CVE-2025-53837

XWiki Rendering is a generic rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. Prior to versions 14.10.2 and 15.0 RC1, any user who can edit their own user profile or any other document can execute arbitrary script macros includi...

EUVD-2025-210935

XWiki Rendering is a generic rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. Prior to versions 14.10.2 and 15.0 RC1, any user who can edit their own user profile or any other document can execute arbitrary script macros includi...

CVE-2025-53837 org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue

XWiki Rendering is a generic rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. Prior to versions 14.10.2 and 15.0 RC1, any user who can edit their own user profile or any other document can execute arbitrary script macros includi...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-45149 DESCRIPTION: The brace-expansion library generates arbitrary strings containing a common prefix and suffix. From 5.0.0 to before 5.0.6, the max...

Syntecxhub_Web-Vulnerability-Scanner

Syntecxhub Web Vulnerability Scanner A Python-based web vulne...

embedded-exploitation

Embedded Exploitation Framework Research & Educational Se...

CLEANSTART-2026-NQ59682 Security fix for CVE-2024-52616 applied in: playwright-python 1.54.0-r1

Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-HQ46365 Security fix for CVE-2023-38473 applied in: playwright-python 1.54.0-r1

Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-AV29205 Security fix for CVE-2024-52615 applied in: playwright-python 1.54.0-r1

Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-GA41131 Security fix for CVE-2023-38472 applied in: playwright-python 1.54.0-r1

Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-FV76384 Security fix for CVE-2023-38470 applied in: playwright-python 1.54.0-r1

Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-YF74212 Security fix for CVE-2023-38471 applied in: playwright-python 1.54.0-r1

Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-VW83784 Security fix for CVE-2023-38469 applied in: playwright-python 1.54.0-r1

Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details...

secator v0.44.0

The pentester's swiss knife. Features • Supported commands • Installation • Usage • Documentation • Join us on Discord ! secator is a task and workflow runner used for security assessments. It supports dozens of well-known security tools and it is designed to improve productivity for pentesters a...

CLEANSTART-2026-GV69580 Security fix for ghsa-537c-gmf6-5ccf applied in: airflow-2 2.11.0-r3, airflow-2 2.11.2-r4, airflow-3 3.1.8-r4, airflow-3 3.2.1-r4, apache-superset 5.0.0-r8, apache-superset 6.0.0-r6, az 2.83.0-r3, az 2.84.0-r4, jupyterhub-k8s-hub 4.3.5-r2, k8s-sidecar 2.4.0-r1, k8s-sidecar 2.5.5-r0, litellm-database 1.90.2-r0, py3-jupyterhub 5.4.6-r3, tensorflow-gpu-jupyter 2.21.0-r8

ghsa-537c-gmf6-5ccf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

OPENSUSE-SU-2026:21874-1 Security update for python-GitPython

This update for python-GitPython fixes the following issues: - CVE-2026-67322: environment-variable exfiltration in Repo.clonefrom URL via os.path.expandvars bsc1273357. - CVE-2026-67323: unguarded Git options passed as keyword arguments in Repo.archive and git.lsremote allow for command injectio...

Malicious Package

Overview liquid-olive-python is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

perf-benchmark-poc

Large Model-Based Python Performance Optimization Loop v0.1...

[SECURITY] Fedora 44 Update: python-django5-5.2.17-2.fc44

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

[SECURITY] Fedora 43 Update: python-django5-5.2.17-2.fc43

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...