68152 matches found
Astra Linux – Vulnerability in Python 2.7, Python 3.7
A flaw was discovered in Python, specifically in the FTP File Transfer Protocol client library when operating in PASV passive mode. The issue arises from how the FTP client defaults to trusting the host based on the PASV response. This flaw allows an attacker to create a malicious FTP server that...
Astra Linux – Vulnerability in python-py
A denial of service attack via regular expressions in the py.path.svnwc component of py also known as python-py in versions up to 1.9.0 could be exploited by attackers to trigger a compute-time denial of service attack by providing malicious input to the blame functionality...
Astra Linux – Vulnerability in Python 3.7
The lib/zipfile.py module in Python, as of version 3.7.2, allows remote attackers to cause a denial of service resource consumption through a ZIP bomb attack...
Astra Linux – Vulnerability in Python 3.7
A issue was discovered in the CPython tempfile.TemporaryDirectory class, affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, 3.8.18, and earlier versions. The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means that users who can...
ROOT-APP-PYPI-GHSA-93GM-QMQ6-W238 GHSA-93gm-qmq6-w238 in starlette - Patched by Root
Root has patched GHSA-93gm-qmq6-w238 in the starlette package for Root:PyPI. Multiple fixed versions available...
CVE-2026-87910
A flaw was found in the Python tarfile module. When extracting an archive containing a link on systems that do not support links, the module falls back to extracting the linked member. During this fallback, a security filter designed to prevent the extraction of certain files is not properly...
ROOT-APP-PYPI-CVE-2026-53539 CVE-2026-53539 in python-multipart - Patched by Root
Root has patched CVE-2026-53539 in the python-multipart package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2024-24762 CVE-2024-24762 in python-multipart - Patched by Root
Root has patched CVE-2024-24762 in the python-multipart package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-24486 CVE-2026-24486 in python-multipart - Patched by Root
Root has patched CVE-2026-24486 in the python-multipart package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2024-53981 CVE-2024-53981 in python-multipart - Patched by Root
Root has patched CVE-2024-53981 in the python-multipart package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-42561 CVE-2026-42561 in python-multipart - Patched by Root
Root has patched CVE-2026-42561 in the python-multipart package for Root:PyPI. Multiple fixed versions available...
cra-watch
cra-watch Does anything you ship have a known-exploited vul...
Security update for python-sqlparse
This update for python-sqlparse fixes the following issue: CVE-2026-84305: Reindentation of tuple lists causes near-cap quadratic CPU consumption bsc1278097. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
SUSE-SU-2026:4145-1 Security update for python-sqlparse
This update for python-sqlparse fixes the following issue: - CVE-2026-84305: Reindentation of tuple lists causes near-cap quadratic CPU consumption bsc1278097...
CLSA-2026-1789365078 TuxCare security update for cryptography (2 CVEs)
TuxCare rebuilt cryptography to address 2 CVEs. Fixed in 44.0.3.post4+tuxcare...
Important: Red Hat Security Advisory: python-tornado security update
An update for python-tornado is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...
AndroidPhantom
👻 ANDROID PHANTOM 🏴☠️ The Next-Gen Android Pentesting Fr...
CVE-2026-90618
A flaw has been found in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This issue affects the function LocalRuntime.executecommand of the file runtime/runtime.py of the component LocalRuntime. Executing a manipulation can lead to os command injection. The attack may be...
CVE-2026-90621 ipa-lab HackingBuddyGPT ssh_run_command.py ssh_run_command os command injection
A vulnerability was identified in ipa-lab HackingBuddyGPT up to 0.5.0. This affects the function sshruncommand of the file src/hackingBuddyGPT/extensions/sshruncommand.py. Such manipulation leads to os command injection. The attack can be launched remotely. The exploit is publicly available and...