PT-2026-77031

Name of the Vulnerable Software and Affected Versions Python affected versions not specified Description The stringprep module incorrectly processes characters from RFC 3454 tables B.2 or B.3 by using the latest Unicode codepoint attributes instead of the required Unicode 3.2.0. This leads to...

Amazon Linux 2 : python-urwid, --advisory ALAS2-2026-3858 (ALAS-2026-3858)

The version of python-urwid installed on the remote host is prior to 1.1.1-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3858 advisory. The urwid web display backend urwid/display/web.py generates web session identifiers urwidid in Screen.start by concatenating...

Linux Distros Unpatched Vulnerability : CVE-2026-59893

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, SQLREGEX in sqlparse/keywords.py and the per-position loop in sqlparse/lexer.py...

JetBrains Datalore 2026.2.3 Remote Code Execution

JetBrains Datalore On-Premises version 2026.2.3 contains an authorization flaw in publicly shared interactive reports. An unauthenticated remote attacker with access to a public report can have READ permissions incorrectly mapped to EXECUTE permissions, allowing access to computation RPC methods...

Linux Distros Unpatched Vulnerability : CVE-2026-71491

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, groupcomments in sqlparse/engine/grouping.py repeatedly rescans comment-only statemen...

Linux Distros Unpatched Vulnerability : CVE-2026-54284

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, TokenList construction and string conversion in sqlparse/sql.py repeatedly flatten...

GitPython Code Execution

The vulnerability of the checkunsafeoptions mechanism in the Python library for interacting with Git repositories, GitPython, is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to rewrite any files in the system remote...

CVE-2026-50577: Reusing a Nonce, Key Pair in Encryption

ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration leaves requestcounter unchanged in app/vau/VAUProtokoll.py while constructing VAU messages. The frozen client request counte...

Important: python3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Exploit for CVE-2026-15748

CVE-2026-15826, CVE-2026-15748 Donate Support the mainten...

qwen3.8-9b-cyber-exploit-agent-uncensored

Qwen3.8-9B Cyber Exploit Agent — UNCENSORED Identical fine-tu...

CVE-2026-69146

creationtimestamp| type| source ---|---|--- 2026-08-17 22:35:05+00:00| published-proof-of-concept| https://github.com/mlflow/mlflow/security/advisories/GHSA-3p64-6gvh-82v5 2026-08-17 23:31:40+00:00| seen| https://gist.github.com/alon710/bb0c1f0112166e936833a909d435a77a 2026-08-18 00:01:16+00:00|...

acdc-aws-etl-pipeline (>=0.1.7, <=0.5.9), acryl-datahub-gx-plugin (>=0.14.0.3rc1, <=0.15.0rc15) +687 more potentially affected by CVE-2026-71491 via sqlparse (>=0.1.14, <=0.5.5)

sqlparse PYPI version =0.1.14, =0.1.7, =0.14.0.3rc1, =2.0.0, =0.2.0, =0.0.1, =1.0.6, =0.1.0, =2.0.0, =0.8.0, =0.0.1a0, =0.1.0, =0.2.0 and more Source cves: CVE-2026-71491 Source advisory: SNYK:PYTHON-SQLPARSE-18905009...

DEBIAN-CVE-2026-34399

FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, FreeCAD's BIM Workbench contains an eval call on untrusted data from SVG template files. When a user creates a TechDraw page from a malicious SVG template, arbitrary Python code executes. The vulnerable...

CVE-2026-34789

FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, src/App/PropertyPythonObject.cpp in PropertyPythonObject::Restore passes the attacker-controlled module attribute from serialized PropertyPythonObject XML directly to PyImportImportModule while restoring a...

DEBIAN-CVE-2026-34789

FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, src/App/PropertyPythonObject.cpp in PropertyPythonObject::Restore passes the attacker-controlled module attribute from serialized PropertyPythonObject XML directly to PyImportImportModule while restoring a...

DEBIAN-CVE-2026-34398

FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, src/Mod/BIM/bimcommands/BimProjectManager.py in the BIM Project Manager Load Template flow passes attacker-controlled FCStd Meta property values for wpposition, wpu, wpv, and wpaxis directly to eval,...

UBUNTU-CVE-2026-34789

FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, src/App/PropertyPythonObject.cpp in PropertyPythonObject::Restore passes the attacker-controlled module attribute from serialized PropertyPythonObject XML directly to PyImportImportModule while restoring a...

UBUNTU-CVE-2026-34398

FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, src/Mod/BIM/bimcommands/BimProjectManager.py in the BIM Project Manager Load Template flow passes attacker-controlled FCStd Meta property values for wpposition, wpu, wpv, and wpaxis directly to eval,...

CVE-2026-34789

FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, src/App/PropertyPythonObject.cpp in PropertyPythonObject::Restore passes the attacker-controlled module attribute from serialized PropertyPythonObject XML directly to PyImportImportModule while restoring a...