EUVD-2025-210935

XWiki Rendering is a generic rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. Prior to versions 14.10.2 and 15.0 RC1, any user who can edit their own user profile or any other document can execute arbitrary script macros includi...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-45149 DESCRIPTION: The brace-expansion library generates arbitrary strings containing a common prefix and suffix. From 5.0.0 to before 5.0.6, the max...

Syntecxhub_Web-Vulnerability-Scanner

Syntecxhub Web Vulnerability Scanner A Python-based web vulne...

embedded-exploitation

Embedded Exploitation Framework Research & Educational Se...

CLEANSTART-2026-NQ59682 Security fix for CVE-2024-52616 applied in: playwright-python 1.54.0-r1

Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-AV29205 Security fix for CVE-2024-52615 applied in: playwright-python 1.54.0-r1

Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-HQ46365 Security fix for CVE-2023-38473 applied in: playwright-python 1.54.0-r1

Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-GA41131 Security fix for CVE-2023-38472 applied in: playwright-python 1.54.0-r1

Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-FV76384 Security fix for CVE-2023-38470 applied in: playwright-python 1.54.0-r1

Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-YF74212 Security fix for CVE-2023-38471 applied in: playwright-python 1.54.0-r1

Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-VW83784 Security fix for CVE-2023-38469 applied in: playwright-python 1.54.0-r1

Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details...

secator v0.44.0

The pentester's swiss knife. Features • Supported commands • Installation • Usage • Documentation • Join us on Discord ! secator is a task and workflow runner used for security assessments. It supports dozens of well-known security tools and it is designed to improve productivity for pentesters a...

CLEANSTART-2026-GV69580 Security fix for GHSA-537c-gmf6-5ccf applied in: airflow-2 2.11.0-r3, airflow-2 2.11.2-r4, airflow-3 3.1.8-r4, airflow-3 3.2.1-r4, apache-superset 5.0.0-r8, apache-superset 6.0.0-r6, az 2.83.0-r3, az 2.84.0-r4, jupyterhub-k8s-hub 4.3.5-r2, k8s-sidecar 2.4.0-r1, k8s-sidecar 2.5.5-r0, litellm-database 1.90.2-r0, py3-jupyterhub 5.4.6-r3, tensorflow-gpu-jupyter 2.21.0-r8

GHSA-537c-gmf6-5ccf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

OPENSUSE-SU-2026:21874-1 Security update for python-GitPython

This update for python-GitPython fixes the following issues: - CVE-2026-67322: environment-variable exfiltration in Repo.clonefrom URL via os.path.expandvars bsc1273357. - CVE-2026-67323: unguarded Git options passed as keyword arguments in Repo.archive and git.lsremote allow for command injectio...

dcoscli (>=0.1.9, <=0.4.6), python-mu (>=1.0.1, <=1.0.3) +1 more potentially affected by CVE-2026-102925 via virtualenv (13.1.2)

virtualenv PYPI version 13.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - dcoscli =0.1.9, =1.0.1, =0.2.23, =0.2.34 Source cves: CVE-2026-102925 Source advisory: OSV:PYSEC-2026-4013...

cateye (>=0.3.4, <=0.3.8), edx-completion (>=0.0.1, <=0.1.1) +4 more potentially affected by CVE-2026-102925 via virtualenv (15.1.0)

virtualenv PYPI version 15.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - cateye =0.3.4, =0.0.1, =0.5.7, =1.0.0rc1, =1.2.0, =1.7.1 Source cves: CVE-2026-102925 Source advisory: OSV:PYSEC-2026-4013...

backlogapi (>=0.1.3, <=0.1.5), dcoscli (>=0.4.10, <=0.6.1) +1 more potentially affected by CVE-2026-102925 via virtualenv (15.2.0)

virtualenv PYPI version 15.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - backlogapi =0.1.3, =0.4.10, =0.6.7, =0.7.1 Source cves: CVE-2026-102925 Source advisory: OSV:PYSEC-2026-4013...

cabrita (>=2.2.2b1, <=2.2.2b2), kaze-python (>=0.7.8, <=0.8.9) +2 more potentially affected by CVE-2026-102925 via virtualenv (16.0.0)

virtualenv PYPI version 16.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - cabrita =2.2.2b1, =0.7.8, =0.7.2, =1.7.2, =1.11.0 Source cves: CVE-2026-102925 Source advisory: OSV:PYSEC-2026-4013...

fzpycreate (>=0.0.12, <=2.0.0), neo-python (0.8.4) potentially affected by CVE-2026-102925 via virtualenv (16.2.0)

virtualenv PYPI version 16.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - fzpycreate =0.0.12, =2.0.0 - neo-python 0.8.4 Source cves: CVE-2026-102925 Source advisory: OSV:PYSEC-2026-4013...

python-webex-bot (0.51.0) potentially affected by CVE-2026-102925 via virtualenv (16.4.3)

virtualenv PYPI version 16.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - python-webex-bot 0.51.0 Source cves: CVE-2026-102925 Source advisory: OSV:PYSEC-2026-4013...