72522 matches found
Malicious Package
Overview py-devoli-common is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances of the...
Security Bulletin: Multiple Vulnerabilities in watsonx.data
Summary Multiple vulnerabilities were addressed in watsonx.data 2.4.0 patch 5 version, which was present in different version from watson.data 2.4.0 Vulnerability Details CVEID:CVE-2026-53537 DESCRIPTION: Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.30,...
Malicious code in selfcerts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef5688e6ff2ef3728556e4e455154ad9a8f6c44670eee611d55adb3cba250536 index.js reads sample/cert.pem, strips the BEGIN/END CERTIFICATE header and footer, base64-decodes the body, and evals the result. The decoded bytes...
RockyLinux 9 : python3.14-cryptography (RLSA-2026:64774)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:64774 advisory. python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building CVE-2026-69249 python-cryptography:...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-sqlparse (UTSA-2026-106767)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106767 advisory. sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, SQLREGEX in sqlparse/keywords.py and the per-position loop in sqlparse/lexer.py repeatedly...
TencentOS Server 3: python-pyasn1 (TSSA-2026:0990)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0990 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
openSUSE 16 Security Update : python-sqlparse (openSUSE-SU-2026:21777-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21777-1 advisory. This update for python-sqlparse fixes the following issue: - CVE-2026-84305: Reindentation of tuple lists causes near-cap quadratic CPU consumption...
openSUSE 16 Security Update : python-Authlib (openSUSE-SU-2026:21795-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21795-1 advisory. Changes in python-Authlib: - CVE-2026-41479: Open Redirect vulnerability via crafted authorization requests bsc1275231 Tenable has extracted the precedi...
CVE-2026-79696: Incomplete List of Disallowed Inputs
A Code Injection vulnerability in adk web in Google Cloud Agent Development Kit ADK for Python versions 2.0.0 through 2.6.0 on Python OSS, Cloud Run, and GKE environments where pytest is installed allows an unauthenticated remote attacker to execute arbitrary code using a crafted test session...
CVE-2026-87874: Deserialization of Untrusted Data
A flaw was found in the memcached cache plugin of the community.general Ansible collection. Although its documentation states that records are stored in JSON format, the plugin performs no explicit serialization and relies on python-memcached, which pickles values on write and unpickles them on...
Langflow AI Authenticated Remote Code Execution
Langflow versions 1.11.1 and below are susceptible to authenticated remote code execution. By saving a flow where data.type is empty, an authenticated user can bypass the flow guard and execute arbitrary Python code. https://packetstorm.news/download/231016...
PT-2026-89714
These are all security issues fixed in the python313-modelscope-1.40.0-1.1 package on the GA media of openSUSE Tumbleweed...
python-urllib3 security update
1.10.2-7.0.3 - Backport fix for CVE-2025-66471 Orabug: 39233228...
RHEL 9 : python-lxml (RHSA-2026:66204)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:66204 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...
RockyLinux 10 : python3.14-cryptography (RLSA-2026:64795)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:64795 advisory. python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building CVE-2026-69249 python-cryptography:...
MiracleLinux 9 : python3.14-cryptography-45.0.4-4.el9_8.6 (AXSA:2026-1788:01)
The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1788:01 advisory. python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building CVE-2026-69249 python-cryptography...
GHSA-2Q27-MPM9-44M4 vulnerabilities
Vulnerabilities for packages: eco-python-openssl...
GHSA-CJ75-R57J-R5V8 vulnerabilities
Vulnerabilities for packages: eco-python-openssl...