381 matches found
EUVD-2025-16108
Malicious code in bioql PyPI...
EUVD-2024-18001
Malicious code in bioql PyPI...
EUVD-2025-24141
Malicious code in bioql PyPI...
EUVD-2022-0334
Malicious code in bioql PyPI...
EUVD-2024-17999
Malicious code in bioql PyPI...
The vulnerability of the Python programming language interpreter, related to improper restriction of the path to a limited directory, allows attackers to gain access and modify any arbitrary file in the system.
The vulnerability of the Python programming language interpreter is related to improper restrictions on the path to a limited directory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to and modify any arbitrary file in the system...
ROS-20250925-01
Vulnerability of TarFile.extractall and TarFile.extract functions of tarfile module of Python programming language interpreter CPython is related to incorrect restriction of path name of the directory with restricted directory. Python programming language interpreter CPython functions...
ROS-20250925-03
Vulnerability of TarFile.extractall and TarFile.extract functions of tarfile module of Python programming language interpreter CPython is related to incorrect restriction of path name of the directory with restricted directory. Python programming language interpreter CPython functions...
The vulnerability of the CPython interpreter, related to reading beyond the allowed range, allows a violator to trigger a service failure.
The vulnerability of the CPython interpreter relates to reading beyond the acceptable range. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the CPython interpreter, related to improper validation of input data, allows attackers to execute attacks through substitution methods.
The vulnerability of the CPython interpreter relates to incorrect validation of input data. Exploiting this vulnerability allows a remote attacker to execute an attack by replacing certain values...
ROS-20250923-04
A vulnerability in the Python programming language interpreter CPython is related to insufficient validation of user data in Lib/email/headervalueparser.py. user data in Lib/email/headervalueparser.py. Exploitation of the vulnerability could allow an attacker acting remotely to execute a spoofing...
ROS-20250923-03
A vulnerability in the Python programming language interpreter CPython is related to insufficient validation of user data in Lib/email/headervalueparser.py. user data in Lib/email/headervalueparser.py. Exploitation of the vulnerability could allow an attacker acting remotely to execute a spoofing...
ROS-20250923-01
The vulnerability in the Python programming language interpreter CPython is due to the fact that Cpython does not prohibits setting an empty list "" for SSLContext.setnpnprotocols, which is an invalid value for the OpenSSL base API when using NPN. Exploitation of the vulnerability could allow an...
The vulnerability of the bytes.decode() function in the Python interpreter (CPython) allows attackers to compromise the accessibility of protected information.
The vulnerability of the bytes.decode function in the CPython interpreter relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...
GHSA-CJ3C-V495-4XQH Picklescan has a missing detection when calling built-in python code.InteractiveInterpreter
Summary Using code.InteractiveInterpreter.runcode, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to code.InteractiveInterpreter.runcode function in reduce meth...
CVE-2025-8672
MacOS version of GIMP bundles a Python interpreter that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary commands or scripts, leveraging the application...
[SECURITY] Fedora 42 Update: python3-docs-3.13.6-1.fc42
The python3-docs package contains documentation on the Python 3 programming language and interpreter...
ROS-20250813-01
A vulnerability in the tarfile module of the Python programming language interpreter CPython is associated with incorrect parsing of the file header. Exploitation of the vulnerability could allow an attacker, acting remotely, to cause a denial of service...
CVE-2025-8672
MacOS version of GIMP bundles a Python interpreter that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary commands or scripts, leveraging the application...
CVE-2025-8672
MacOS version of GIMP bundles a Python interpreter that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary commands or scripts, leveraging the application...