GHSA-VR27-9W4V-HJW2 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

CVE-2026-14457 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

CVE-2026-54874 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

CVE-2026-63072 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

CVE-2026-63075 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

CVE-2026-63076 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

GHSA-826X-QG76-XQJX vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

CVE-2026-18798 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

CVE-2026-63073 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

CVE-2026-75803 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

GHSA-2Q27-MPM9-44M4 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

GHSA-6M2H-7HRP-6JW8 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

GHSA-WP5F-6Q39-Q2F4 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

EUVD-2026-70251

HTTPX2: Streaming response decompression does not bound peak memory decompression amplification...

aetherpost (>=1.1.0, <=1.9.0), afterdark-llm-firewall (0.1.0) +145 more potentially affected by CVE-2026-84379 via httpx2 (>=2.2.0, <=2.10.0)

httpx2 PYPI version =2.2.0, =1.1.0, =0.1.5, =0.1.12, =1.3.155, =0.0.2, =0.2.0, =0.1.0, =0.1.1, =0.1.2, =0.8.3, =0.3.4, =0.1.0, =0.0.1, =0.1.8, =0.1.12 and more Source cves: CVE-2026-84379 Source advisory: SNYK:PYTHON-HTTPX2-20361638...

EUVD-2026-70246

HTTPX2: Multipart part header injection via unvalidated file Content-Type and custom headers...

EUVD-2026-70242

HTTPX2: Quadratic SSE line buffering can cause CPU denial of service...

aetherpost (>=1.1.0, <=1.9.0), afterdark-llm-firewall (0.1.0) +102 more potentially affected by CVE-2026-84381 via httpx2 (>=2.6.0, <=2.9.1)

httpx2 PYPI version =2.6.0, =1.1.0, =0.1.5, =0.1.12, =1.3.155, =0.0.2, =0.2.0, =0.1.1, =0.1.2, =0.8.3, =0.3.4, =0.1.0, =0.0.1, =0.1.8, =0.1.12 - async-hermes-agent 0.20.4.1 and more Source cves: CVE-2026-84381 Source advisory: OSV:GHSA-7MJ9-2MP8-4M2P...

GHSA-W3V8-GMH9-3WV7 NLTK: ReDoS in nltk.tgrep via unvalidated user-supplied regular expressions

Summary The NLTK tgrep module accepts user-supplied regular expressions and passes them to the Python re engine without a timeout or validation, enabling catastrophic backtracking ReDoS. Applications that expose the tgrep API to external input are vulnerable to a single-request denial of service...

django-l10n-extensions (>=1.0.1, <=1.1.0), django-l10n-extensions-django-3 (1.0.7) +9 more potentially affected by CVE-2026-78679 via gitpython (1.0.1)

gitpython PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - django-l10n-extensions =1.0.1, =0.1.0, =0.1.0, =0.1.0.dev20160122122211, =0.3.0, =0.3.1, =0.1.0, =0.0.0, =0.1.2, =0.1.18 Source cves:...