70136 matches found
DEBIAN-CVE-2026-87910
When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...
UBUNTU-CVE-2026-87910
When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...
PSF-2026-40
When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...
EUVD-2026-76162
When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...
CVE-2026-87910 tarfile hardlink fallback ignores custom extraction filter rejection via None
When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...
CVE-2026-87910
When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...
CVE-2026-87910
CVE-2026-87910 affects Python's tarfile module. When extracting a hardlink on a system without link support, tarfile falls back to extracting the referenced member from the archive. During this fallback, the extraction filter function is invoked twice—once for the extracted member and once with t...
CVE-2026-87910 tarfile hardlink fallback ignores custom extraction filter rejection via None
When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...
Security Bulletin: IBM Cloud Pak for Data is vulnerable to buffer overflow due to cryptography ( CVE-2026-39892 )
Summary Potential vulnerabilities in cryptography package CVE-2026-39892 has been identified that may affect IBM Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-39892 DESCRIPTION: cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From...
SUSE CVE-2026-88029
Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...
python-lxml security update
An update is available for python-lxml. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...
CLSA-2026-1789123062 TuxCare security update for flask-cors (3 CVEs)
TuxCare rebuilt flask-cors to address 3 CVEs. Fixed in 5.0.1.post1+tuxcare...
apk-info v1.0.13
apk-info A full-featured apk parser. Features A malware-friendly zip extractor. Great article about BadPack technique; A malware-friendly axml and arsc extractor; A full AXML Android Binary XML implementation; A full ARSC Android Resource implementation; Support for extracting information contain...
ROOT-OS-DEBIAN-11-CVE-2026-11972 CVE-2026-11972 in python3.9 - Patched by Root
Root has patched CVE-2026-11972 in the python3.9 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-6019 CVE-2026-6019 in python3.9 - Patched by Root
Root has patched CVE-2026-6019 in the python3.9 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-3276 CVE-2026-3276 in python3.9 - Patched by Root
Root has patched CVE-2026-3276 in the python3.9 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-3479 CVE-2026-3479 in python3.9 - Patched by Root
Root has patched CVE-2026-3479 in the python3.9 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-7210 CVE-2026-7210 in python3.9 - Patched by Root
Root has patched CVE-2026-7210 in the python3.9 package for Root:Debian:11. Multiple fixed versions available...