GHSA-QXG5-MCMP-M3M9 vulnerabilities

Vulnerabilities for packages: python...

2vyper (=0.3.0), ape-dasy (=0.1.0) +30 more potentially affected by CVE-2025-27104 via vyper (>=0.1.0b12 <=0.4.0)

vyper PYPI version =0.1.0b12, =0.7.1, =0.1.0, =0.0.0, =0.0.0, =0.0.5, =0.1.0, =0.1.0, =0.7.2, =0.1.10.0, =1.0.1, =0.1.0, =1.4.0, =1.20.7 and more Source cves: CVE-2025-27104 Source advisory: SNYK:PYTHON-VYPER-8743936...

2vyper (=0.3.0), ape-dasy (=0.1.0) +30 more potentially affected by CVE-2025-27104 via vyper (>=0.1.0b12 <=0.4.0)

vyper PYPI version =0.1.0b12, =0.7.1, =0.1.0, =0.0.0, =0.0.0, =0.0.5, =0.1.0, =0.1.0, =0.7.2, =0.1.10.0, =1.0.1, =0.1.0, =1.4.0, =1.20.7 and more Source cves: CVE-2025-27104 Source advisory: OSV:GHSA-H33Q-MHMP-8P67...

2vyper (=0.3.0), ape-dasy (=0.1.0) +30 more potentially affected by CVE-2025-27105 via vyper (>=0.1.0b12 <=0.4.0)

vyper PYPI version =0.1.0b12, =0.7.1, =0.1.0, =0.0.0, =0.0.0, =0.0.5, =0.1.0, =0.1.0, =0.7.2, =0.1.10.0, =1.0.1, =0.1.0, =1.4.0, =1.20.7 and more Source cves: CVE-2025-27105 Source advisory: SNYK:PYTHON-VYPER-8743937...

2vyper (=0.3.0), ape-dasy (=0.1.0) +30 more potentially affected by CVE-2025-27105 via vyper (>=0.1.0b12 <=0.4.0)

vyper PYPI version =0.1.0b12, =0.7.1, =0.1.0, =0.0.0, =0.0.0, =0.0.5, =0.1.0, =0.1.0, =0.7.2, =0.1.10.0, =1.0.1, =0.1.0, =1.4.0, =1.20.7 and more Source cves: CVE-2025-27105 Source advisory: OSV:GHSA-4W26-8P97-F4JP...

2vyper (=0.3.0), ape-dasy (=0.1.0) +30 more potentially affected by CVE-2025-26622 via vyper (>=0.1.0b12 <=0.4.0)

vyper PYPI version =0.1.0b12, =0.7.1, =0.1.0, =0.0.0, =0.0.0, =0.0.5, =0.1.0, =0.1.0, =0.7.2, =0.1.10.0, =1.0.1, =0.1.0, =1.4.0, =1.20.7 and more Source cves: CVE-2025-26622 Source advisory: OSV:PYSEC-2025-29...

acquantum-qiskit (>=0.0.1 <=0.0.3), aqmlator (=0.2.0) +84 more potentially affected by CVE-2025-1403 via qiskit (>=0.45.0 <=1.2.4)

qiskit PYPI version =0.45.0, =0.0.1, =0.0.1, =0.0.0, =2.0.0, =0.0.3, =0.1.1, =1.3.0, =0.2.0, =0.1.1, =0.1.0rc1, =0.1.0, =0.1.3 and more Source cves: CVE-2025-1403 Source advisory: SNYK:PYTHON-QISKIT-8743941...

Ubuntu: Security Advisory (USN-7280-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 41 Update: python3.10-3.10.16-5.fc41

Python 3.10 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.10 package provides the "python3.10" executable:...

a62-emotion (>=0.9.2 <=0.11.4), aba-cli-scrapper (>=0.1.0 <=0.7.6) +1827 more potentially affected by CVE-2024-12797 via cryptography (>=42.0.0 <=44.0.0)

cryptography PYPI version =42.0.0, =0.9.2, =0.1.0, =2.3.57, =0.1.0, =0.4.0, =0.1.0, =1.1.1, =0.2.0, =0.1.0, =0.1.0, =1.7.0, =1.7.2 and more Source cves: CVE-2024-12797 Source advisory: OSV:GHSA-79V4-65XG-PQ4G...

acedeploy (>=2.4.15 <=2.4.115), apache-airflow-providers-snowflake (>=2.4.0 <=2.5.1rc1) +125 more potentially affected by CVE-2025-24793 via snowflake-connector-python (>=2.2.5 <=3.13.0)

snowflake-connector-python PYPI version =2.2.5, =2.4.15, =2.4.0, =0.0.4, =0.1.3, =0.1.0, =1.13.21, =20230717.1.0, =0.4.0, =1.0.8, =0.5.1, =1.0.5, =1.0.6 and more Source cves: CVE-2025-24793 Source advisory: OSV:PYSEC-2025-26...

