PyMemoryEditor v2.2.0

PyMemoryEditor A pure-Python library built on ctypes that lets you inspect, modify and search the memory of any running process in a few lines of Python — Cheat Engine workflows on Windows, Linux and macOS! Read, write and scan the memory of any process — straight from Python. One unified API...

censys-python v2.3.0

Censys Python Library !WARNING DEPRECATION NOTICE : The Censys Search v1 and v2 APIs will be deprecated soon. Please migrate to the new Censys Platform. 📖 New API Documentation : https://docs.censys.com/reference/get-started 📦 New Python SDK : censys/censys-sdk-python 🖥️ New CLI Tool cencli:...

Linux Distros Unpatched Vulnerability : CVE-2026-84310

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/doccommon.py getoutline to consume long...

Linux Distros Unpatched Vulnerability : CVE-2026-84311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/page.py PageObject.extracttext and...

CVE-2026-76098 affecting package python-mistune for versions less than 3.3.4-1

CVE-2026-76098 affecting package python-mistune for versions less than 3.3.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-84382 HTTPX2: Streaming response decompression does not bound peak memory (decompression amplification)

HTTPX2 is a next generation HTTP client for Python. Prior to 2.12.0, the HTTPX2 content decoders in src/httpx2/httpx2/decoders.py fully inflate each gzip, deflate, br, or zstd network chunk before iterbytes or aiterbytes yields bounded pieces to the application. A 64 KiB compressed chunk can expa...

CVE-2026-84378 HTTPX2: Quadratic SSE line buffering can cause CPU denial of service

HTTPX2 is a next generation HTTP client for Python. From 2.5.0 until 2.10.0, the HTTPX2 Server-Sent Events parser in src/httpx2/httpx2/sse.py repeatedly copies and rescans buffered text in SSELineDecoder.decode when an attacker-controlled or compromised SSE endpoint splits one unterminated line...

Mistune: Denial of Service — RecursionError via Excessive Emphasis Markers in Markdown

Summary Mistune v3.3.2 is vulnerable to a Denial of Service DoS attack via uncontrolled recursion in the HTML rendering of deeply-nested emphasis tokens. By submitting Markdown containing approximately 1,000 consecutive asterisk characters, an attacker causes the Python process to crash with...

[SECURITY] Fedora 44 Update: python-llm-0.33-2.fc44

A CLI tool and Python library for interacting with Large Language Models, both via remote APIs and with models that can be installed and run on your own machine...

CVE-2020-11881

creationtimestamp| type| source ---|---|--- 2026-09-02 01:00:13+00:00| seen| Telegram/V5hKn0oJ2nGQvFUOA8vMmIzpE0-LTzLZfzF3v7e7Ud5xOzo 2026-09-03 00:00:53+00:00| published-proof-of-concept| Telegram/V5hKn0oJ2nGQvFUOA8vMmIzpE0-LTzLZfzF3v7e7Ud5xOzo...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via ReindentFilter.getoffset in sqlparse/filters/reindent.py, which reconstructed the full statement prefix from the beginning of the statement on every call. Because getoffset is invoked once per grou...

CVE-2026-84310

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/doccommon.py getoutline to consume long runtimes and large amounts of memory when retrieving document outlines with large numbers of entries or deeply nested reused paths becaus...

UBUNTU-CVE-2026-84311

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/page.py PageObject.extracttext and PageObject.extractxformtext to traverse a directed acyclic graph of reused form XObjects in which each form invokes a child multiple times,...

CVE-2026-84311

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/page.py PageObject.extracttext and PageObject.extractxformtext to traverse a directed acyclic graph of reused form XObjects in which each form invokes a child multiple times,...

UBUNTU-CVE-2026-84366

Scrapy is a high-level web crawling and scraping framework for Python. Prior to 2.17.0, in scrapy/core/downloader/handlers/s3.py, Scrapy's S3DownloadHandler converts an S3-scheme bucket and key request into a plaintext HTTP request to the corresponding S3 endpoint unless request.meta"issecure" is...

UBUNTU-CVE-2026-84305

sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse.formatsql, reindent=True and sqlformat --reindent route attacker-controlled parenthesized tuple lists through ReindentFilter.getoffset in sqlparse/filters/reindent.py, where flattenuptotoken repeatedly rebuilds an...

CVE-2026-84305 sqlparse: Reindentation of tuple lists causes near-cap quadratic CPU consumption

sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse.formatsql, reindent=True and sqlformat --reindent route attacker-controlled parenthesized tuple lists through ReindentFilter.getoffset in sqlparse/filters/reindent.py, where flattenuptotoken repeatedly rebuilds an...

CVE-2026-71554

A flaw was found in h2, a Python library for HTTP/2. This vulnerability allows a remote attacker to perform request smuggling. The library incorrectly processes HTTP/2 requests that contain more than one Host header. When these requests are downgraded to HTTP/1.1 by a consuming application, the...

ROS-20260901-73-0017

The vulnerability of the option-name validation component in the Python library for interacting with Git repositories, GitPython, is related to incorrect elimination of special elements in the output data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands...

ROS-20260901-73-0016

The vulnerability of the checkunsafeoptions mechanism in the Python library for interacting with Git repositories, GitPython, is related to the implementation or modification of arguments. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands remotely...