74123 matches found
Astra Linux – Vulnerability in Python 3.7
The lib/zipfile.py module in Python, as of version 3.7.2, allows remote attackers to cause a denial of service resource consumption through a ZIP bomb attack...
Astra Linux – Vulnerability in python-py
A denial of service attack via regular expressions in the py.path.svnwc component of py also known as python-py in versions up to 1.9.0 could be exploited by attackers to trigger a compute-time denial of service attack by providing malicious input to the blame functionality...
Astra Linux – Vulnerability in python-pip
When extracting a tar archive, pip may not check symbolic links pointing into the extraction directory if the tarfile module does not implement PEP 706. Note that upgrading pip to a “fixed” version does not fix all vulnerabilities that are mitigated by using a Python version that implements PEP...
Astra Linux – Vulnerability in Python 3.11, Python 3.7
The fix for CVE-2026-0672, which prevented control characters from being accepted in http.cookies.Morsel, was incomplete. The Morsel.update, |= operators, and methods for unpickingling data were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js.outpu...
Astra Linux – Vulnerability in Pypy
Python versions 2.7.x through 2.7.16, and 3.x through 3.7.2 are affected by improper handling of Unicode encoding with an incorrect netloc during NFKC normalization. The impact is information disclosure—credentials, cookies, etc., that are cached against a given hostname. The affected components...
Astra Linux – Vulnerability in python-httplib2
httplib2 is a comprehensive HTTP client library for Python. In httplib2 before version 0.19.0, a malicious server that responded with a long series of "\xa0" characters in the “www-authenticate” header could cause a Denial of Service attack, resulting in excessive CPU usage during header parsing ...
Astra Linux – Vulnerability in Python 3.7, Python 2.7
A flaw was discovered in Python. Improper handling of HTTP responses in the Python HTTP client code may allow a remote attacker, who controls the HTTP server, to cause the client script to enter an infinite loop, consuming CPU resources. The greatest threat of this vulnerability is to system...
ROOT-APP-PYPI-GHSA-93GM-QMQ6-W238 GHSA-93gm-qmq6-w238 in starlette - Patched by Root
Root has patched GHSA-93gm-qmq6-w238 in the starlette package for Root:PyPI. Multiple fixed versions available...
CVE-2026-87910
A flaw was found in the Python tarfile module. When extracting an archive containing a link on systems that do not support links, the module falls back to extracting the linked member. During this fallback, a security filter designed to prevent the extraction of certain files is not properly...
ROOT-APP-PYPI-CVE-2026-42561 CVE-2026-42561 in python-multipart - Patched by Root
Root has patched CVE-2026-42561 in the python-multipart package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-53539 CVE-2026-53539 in python-multipart - Patched by Root
Root has patched CVE-2026-53539 in the python-multipart package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2024-24762 CVE-2024-24762 in python-multipart - Patched by Root
Root has patched CVE-2024-24762 in the python-multipart package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-24486 CVE-2026-24486 in python-multipart - Patched by Root
Root has patched CVE-2026-24486 in the python-multipart package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2024-53981 CVE-2024-53981 in python-multipart - Patched by Root
Root has patched CVE-2024-53981 in the python-multipart package for Root:PyPI. Multiple fixed versions available...
cra-watch
cra-watch Does anything you ship have a known-exploited vul...
Security update for python-sqlparse
This update for python-sqlparse fixes the following issue: CVE-2026-84305: Reindentation of tuple lists causes near-cap quadratic CPU consumption bsc1278097. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
SUSE-SU-2026:4145-1 Security update for python-sqlparse
This update for python-sqlparse fixes the following issue: - CVE-2026-84305: Reindentation of tuple lists causes near-cap quadratic CPU consumption bsc1278097...
CLSA-2026-1789365078 TuxCare security update for cryptography (2 CVEs)
TuxCare rebuilt cryptography to address 2 CVEs. Fixed in 44.0.3.post4+tuxcare...
Important: Red Hat Security Advisory: python-tornado security update
An update for python-tornado is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...