70023 matches found
CVE-2026-102273 affecting package python-jwt for versions less than 2.15.1-1
CVE-2026-102273 affecting package python-jwt for versions less than 2.15.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-103001 affecting package python-jwt for versions less than 2.15.1-1
CVE-2026-103001 affecting package python-jwt for versions less than 2.15.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-102272 affecting package python-jwt for versions less than 2.15.1-1
CVE-2026-102272 affecting package python-jwt for versions less than 2.15.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-106441 Hydra logging configuration permits unsafe callable resolution
Hydra is a framework for elegantly configuring complex applications. Prior to 1.3.6 and 1.4.0.dev9, Hydra passes Python logging configuration to logging.config.dictConfig without applying Hydra's target policy to handler class values or formatter, filter, handler, queue, and listener factories. A...
CVE-2026-106441 Hydra logging configuration permits unsafe callable resolution
Hydra is a framework for elegantly configuring complex applications. Prior to 1.3.6 and 1.4.0.dev9, Hydra passes Python logging configuration to logging.config.dictConfig without applying Hydra's target policy to handler class values or formatter, filter, handler, queue, and listener factories. A...
CVE-2026-106440 Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_method
Hydra is a framework for elegantly configuring complex applications. From 1.2.0 until 1.3.0 and 1.4.0.dev10, the hydra-optuna-sweeper package accepts a configuration-controlled dotted path in hydra.sweeper.customsearchspace, resolves it with hydra.utils.getmethod, and later invokes the returned...
erl_mouse
erlmouse Version 1.1 Okay, ich habe einige Dinge verbessert, um die Chancen zu erhöhen, ein anfälliges Gerät oder Netzwerk zu finden. Die meisten sind nicht öffentlich erreichbar, wurden gepatcht oder sind so obskur, dass es schwierig sein kann, ein Ziel zu finden. Trotzdem bleiben wir dran. Sie...
openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation
Impact A malicious OpenAPI document processed by any openapi-python-client prior to 0.29.1 can generate arbitrary Python code. When anyone imports the malicious client, that arbitrary Python code will execute. Patches Versions starting with 0.29.1 have updated with guardrails to prevent arbitrary...
GHSA-5293-MQ8X-G3XJ openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation
Impact A malicious OpenAPI document processed by any openapi-python-client prior to 0.29.1 can generate arbitrary Python code. When anyone imports the malicious client, that arbitrary Python code will execute. Patches Versions starting with 0.29.1 have updated with guardrails to prevent arbitrary...
CVE-2026-105801
openapi-python-client generates Python clients from OpenAPI documents. Prior to 0.29.1, the generator does not safely neutralize malicious OpenAPI document content before rendering string, docstring, and f-string contexts in generated Python. The generated Python client can contain...
CVE-2026-105801 openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation
openapi-python-client generates Python clients from OpenAPI documents. Prior to 0.29.1, the generator does not safely neutralize malicious OpenAPI document content before rendering string, docstring, and f-string contexts in generated Python. The generated Python client can contain...
CVE-2026-105801
The openapi-python-client library (prior to version 0.29.1 ) is vulnerable to arbitrary code generation because it fails to neutralize malicious content within OpenAPI documents before rendering string, docstring, and f-string contexts . An attacker providing a malicious OpenAPI document can caus...
EUVD-2026-93435
openapi-python-client generates Python clients from OpenAPI documents. Prior to 0.29.1, the generator does not safely neutralize malicious OpenAPI document content before rendering string, docstring, and f-string contexts in generated Python. The generated Python client can contain...
CVE-2026-105801 openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation
openapi-python-client generates Python clients from OpenAPI documents. Prior to 0.29.1, the generator does not safely neutralize malicious OpenAPI document content before rendering string, docstring, and f-string contexts in generated Python. The generated Python client can contain...
[SECURITY] Fedora 45 Update: python3.15-3.15.0~rc3-2.fc45
Python 3.15 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries...
EUVD-2026-38245
Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation...
ROOT-APP-PYPI-CVE-2026-34993 CVE-2026-34993 in aiohttp - Patched by Root
Root has patched CVE-2026-34993 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
OPENSUSE-SU-2026:22028-1 Security update for python-fsspec
This update for python-fsspec fixes the following issues: Changes in python-fsspec: - CVE-2026-104851: python-fsspec: remote code execution via server-side template injection in ReferenceFileSystem bsc1284173...