74601 matches found
CVE-2026-73233
A flaw was found in FreeCAD. An attacker could craft a malicious formula in the FEM Displacement Constraint task dialog. Due to an incomplete escape mechanism that fails to neutralize backslashes, this crafted formula text can terminate a generated Python string. When a victim accepts the dialog,...
CVE-2026-6879 vulnerabilities
Vulnerabilities for packages: python...
GHSA-77QW-3XM6-R2PP vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-6879 vulnerabilities
Vulnerabilities for packages: python...
GHSA-77QW-3XM6-R2PP vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-73248
A flaw was found in calibre, an e-book manager. A remote attacker could craft a malicious e-book file such as EPUB, OPF, or PDF containing specially crafted metadata. When a user opens or imports this file, the application's processing of nested templates can bypass Python template restrictions,...
Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six
No d...
CVE-2026-19594
Insufficient input sanitization in Snowflake Python API snowflake.core versions prior to 1.13.0 allowed confused-deputy privilege escalation through two related weaknesses: path traversal CWE-22 via unencoded .. identifier path segments, and HTTP parameter pollution CWE-141 via unencoded &//=...
CVE-2026-19594
Insufficient input sanitization in Snowflake Python API snowflake.core versions prior to 1.13.0 allowed confused-deputy privilege escalation through two related weaknesses: path traversal CWE-22 via unencoded .. identifier path segments, and HTTP parameter pollution CWE-141 via unencoded &//=...
CVE-2026-19594
Insufficient input sanitization in Snowflake Python API "snowflake.core" versions prior to 1.13.0 allowed confused-deputy privilege escalation through two related weaknesses: path traversal CWE-22 via unencoded ".." identifier path segments, and HTTP parameter pollution CWE-141 via unencoded...
CLSA-2026-1786503821 TuxCare security update for python-multipart (1 CVE)
TuxCare rebuilt python-multipart to address 1 CVE. Fixed in 0.0.6.post7+tuxcare...
CVE-2026-19594: Improper Limitation of a Pathname to a Restricted Directory
Insufficient input sanitization in Snowflake Python API snowflake.core versions prior to 1.13.0 allowed confused-deputy privilege escalation through two related weaknesses: path traversal CWE-22 via unencoded .. identifier path segments, and HTTP parameter pollution CWE-141 via unencoded &//=...
ALSA-2026:54290 Moderate: python-idna security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
Moderate: python-idna security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
RHEL 8 : python-idna (RHSA-2026:54290)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:54290 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...
AlmaLinux 8 : python-idna (ALSA-2026:54290)
The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:54290 advisory. python-idna: idna: Denial of Service via specially crafted long inputs CVE-2026-45409 Tenable has extracted the preceding description block directly from the...
python-idna security update
2.5-8 - Security fix for CVE-2026-45409 Resolves: RHEL-215650...
SUSE SLES15: libpython3_11-1_0 / python311 / python311-base / python311-curses / etc (SUSE-SU-2026:3548-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3548-1 advisory. Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when t...
python3.9 security update
3.9.25-7.0.1.el98.3 - Remove upstream URL reference 3.9.25-7.3 - Security fix for CVE-2026-11940 Resolves: RHEL-227228 3.9.25-7.2 - Security fix for CVE-2026-15308 Resolves: RHEL-193786 3.9.25-7.1 - Fix ssl.SSLError: ASN1: NOTENOUGHDATA not enough data with OpenSSL 3.5.7+ Resolves: RHEL-194207...