CVE-2025-24357 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm, py3.10-vllm-cuda-11.8...

agent-smith-ai (>=0.9.2 <=1.0.1), awslabs-ccapi-mcp-server (>=1.0.1 <=1.0.18) +37 more potentially affected by CVE-2025-24359 via asteval (>=0.9.13 <=1.0.5)

asteval PYPI version =0.9.13, =0.9.2, =1.0.1, =3.2.415, =3.2.415, =0.2.0, =0.1.0, =0.1.130, =6.0.0, =0.1.0, =0.0.1.dev6, =2.1.3, =0.8.305, =1.0.51 and more Source cves: CVE-2025-24359 Source advisory: OSV:GHSA-3WWR-3G9F-9GC7...

a2grunnerp (>=0.1.0 <=0.1.8), agora-protocol (=0.2.0) +40 more potentially affected by CVE-2025-22153 via restrictedpython (>=6.0.0 <=7.4.0)

restrictedpython PYPI version =6.0.0, =0.1.0, =1.5.19, =0.1.1, =0.1.5, =0.1.0, =2.0.0b4, =0.38.0, =0.0.86, =0.0.42, =0.1.0, =0.1.24, =1.0.8 and more Source cves: CVE-2025-22153 Source advisory: SNYK:PYTHON-RESTRICTEDPYTHON-8660824...

a2grunnerp (>=0.1.0 <=0.1.8), a62-emotion (>=0.9.2 <=0.11.4) +2603 more potentially affected by CVE-2024-55459 via keras (>=1.2.1 <=3.7.0)

keras PYPI version =1.2.1, =0.1.0, =0.9.2, =1.0.0, =0.0.6, =0.0.1, =0.1.0, =0.0.1, =0.0.3, =0.3.0, =1.0.1 and more Source cves: CVE-2024-55459 Source advisory: OSV:GHSA-CJGQ-5QMW-RCJ6...

Critical Photon OS Security Update - PHSA-2025-4.0-0730

Updates of 'python-requests', 'python3-webob', 'python3-gevent', 'python-virtualenv', 'python-jinja2', 'python-gevent', 'python-webob', 'python-tornado', 'python-werkzeug', 'python3-tornado', 'python3-werkzeug' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2024-5.0-0434

Updates of 'python-requests', 'python3-webob', 'python-virtualenv', 'python-jinja2', 'python-gevent', 'python3-jinja2', 'python-webob', 'python-tornado', 'python-werkzeug', 'python3-tornado', 'python3-werkzeug', 'python3' packages of Photon OS have been released...

Python Malware in Zebo-0.1.0 and Cometlogger-0.1 Found Stealing User Data

Fortinet discovers two malicious Python packages, Zebo-0.1.0 and Cometlogger-0.1, designed to steal data, capture keystrokes, and gain system control. Learn about their malicious behavior and how to protect yourself...

3di-cmd-client (>=0.0.1a0 <=0.0.3), a-api-server (=1.3.0) +4497 more potentially affected by CVE-2024-56326 via jinja2 (>=2.10.0 <=3.1.4)

jinja2 PYPI version =2.10.0, =0.0.1a0, =0.1.22, =1.0.2, =0.0.2, =3.0.0, =0.0.0, =0.0.1, =0.8.44.4, =0.9.2.1rc2 and more Source cves: CVE-2024-56326 Source advisory: OSV:GHSA-Q2X7-8RV6-6Q7H...

Security Bulletin: IBM Fusion HCI Installer is vulnerable to arbitrary code execution, gaining of elevated privileges, obtaining sensitive information, and denial of service due to various Python packages

Summary The IBM Fusion Installer is affected by vulnerabilities in Ansible and Python packages dnspython, requests, certifi and idna. Vulnerabilities include arbitrary code execution, gaining of elevated privileges, obtaining sensitive information, and denial of service. CVE-2023-5764,...