74601 matches found
python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode
A flaw was found in the Python tarfile module. When processing a specially crafted tar archive opened in 'streaming mode' mode='r|', the module does not properly handle the end-of-file EOF condition. This can cause the tarfile module to enter an infinite loop, leading to a Denial of Service DoS f...
python: Python: Performance degradation in XML processing due to quadratic time complexity
A flaw was found in Python's xml.etree.ElementPath component. This vulnerability can lead to a denial of service DoS when processing specially crafted XML documents. Specifically, certain XPath index predicates used with functions like Element.findall and Element.iterfind can cause the processing...
python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations
A flaw was found in Python. Its incremental HTML parser can be exploited by a remote attacker. By sending specially crafted, uncontrolled data with repeated, incomplete markup declarations, the attacker can cause the system to consume excessive central processing unit CPU resources. This leads to...
python: Python: Denial of Service via super-linear regular expression work in csv.Sniffer.sniff()
A flaw was found in the csv.Sniffer.sniff function within Python. An attacker can exploit this by providing specially crafted CSV samples, which can trigger super-linear regular-expression processing during dialect sniffing. This excessive processing consumes significant CPU resources, potentiall...
python: Python Tarfile: Unexpected file ownership when extracting hardlinks
A flaw was found in the Python Tarfile.extract function. This vulnerability occurs when processing untrusted tar files containing hardlinks, as the filter parameter is not correctly enforced. An attacker could exploit this to write files with unintended user or group ownership, potentially leadin...
RHSA-2026:54484 Red Hat Security Advisory: python-idna security update
Bulletin has no description...
RHSA-2026:54481 Red Hat Security Advisory: python-idna security update
Bulletin has no description...
RHSA-2026:54417 Red Hat Security Advisory: python-pillow security update
Bulletin has no description...
RHSA-2026:54290 Red Hat Security Advisory: python-idna security update
Bulletin has no description...
CLSA-2026-1786616091 TuxCare security update for django (1 CVE)
TuxCare rebuilt django to address 1 CVE. Fixed in 5.1.4.post2+tuxcare...
python-idna: idna: Denial of Service via specially crafted long inputs
A flaw was found in the idna library, which handles Internationalized Domain Names in Python applications. A remote attacker could exploit this vulnerability by sending specially crafted, excessively long inputs to the library's encoding function. This could cause the system to consume significan...
Moderate: Red Hat Security Advisory: python-idna security update
An update for python-idna is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...
python-idna: idna: Denial of Service via specially crafted long inputs
A flaw was found in the idna library, which handles Internationalized Domain Names in Python applications. A remote attacker could exploit this vulnerability by sending specially crafted, excessively long inputs to the library's encoding function. This could cause the system to consume significan...
Moderate: Red Hat Security Advisory: python-idna security update
An update for python-idna is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
RLSA-2026:54268 Important: python3.9 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
RLSA-2026:54290 Moderate: python-idna security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
python-idna security update
An update is available for python-idna. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...
CLSA-2026-1786093153 python: Fix of CVE-2026-11972
CVE-2026-11972: fix an unbounded loop CPU DoS in the tarfile module when a member header in a streaming-mode archive mode="r|" declares a huge size, by breaking out of the Stream.seek read loop at EOF...
Beyond Source: An Empirical Study of Python Bytecode Security Risks
Python package security is largely source-centric, yet Python runtimes can execute bytecode directly through .pyc files, compiled-only modules, and marshalled code objects, creating an inspection-execution gap. We present an empirical study of Python bytecode as a security artifact. We measure...
