73978 matches found
CVE-2026-74860: Release of Invalid Pointer or Reference
A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition DTD with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callbac...
CVE-2026-74860: Release of Invalid Pointer or Reference
A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition DTD with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callbac...
CVE-2026-74860: Release of Invalid Pointer or Reference
A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition DTD with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callbac...
Linux Distros Unpatched Vulnerability : CVE-2026-74860
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document...
NewStart CGSL MAIN 7.02 : python-urllib3 Multiple Vulnerabilities (NS-SA-2026-0104)
The remote NewStart CGSL host, running version MAIN 7.02, has python-urllib3 packages installed that are affected by multiple vulnerabilities: - urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.0 and prior to 2.6.0, the Streaming API improperly handles highly...
EulerOS 2.0 SP12 : python-pyasn1 (EulerOS-SA-2026-3377)
According to the versions of the python-pyasn1 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the pyasn1 library is vulnerable to a Denial of Service DoS attack caused by...
EulerOS 2.0 SP12 : python-pillow (EulerOS-SA-2026-3300)
According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when giv...
ALSA-2026:64774 Important: python3.14-cryptography security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
ROS-20260908-73-0109
The vulnerability of the Diffable.diff method in the Python library for interacting with git repositories in GitPython relates to the implementation or modification of arguments. Exploiting this vulnerability could allow a malicious actor to re-write any files in the system remotely...
Important: python3.14-cryptography security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
Security update for python-Authlib (moderate)
openSUSE security update: security update for python-authlib ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21795-1 Rating: moderate References: bsc1275231 Cross-References: CVE-2026-41479 CVSS scores: CVE-2026-41479 SUSE : 5.4...
Security update for python-sqlparse (moderate)
openSUSE security update: security update for python-sqlparse ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21777-1 Rating: moderate References: bsc1278097 Cross-References: CVE-2026-84305 CVSS scores: CVE-2026-84305 SUSE : 4...
MGASA-2026-0380 Updated python-pyasn1 packages fix security vulnerabilities
The BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets in a loop with no upper bound on the size of the tag ID. A crafted input can force the decoder to build an arbitrarily large integer, with CPU cost growing quadratically in input size — a 1 ...
Updated python-pyasn1 packages fix security vulnerabilities
The BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets in a loop with no upper bound on the size of the tag ID. A crafted input can force the decoder to build an arbitrarily large integer, with CPU cost growing quadratically in input size — a 1 ...
ROOT-APP-PYPI-GHSA-3QJ8-93XH-PWH2 GHSA-3qj8-93xh-pwh2 in starlette - Patched by Root
Root has patched GHSA-3qj8-93xh-pwh2 in the starlette package for Root:PyPI. Multiple fixed versions available...
Malicious Package
Overview tsshare is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
CLSA-2026-1788794443 python: Fix of CVE-2026-0864
CVE-2026-0864: fix configuration injection in the ConfigParser module by normalizing all line endings CR, CRLF and LF to LF+TAB when writing multi-line values, so a carriage return in an attacker-controlled value can no longer inject unexpected keys and values into the written file...
python: Fix of CVE-2026-0864
CVE-2026-0864: fix configuration injection in the ConfigParser module by normalizing all line endings CR, CRLF and LF to LF+TAB when writing multi-line values, so a carriage return in an attacker-controlled value can no longer inject unexpected keys and values into the written file...
CLSA-2026-1788794163 python: Fix of CVE-2026-0864
CVE-2026-0864: fix configuration injection in the ConfigParser module by normalizing all line endings CR, CRLF and LF to LF+TAB when writing multi-line values, so a carriage return in an attacker-controlled value can no longer inject unexpected keys and values into the written file...