Important: Red Hat Security Advisory: python3.12 security update

An update for python3.12 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHSA-2026:50065 Red Hat Security Advisory: python3 security update

Bulletin has no description...

RHSA-2026:50064 Red Hat Security Advisory: python3 security update

Bulletin has no description...

ROOT-APP-PYPI-CVE-2026-41182 CVE-2026-41182 in langsmith - Patched by Root

Root has patched CVE-2026-41182 in the langsmith package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-48775 CVE-2026-48775 in langgraph-checkpoint - Patched by Root

Root has patched CVE-2026-48775 in the langgraph-checkpoint package for Root:PyPI. Multiple fixed versions available...

CVE-2026-69249 vulnerabilities

Vulnerabilities for packages: mlflow, apache-beam-python-3.13-sdk, openstack-nova-2026.1, openstack-glance-2026.1, apache-beam-python-3.12-sdk, vllm-openai-cuda-13.0, kserve, openstack-nova-2025.1, az, vllm-openai-cuda-12.9, dbt-snowflake, datadog-agent-fips, openstack-glance-2025.1,...

CVE-2026-69248 vulnerabilities

Vulnerabilities for packages: mlflow, apache-beam-python-3.13-sdk, openstack-nova-2026.1, openstack-glance-2026.1, apache-beam-python-3.12-sdk, vllm-openai-cuda-13.0, kserve, openstack-nova-2025.1, az, vllm-openai-cuda-12.9, dbt-snowflake, datadog-agent-fips, openstack-glance-2025.1,...

GHSA-JWV3-5HGF-82WW vulnerabilities

Vulnerabilities for packages: mlflow, apache-beam-python-3.13-sdk, openstack-nova-2026.1, openstack-glance-2026.1, apache-beam-python-3.12-sdk, vllm-openai-cuda-13.0, kserve, openstack-nova-2025.1, az, vllm-openai-cuda-12.9, dbt-snowflake, datadog-agent-fips, openstack-glance-2025.1,...

GHSA-M2H6-J472-RP4C vulnerabilities

Vulnerabilities for packages: mlflow, apache-beam-python-3.13-sdk, openstack-nova-2026.1, openstack-glance-2026.1, apache-beam-python-3.12-sdk, vllm-openai-cuda-13.0, kserve, openstack-nova-2025.1, az, vllm-openai-cuda-12.9, dbt-snowflake, datadog-agent-fips, openstack-glance-2025.1,...

MAL-2026-12113 Malicious code in python-bitcoinlib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfb9c83260c4fb83a678636e1e1c028f2aff3e3c0a0ac13728cfa2056a13389f This npm package, published under the well-known PyPI name python-bitcoinlib, ships a postinstall.js lifecycle script that runs automatically on npm...

Malicious code in bitcoinlib-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 32582a69a108bf3ab34d8bd16122918dd29a56bff6f68a771b77c6c946bf9308 During installation, the package exfiltrates sensitive env variables, browser data, crypto wallets files, ssh keys and other configuration files. --- Category:...

MAL-2026-12081 Malicious code in bitcoinlib-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 32582a69a108bf3ab34d8bd16122918dd29a56bff6f68a771b77c6c946bf9308 During installation, the package exfiltrates sensitive env variables, browser data, crypto wallets files, ssh keys and other configuration files. --- Category:...

Malicious code in bip39-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c188f84ee0ad8238ed89a94673968e9f17c44d91d25dfe8012efd39e01705081 During installation, the package exfiltrates sensitive env variables, browser data, crypto wallets files, ssh keys and other configuration files. --- Category:...

CVE-2026-6879

A flaw was found in Python's xml.etree.ElementPath component. This vulnerability can lead to a denial of service DoS when processing specially crafted XML documents. Specifically, certain XPath index predicates used with functions like Element.findall and Element.iterfind can cause the processing...

SUSE CVE-2026-9147

uproot dynamically generates Python class source code from ROOT TStreamerInfo records in a file and compiles it at runtime. Some file-controlled streamer metadata fields for example, streamer element names are interpolated into the generated Python source without safe quoting via repr or the !r...

PT-2026-68157

Name of the Vulnerable Software and Affected Versions Fledge affected versions not specified Description The backup-restore upload handler upload backup located in python/fledge/services/core/api/backup restore.py is susceptible to OS command injection. The handler processes the first extracted t...

Photon OS 5.0: Python3 PHSA-2025-5.0-91-0628

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0628. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Python3 PHSA-2024-5.0-91-0251

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0251. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Python3 PHSA-2026-5.0-92-0911

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0911. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Python3 PHSA-2026-5.0-91-0827

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0827. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...