1006 matches found
Astra Linux – vulnerability in python2.7, python3.7
The urllib.parse.urlsplit and urlparse functions improperly validate bracketed hosts , allowing hosts that are not IPv6 or IPvFuture. This behavior does not comply with RFC 3986 and may enable SSRF if a URL is processed by multiple URL parsers...
Astra Linux – Vulnerability in Python 3.7, PHP 7.3
The Keccak XKCP SHA-3 reference implementation, prior to the update of fdc6fef, has an integer overflow and resulting buffer overflow issue. This vulnerability allows attackers to execute arbitrary code or compromise the expected cryptographic properties of the algorithm. This issue occurs within...
ROOT-OS-DEBIAN-13-CVE-2026-15308 CVE-2026-15308 in python3.13 - Patched by Root
Root has patched CVE-2026-15308 in the python3.13 package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-11972 CVE-2026-11972 in python3.11 - Patched by Root
Root has patched CVE-2026-11972 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-4360 CVE-2026-4360 in python3.11 - Patched by Root
Root has patched CVE-2026-4360 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-0864 CVE-2026-0864 in python3.11 - Patched by Root
Root has patched CVE-2026-0864 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...
Astra Linux – Vulnerability in Python 3.11
It allows the extraction filter to be ignored, enabling symlink targets to point outside the destination directory, and modifying some file metadata. This vulnerability affects users who use the TarFile module to extract untrusted tar archives using TarFile.extractall or TarFile.extract, with the...
Astra Linux – Vulnerability in Python 3.7, Python 2.7
There is a flaw in the urllib’s AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server to which an HTTP client such as a web browser connects can trigger a Regular Expression Denial of Service ReDOS during an authentication request. This occurs when the server sends a...
Astra Linux – Vulnerability in Python 2.7, Python 3.7
A use-after-free exists in Python through version 3.9 via the heappushpop function in the heapq module...
Astra Linux – Vulnerability in Python 2.7, Python 3.7
A flaw was discovered in Python, specifically in the FTP File Transfer Protocol client library when operating in PASV passive mode. The issue arises from how the FTP client defaults to trusting the host based on the PASV response. This flaw allows an attacker to create a malicious FTP server that...
ROOT-OS-DEBIAN-11-CVE-2026-11972 CVE-2026-11972 in python3.9 - Patched by Root
Root has patched CVE-2026-11972 in the python3.9 package for Root:Debian:11. Multiple fixed versions available...
RHSA-2026:52400 Red Hat Security Advisory: python3 security update
Bulletin has no description...
[SECURITY] Fedora 43 Update: python3.12-3.12.13-6.fc43
Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable:...
EulerOS 2.0 SP11 : python3 (EulerOS-SA-2026-3153)
According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : User-controlled header names and values containing newlines can allow injecting HTTP headers.CVE-2026-0865 Tenable has extracted the preceding...
OESA-2026-3236 python-Keras security update
Keras is a high-level neural networks API for Python. Security Fixes: Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in keras/src/utils/fileutils.py. The functions filtersafetarinfos and filtersafezipinfos validate archive membe...
RHSA-2026:50816 Red Hat Security Advisory: python3 security update
Bulletin has no description...
RHSA-2026:50771 Red Hat Security Advisory: python3.12 security update
Bulletin has no description...
EulerOS 2.0 SP13 : python3 (EulerOS-SA-2026-2995)
According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : User-controlled header names and values containing newlines can allow injecting HTTP headers.CVE-2026-0865 Tenable has extracted the preceding...