68031 matches found
CVE-2026-52835
Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to 2.17.2, the importconfig handler and the databasefile branch of importdatabase in plexpy/webserve.py join the attacker-controlled configfile.filename or databasefile.filename directly to CACHEDIR without...
CVE-2026-49995
Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to 2.17.2, the newsletter cron field stored in the newsletters table is inserted by data/interfaces/default/newsletterconfig.html into a JavaScript string without safe JSON encoding. An administrator or caller wi...
CVE-2026-49995 Tautulli: Stored Cross-Site Scripting (XSS) in the newsletter
Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to 2.17.2, the newsletter cron field stored in the newsletters table is inserted by data/interfaces/default/newsletterconfig.html into a JavaScript string without safe JSON encoding. An administrator or caller wi...
CVE-2026-49995 Tautulli: Stored Cross-Site Scripting (XSS) in the newsletter
Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to 2.17.2, the newsletter cron field stored in the newsletters table is inserted by data/interfaces/default/newsletterconfig.html into a JavaScript string without safe JSON encoding. An administrator or caller wi...
CVE-2026-54915 Tautulli: Open redirect via whitespace bypass in /auth/redirect
Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to 2.17.2, the unauthenticated /auth/redirect endpoint in plexpy/webauth.py removes forward slashes from the user-controlled redirecturi parameter but leaves tab, line-feed, and carriage-return characters intact...
CVE-2026-52835 Tautulli: Path traversal / arbitrary file write via unsanitized upload filename in import_config and import_database
Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to 2.17.2, the importconfig handler and the databasefile branch of importdatabase in plexpy/webserve.py join the attacker-controlled configfile.filename or databasefile.filename directly to CACHEDIR without...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python-urllib3: python3-urllib3+brotli-2.8.0-1.hum1 noarch python3-urllib3+h2-2.8.0-1.hum1 noarch python3-urllib3+socks-2.8.0-1.hum1 noarch python3-urllib3+zstd-2.8.0-1.hum1 noarch...
SUSE CVE-2026-77528
Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. Prior to 26.7.1, WebSocket endpoints that accept permessage-deflate and rely on maxMessagePayloadSize enforce that limit against the compressed frame length before inflation but do not recheck the...
K000163359: Python vulnerability CVE-2026-30922
Security Advisory Description pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the pyasn1 library is vulnerable to a Denial of Service DoS attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containi...
OPENSUSE-SU-2026:21928-1 Security update for python-weasyprint
This update for python-weasyprint fixes the following issues: Changes in python-weasyprint: - CVE-2026-55073: Server-Side Request Forgery SSRF bsc1279942...
Rhacker
🔴 Rhacker Autonomous Penetration Testing Agent !Python...
USN-8787-1: libxml2 vulnerabilities
It was discovered that libxml2 incorrectly handled certain XML elements under certain circumstances. An attacker could possibly use this issue to cause libxml2 to crash or execute arbitrary code. CVE-2026-86140 It was discovered that libxml2 incorrectly handled certain XML documents when used wit...
USN-8787-1 libxml2 vulnerabilities
It was discovered that libxml2 incorrectly handled certain XML elements under certain circumstances. An attacker could possibly use this issue to cause libxml2 to crash or execute arbitrary code. CVE-2026-86140 It was discovered that libxml2 incorrectly handled certain XML documents when used wit...
ROOT-APP-PYPI-CVE-2025-67221 CVE-2025-67221 in orjson - Patched by Root
Root has patched CVE-2025-67221 in the orjson package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-84382 CVE-2026-84382 in httpx2 - Patched by Root
Root has patched CVE-2026-84382 in the httpx2 package for Root:PyPI. Multiple fixed versions available...
CVE-2026-66039 vulnerabilities
Vulnerabilities for packages: eco-python-ffmpeg-minimal, ffmpeg...
CVE-2026-66040 vulnerabilities
Vulnerabilities for packages: eco-python-ffmpeg-minimal, ffmpeg...
CVE-2026-66041 vulnerabilities
Vulnerabilities for packages: eco-python-ffmpeg-minimal...