Where Does a Rust Speedup Come From? Language and Algorithm Effects in Sliding Window Threat Scorer

Rewriting a hot path from Python into Rust is a common way to speed up security analytics, and large speedups are routinely reported. A rewrite usually changes the language and the algorithm at once, so a single factor can credit the language with a gain that comes from a better algorithm. We stu...

PT-2026-106762

Name of the Vulnerable Software and Affected Versions openapi-python-client versions prior to 0.29.1 Description The generator fails to safely neutralize malicious content from OpenAPI documents before rendering string, docstring, and f-string contexts in the generated Python code. This allows an...

PT-2026-107261

Name of the Vulnerable Software and Affected Versions Amazon Bedrock AgentCore Starter Toolkit versions prior to 0.3.14 Description Improper control of code generation within the agent import functionality allows an authenticated actor within the same account to execute arbitrary code. This occur...

CentOS Linux 8.4 [TuxCare] Security Update: libxml2 / libxml2-devel / libxml2-static / python3-libxml2 (CENTOS8.4:CLSA-2026:1791280039)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791280039 advisory. - A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially craft...

ALSA-2026:77028 Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Important: python3.14 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

amundsen-metadata (>=2.5.5, <=3.5.0), bspider (>=0.0.5a0, <=0.0.8) +13 more potentially affected by CVE-2026-102598 via werkzeug (0.15.5)

werkzeug PYPI version 0.15.5 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - amundsen-metadata =2.5.5, =0.0.5a0, =1.3.1, =1.2.3, =0.1.3, =0.0.1, =0.0.9, =0.50.0, =1.0.6, =0.1.0, =4.2.0, =0.10.21, =0.15.37 Source cves:...

agave (>=0.0.1.dev0, <=0.2.3.dev0), agrothon (>=1.1.5, <=1.3.2) +348 more potentially affected by CVE-2026-96749 via pymongo (3.13.0)

pymongo PYPI version 3.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - agave =0.0.1.dev0, =1.1.5, =2022.9.19, =0.0.4, =0.0.1, =0.1.7, =0.2.0, =0.1.0, =0.7.1a0, =0.7.1a0, =0.7.1a0, =0.7.1a0, =0.7.1a3, =0.0.1, =2.2.0 a...

EUVD-2026-86348

PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encoding...

askbob (>=0.0.3, <=0.0.4), autoneuro-pypi (1.0.0) +46 more potentially affected by CVE-2026-96749 via pymongo (3.10.1)

pymongo PYPI version 3.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - askbob =0.0.3, =1.1.0, =1.1.0, =0.0.3, =1.3.7, =0.0.5, =0.0.2, =0.0.0, =0.0.13 - deeppavlov-agent 2.3.0a0 - discord-fate-bot 0.1.1 - dragg 0.0.0 ...

capreolus (>=0.1.0, <=0.1.5), ckanext-nhm (>=3.7.1, <=6.9.8) +19 more potentially affected by CVE-2026-96749 via pymongo (3.9.0)

pymongo PYPI version 3.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - capreolus =0.1.0, =3.7.1, =3.0.2, =3.7.0, =0.2.0, =0.0.2, =0.0.2, =0.9.2rc1, =0.0.2, =0.1.2, =0.0.1, =0.0.8 and more Source cves: CVE-2026-96749...

EUVD-2026-86346

PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryption...

sd-python-wrapper (>=0.1.2, <=0.1.26) potentially affected by CVE-2026-88029 via pymongo (3.2.0)

pymongo PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - sd-python-wrapper =0.1.2, =0.1.26 Source cves: CVE-2026-88029 Source advisory: OSV:GHSA-8FVV-FGR5-F8CH...

EUVD-2026-75665

pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods...

dataligo (0.7.3), udps (0.1.21) potentially affected by CVE-2026-86597 via snowflake-connector-python (3.0.2)

snowflake-connector-python PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dataligo 0.7.3 - udps 0.1.21 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

dbcat (0.3.1), pipelinewise-target-snowflake (1.11.0) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.3.10)

snowflake-connector-python PYPI version 2.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbcat 0.3.1 - pipelinewise-target-snowflake 1.11.0 - pydbconnector-jinghan-ma =0.0.4, =0.0.5 Source cves:...

pipelinewise-target-snowflake (1.12.0) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.4.2)

snowflake-connector-python PYPI version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-target-snowflake 1.12.0 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

habu-snowflake-cli (>=4.5.0, <=5.1.0), klondike (>=0.2.0, <=0.2.3) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.10.1)

snowflake-connector-python PYPI version 3.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - habu-snowflake-cli =4.5.0, =0.2.0, =2.5.0rc0, =2.5.0 Source cves: CVE-2026-86597 Source advisory:...