62044 matches found
PYSEC-2026-2074 zipp Denial of Service vulnerability
A Denial of Service DoS vulnerability exists in the jaraco/zipp library, affecting all versions prior to 3.19.1. The vulnerability is triggered when processing a specially crafted zip file that leads to an infinite loop. This issue also impacts the zipfile module of CPython, as features from the...
PYSEC-2026-1917 Sentry's Python SDK unintentionally exposes environment variables to subprocesses
Impact The bug in Sentry's Python SDK subprocess.checkoutput"env", env="TEST":"1" b'TEST=1\n' If you'd want to not pass any variables, you can set an empty dict: subprocess.checkoutput"env", env= b'' However, the bug in Sentry SDK 2.8.0 causes all environment variables to be passed to the...
PYSEC-2026-1584 Remote Code Execution in create_conda_env function in lollms
A remote code execution vulnerability exists in the createcondaenv function of the parisneo/lollms repository. The vulnerability arises from the use of shell=True in the subprocess.Popen function, which allows an attacker to inject arbitrary commands by manipulating the envname and pythonversion...
python: Fix of 2 CVEs
CVE-2025-15366: reject control characters in IMAP commands in imaplib.IMAP4.command to prevent command injection via newlines - CVE-2025-15367: reject control characters in POP3 commands in poplib.POP3.putcmd to prevent command injection via newlines...
ROOT-APP-PYPI-CVE-2026-27932 CVE-2026-27932 in rootio-joserfc - Patched by Root
Root has patched CVE-2026-27932 in the rootio-joserfc package for Root:PyPI. Multiple fixed versions available...
MAL-2026-7466 Malicious code in scan-checker (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7467 Malicious code in scanvia (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7465 Malicious code in quatre (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7464 Malicious code in pygremlinbox-malware-network-indicators (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7462 Malicious code in pygremlinbox-malware-cryptomining-indicators (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7463 Malicious code in pygremlinbox-malware-install-execution (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7460 Malicious code in pygremlinbox-malware-code-obfuscation (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7459 Malicious code in pygremlinbox-malware-c2-beacon (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7458 Malicious code in pycryptoshuffle (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in pycryptoshuffle (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7457 Malicious code in piirgg (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7456 Malicious code in notrandompacketname (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7455 Malicious code in myproject234 (PyPI)
--- -= Per source details. Do not edit below this line.=-...