Lucene search
K

1495 matches found

Mageia
Mageia
added 2025/03/12 7:0 a.m.21 views

Updated python-jinja2 packages fix security vulnerability

Jinja sandbox breakout through attr filter selecting format method. CVE-2025-27516...

8.8CVSS7AI score0.00121EPSS
Exploits0References2
vulnersOsv
vulnersOsv
added 2025/03/11 9:15 a.m.2 views

abgrouponline (>=1.0.0 <=1.0.4), abismal (>=0.0.6 <=0.0.7) +1594 more potentially affected by CVE-2025-1550 via keras (>=3.0.0 <=3.7.0)

keras PYPI version =3.0.0, =1.0.0, =0.0.6, =0.0.1, =0.0.1, =0.0.3, =0.3.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.3.0 - aegis-model =0.1.0 and more Source cves: CVE-2025-1550 Source advisory: OSV:PYSEC-2025-122...

9.8CVSS6.4AI score0.07973EPSS
Exploits3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2022-48560

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free exists in Python through 3.9 via heappushpop in heapq. CVE-2022-48560 Note that Nessus relies on the presence of the package as reported by the...

7.5CVSS7.2AI score0.00202EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2022-40897

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python Packaging Authority PyPA setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageInd...

5.9CVSS6.6AI score0.00513EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2019-9947

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a ur...

6.1CVSS7.2AI score0.01161EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.17 views

Linux Distros Unpatched Vulnerability : CVE-2019-9740

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a ur...

6.1CVSS7.1AI score0.0991EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2013-7040

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python 2.7 before 3.4 only uses the last eight bits of the prefix to randomize hash values, which causes it to compute hash values without restricting the abili...

4.3CVSS6.9AI score0.00414EPSS
Exploits2References4
PyPA
PyPA
added 2025/02/26 3:15 p.m.7 views

PYSEC-2025-18

picklescan before 0.0.21 does not treat 'pip' as an unsafe global. An attacker could craft a malicious model that uses Pickle to pull in a malicious PyPI package hosted, for example, on pypi.org or GitHub via pip.main. Because pip is not a restricted global, the model, when scanned with picklesca...

5.3CVSS6.9AI score0.16248EPSS
Exploits2References3Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/02/25 6:18 p.m.2 views

Malicious code in acloud-clients (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 89813876cca364b0dffda624005d527aa3c9f54ea7ce20af8186faf8f374ba6f This campaign is built from two parts: 1 packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date" to a remote...

7.2AI score
Exploits0References4
OSV
OSV
added 2025/02/25 6:18 p.m.2 views

MAL-2025-191905 Malicious code in time-service-checker (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 92ae5fc73fd7cc45d02ba02f6c3b667d155f681ba74262d66421edee5f19d237 This campaign is built from two parts: 1 packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date" to a remote...

7.2AI score
Exploits0References4
OSV
OSV
added 2025/02/25 6:18 p.m.2 views

MAL-2025-191904 Malicious code in time-server-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8a160dff2a937ad50482cc2b8c8bcd1b7e7c37aefb584bd26515edfecdd4052f This campaign is built from two parts: 1 packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date" to a remote...

7.2AI score
Exploits0References4
Wolfi
Wolfi
added 2025/02/25 3:16 p.m.57 views

GHSA-QXG5-MCMP-M3M9 vulnerabilities

Vulnerabilities for packages: python...

7.5AI score
Exploits0
Chainguard
Chainguard
added 2025/02/25 1:11 p.m.3 views

GHSA-PH84-RCJ2-FXXM vulnerabilities

Vulnerabilities for packages: python...

7.3AI score
Exploits0
Chainguard
Chainguard
added 2025/02/25 1:11 p.m.3 views

GHSA-QXG5-MCMP-M3M9 vulnerabilities

Vulnerabilities for packages: python...

7.3AI score
Exploits0
Chainguard
Chainguard
added 2025/02/25 1:11 p.m.5 views

GHSA-Q98G-HXG3-268C vulnerabilities

Vulnerabilities for packages: python...

7.3AI score
Exploits0
Chainguard
Chainguard
added 2025/02/25 1:11 p.m.5 views

GHSA-MMM5-WGVP-WP8R vulnerabilities

Vulnerabilities for packages: python...

7.3AI score
Exploits0
Chainguard
Chainguard
added 2025/02/25 1:11 p.m.3 views

GHSA-MH6Q-V4MP-2CC7 vulnerabilities

Vulnerabilities for packages: python...

7.3AI score
Exploits0
vulnersOsv
vulnersOsv
added 2025/02/21 10:43 p.m.2 views

2vyper (=0.3.0), ape-dasy (=0.1.0) +30 more potentially affected by CVE-2025-27104 via vyper (>=0.1.0b12 <=0.4.0)

vyper PYPI version =0.1.0b12, =0.6.0, =0.7.1, =0.1.0, =0.0.0, =0.0.0, =0.0.5, =0.1.0, =0.1.0, =0.7.2, =0.1.10.0, =1.0.1, =0.1.0, =1.4.0, =1.20.7 and more Source cves: CVE-2025-27104 Source advisory: SNYK:PYTHON-VYPER-8743936...

7.5CVSS7.1AI score0.00324EPSS
Exploits1
vulnersOsv
vulnersOsv
added 2025/02/21 10:43 p.m.1 views

2vyper (=0.3.0), ape-dasy (=0.1.0) +30 more potentially affected by CVE-2025-27105 via vyper (>=0.1.0b12 <=0.4.0)

vyper PYPI version =0.1.0b12, =0.6.0, =0.7.1, =0.1.0, =0.0.0, =0.0.0, =0.0.5, =0.1.0, =0.1.0, =0.7.2, =0.1.10.0, =1.0.1, =0.1.0, =1.4.0, =1.20.7 and more Source cves: CVE-2025-27105 Source advisory: SNYK:PYTHON-VYPER-8743937...

9.1CVSS7.2AI score0.00326EPSS
Exploits1
vulnersOsv
vulnersOsv
added 2025/02/21 10:15 p.m.1 views

2vyper (=0.3.0), ape-dasy (=0.1.0) +30 more potentially affected by CVE-2025-26622 via vyper (>=0.1.0b12 <=0.4.0)

vyper PYPI version =0.1.0b12, =0.6.0, =0.7.1, =0.1.0, =0.0.0, =0.0.0, =0.0.5, =0.1.0, =0.1.0, =0.7.2, =0.1.10.0, =1.0.1, =0.1.0, =1.4.0, =1.20.7 and more Source cves: CVE-2025-26622 Source advisory: OSV:PYSEC-2025-29...

7.5CVSS7.1AI score0.00241EPSS
Exploits0
Rows per page
Query Builder