72489 matches found
CVE-2026-19553
ssl.SSLContext.wrapbio didn't require the serverhostname argument to not be None if ssl.SSLContext.checkhostname was set. Due to a missing parameter check in SSLObject, if the serverhostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead to...
[SECURITY] [DLA 4802-1] python-django security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4802-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb September 29, 2026 https://wiki.debian.org/LTS -...
aap-client-python (>=0.1.1, <=0.1.3), gcb-web-auth (>=0.6.0, <=2.0.0) +4 more potentially affected by CVE-2026-102270 via pyjwt (1.5.2)
pyjwt PYPI version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - aap-client-python =0.1.1, =0.6.0, =0.2775.0, =0.3.0, =0.0.1, =4.0.0, =4.0.1 Source cves: CVE-2026-102270 Source advisory: OSV:GHSA-JWRC-G2Q2-PQ5P...
OESA-2026-4218 python-sqlparse security update
A non-validating SQL parser. Security Fixes: sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, TokenList construction and string conversion in sqlparse/sql.py repeatedly flatten nested token subtrees constructed by groupparenthesis and groupcase, causing quadratic CPU...
OESA-2026-4219 python-sqlparse security update
A non-validating SQL parser. Security Fixes: sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, TokenList construction and string conversion in sqlparse/sql.py repeatedly flatten nested token subtrees constructed by groupparenthesis and groupcase, causing quadratic CPU...
OESA-2026-4210 python-pdfminer.six security update
PDF parser and analyzer. Security Fixes: pdfminer.six before 20251230 contains an insecure deserialization vulnerability in the CMap loading mechanism. The library uses Python pickle to deserialize CMap cache files without validation. An attacker with the ability to place a malicious pickle file ...
METIS
METIS - Modular Exploitation & Threat Intelligence Framework...
Security update for python-tornado
This update for python-tornado fixes the following issues: CVE-2023-54397: Tornado before 6.3.3 contains an HTTP request smuggling vulnerability due to improper parsing of Content-Length headers accepting non-standard characters. At bsc1280689. CVE-2024-58384: CRLF injection in CurlAsyncHTTPClien...
SUSE-SU-2026:4404-1 Security update for python-tornado
This update for python-tornado fixes the following issues: - CVE-2023-54397: Tornado before 6.3.3 contains an HTTP request smuggling vulnerability due to improper parsing of Content-Length headers accepting non-standard characters. At bsc1280689. - CVE-2024-58384: CRLF injection in...
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: CVE-2023-54397: Tornado before 6.3.3 contains an HTTP request smuggling vulnerability due to improper parsing of Content-Length headers accepting non-standard characters. At bsc1280689. CVE-2024-58384: CRLF injection in CurlAsyncHTTPClie...
SUSE-SU-2026:4403-1 Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2023-54397: Tornado before 6.3.3 contains an HTTP request smuggling vulnerability due to improper parsing of Content-Length headers accepting non-standard characters. At bsc1280689. - CVE-2024-58384: CRLF injection in...
Security update for python-PyYAML
This update for python-PyYAML fixes the following issues: Update to 5.3.1. CVE-2020-14343: A vulnerability was discovered in the PyYAML library, where it was susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader...
SUSE-SU-2026:4402-1 Security update for python-PyYAML
This update for python-PyYAML fixes the following issues: - Update to 5.3.1. - CVE-2020-14343: A vulnerability was discovered in the PyYAML library, where it was susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loade...
MAL-2026-17325 Malicious code in cleanup-string (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844c5afa9f00c02149f4f6314447c5738e04ed419014809c1df83f31aa012525 The package advertises itself as a pure-Python string helper strip, slugify, case conversion, whitespace collapse and its README states the...
CVE-2026-75142 vulnerabilities
Vulnerabilities for packages: eco-python-ffmpeg-minimal, ffmpeg, torchaudio-ffmpeg-tarballs...
GHSA-564V-JR2Q-MGWF vulnerabilities
Vulnerabilities for packages: eco-python-ffmpeg-minimal, ffmpeg, torchaudio-ffmpeg-tarballs...
CVE-2026-75146 vulnerabilities
Vulnerabilities for packages: eco-python-ffmpeg-minimal, ffmpeg, torchaudio-ffmpeg-tarballs...
CVE-2026-75147 vulnerabilities
Vulnerabilities for packages: eco-python-ffmpeg-minimal, ffmpeg, torchaudio-ffmpeg-tarballs...