python: Fix of CVE-2026-0864

CVE-2026-0864: fix configuration injection in the ConfigParser module by normalizing all line endings CR, CRLF and LF to LF+TAB when writing multi-line values, so a carriage return in an attacker-controlled value can no longer inject unexpected keys and values into the written file...

ROOT-OS-DEBIAN-12-CVE-2026-1502 CVE-2026-1502 in python3.11 - Patched by Root

Root has patched CVE-2026-1502 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-3276 CVE-2026-3276 in python3.11 - Patched by Root

Root has patched CVE-2026-3276 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-8328 CVE-2026-8328 in python3.11 - Patched by Root

Root has patched CVE-2026-8328 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...

SUSE-SU-2026:23523-1 Security update for python-tornado6

This update for python-tornado6 fixes the following issue: - CVE-2026-82397: an unauthenticated request body containing millions of separator-delimited fields can synchronously stall the single-threaded event loop and delay every connection bsc1277725...

SUSE-SU-2026:4031-1 Security update for python-aiohttp

This update for python-aiohttp fixes the following issues: - CVE-2026-59881: excessive resource consumption due to WebSocket client accepting compressed frames without negotiated permessage-deflate bsc1273125. - CVE-2026-69243: HTTP request smuggling via the WebSocket upgrade procedure bsc1273553...

Security update for python-aiohttp

This update for python-aiohttp fixes the following issues: CVE-2026-59881: excessive resource consumption due to WebSocket client accepting compressed frames without negotiated permessage-deflate bsc1273125. CVE-2026-69243: HTTP request smuggling via the WebSocket upgrade procedure bsc1273553...

qiling v1.4.11

Qiling's use case, blog and related work Qiling is an advanced binary emulation framework, with the following features: Emulate multi-platforms: Windows, macOS, Linux, Android, BSD, UEFI, DOS, MBR. Emulate multi-architectures: 8086, X86, X8664, ARM, ARM64, MIPS, RISC-V, PowerPC. Support multiple...

CVE-2026-86237

A server-side request forgery (SSRF) vulnerability affects the openagents-org/openagents Python SDK in versions up to 0.8.19 / 0.9.3.post20 . The vulnerable function is test_default_model in sdk/src/openagents/sdk/transports/http.py, where an unvalidated base_url argument allows a remote, unauthe...

PT-2026-88203

These are all security issues fixed in the python313-fastapi-0.138.0-2.1 package on the GA media of openSUSE Tumbleweed...

ROS-20260907-73-0072

The vulnerability in python-pygments is related to the use of a regular expression c, which has an inefficient computational complexity. Exploiting this vulnerability may allow a remote attacker to cause a service failure...

PT-2026-88202

These are all security issues fixed in the python313-dnspython-2.8.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11709-1 python313-dnspython-2.8.0-2.1 on GA media

These are all security issues fixed in the python313-dnspython-2.8.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11710-1 python313-fastapi-0.138.0-2.1 on GA media

These are all security issues fixed in the python313-fastapi-0.138.0-2.1 package on the GA media of openSUSE Tumbleweed...

VEX-Bench: Benchmarking LLM Agents for Assessing Exploitability of Software Supply Chain Vulnerabilities

The software supply chain has become an increasingly exposed attack surface because of its reliance on intricate yet fragile dependencies. Existing defenses such as GitHub Dependabot often raise many false alerts because their coarse-grained matching cannot determine whether a vulnerable dependen...

TencentOS Server 4: python3.11 (TSSA-2026:0969)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0969 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Exploit for CVE-2024-7804

CVE-2024-7804 — PyTorch Distributed RPC Unsafe Deserialization...

Devnull

DevNull DevNull is a Python CLI that automates the early, rep...

OPENSUSE-SU-2026:21777-1 Security update for python-sqlparse

This update for python-sqlparse fixes the following issue: - CVE-2026-84305: Reindentation of tuple lists causes near-cap quadratic CPU consumption bsc1278097...

SUSE-SU-2026:23634-1 Security update for python-sqlparse

This update for python-sqlparse fixes the following issue: - CVE-2026-84305: Reindentation of tuple lists causes near-cap quadratic CPU consumption bsc1278097...