSE-SU-2026:10200-1 python310-3.10.19-4.1 on GA media

These are all security issues fixed in the python310-3.10.19-4.1 package on the GA media of openSUSE Tumbleweed...

6CVSS7.1AI score0.00205EPSS
Exploits0References6
SUSE Linux
SUSE Linux
added 2026/01/15 1:11 p.m.2 views

Security update for python310

This update for python310 fixes the following issues: CVE-2025-12084: quadratic complexity when building nested elements using xml.dom.minidom methods that depend on clearidcache can lead to availability issues when building excessively nested documents bsc1254997. CVE-2025-13836: use of...

6.5CVSS6.9AI score0.00215EPSS
Exploits0References12
OpenVAS
OpenVAS
added 2026/01/15 12:0 a.m.3 views

Ubuntu: Security Advisory (USN-7951-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.00215EPSS
Exploits0References2
OSV
OSV
added 2025/11/25 12:0 a.m.2 views

OPENSUSE-SU-2025:15768-1 python310-3.10.19-2.1 on GA media

These are all security issues fixed in the python310-3.10.19-2.1 package on the GA media of openSUSE Tumbleweed...

5.5CVSS7.1AI score0.00125EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2025/10/28 12:0 a.m.1 views

Fedora: Security Advisory (FEDORA-2025-5ac68ff957)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8AI score
Exploits0References2
Fedora
Fedora
added 2025/10/13 2:4 a.m.4 views

[SECURITY] Fedora 41 Update: python3.10-3.10.19-1.fc41

Python 3.10 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.10 package provides the "python3.10" executable:...

7.5CVSS7.2AI score0.01007EPSS
Exploits0
OpenVAS
OpenVAS
added 2025/10/13 12:0 a.m.3 views

Fedora: Security Advisory (FEDORA-2025-76c806ad8e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.8AI score0.01007EPSS
Exploits0References5
Fedora
Fedora
added 2025/06/13 1:34 a.m.4 views

[SECURITY] Fedora 41 Update: python3.10-3.10.18-1.fc41

Python 3.10 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.10 package provides the "python3.10" executable:...

7.4AI score
Exploits0
Fedora
Fedora
added 2025/02/13 2:2 a.m.13 views

[SECURITY] Fedora 40 Update: python3.10-3.10.16-5.fc40

Python 3.10 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.10 package provides the "python3.10" executable:...

6.3CVSS7.4AI score0.01639EPSS
Exploits0
SUSE Linux
SUSE Linux
added 2025/02/10 1:55 p.m.0 views

Security update for python310

This update for python310 fixes the following issues: CVE-2025-0938: domain names containing square brackets are not identified as incorrect by urlparse. bsc1236705 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

6.3CVSS7.5AI score0.01639EPSS
Exploits0References4
Fedora
Fedora
added 2024/12/14 6:58 a.m.10 views

[SECURITY] Fedora 40 Update: python3.10-3.10.16-1.fc40

Python 3.10 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.10 package provides the "python3.10" executable:...

7.8CVSS6.7AI score0.00061EPSS
Exploits0
Fedora
Fedora
added 2024/12/14 1:42 a.m.9 views

[SECURITY] Fedora 41 Update: python3.10-3.10.16-1.fc41

Python 3.10 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.10 package provides the "python3.10" executable:...

7.8CVSS6.7AI score0.00061EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2024/11/14 12:0 a.m.9 views

Fedora 41 : python3.10 (2024-2b163f9201)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-2b163f9201 advisory. This is a security release of Python 3.10 ----------------------------------------- Note: The release you're looking at is Python 3.10.15, a securit...

8.7CVSS6.7AI score0.03014EPSS
Exploits4References7
Rows per page
Query Builder