74123 matches found
[SECURITY] Fedora 45 Update: python-pip-26.1.2-5.fc45
pip is a package management system used to install and manage software packag es written in Python. Many packages can be found in the Python Package Index PyPI. pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python"...
CVE-2026-87910
When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...
DEBIAN-CVE-2026-87910
When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...
UBUNTU-CVE-2026-87910
When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...
PSF-2026-40
When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...
CVE-2026-87910 tarfile hardlink fallback ignores custom extraction filter rejection via None
When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...
EUVD-2026-76162
When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...
CVE-2026-87910
CVE-2026-87910 affects Python's tarfile module. When extracting a hardlink on a system without link support, tarfile falls back to extracting the referenced member from the archive. During this fallback, the extraction filter function is invoked twice—once for the extracted member and once with t...
CVE-2026-87910 tarfile hardlink fallback ignores custom extraction filter rejection via None
When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...
CVE-2026-87910
When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...
Security Bulletin: IBM Cloud Pak for Data is vulnerable to buffer overflow due to cryptography ( CVE-2026-39892 )
Summary Potential vulnerabilities in cryptography package CVE-2026-39892 has been identified that may affect IBM Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-39892 DESCRIPTION: cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From...
SUSE CVE-2026-88029
Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...
python-lxml security update
An update is available for python-lxml. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...
CLSA-2026-1789123062 TuxCare security update for flask-cors (3 CVEs)
TuxCare rebuilt flask-cors to address 3 CVEs. Fixed in 5.0.1.post1+tuxcare...
apk-info v1.0.13
apk-info A full-featured apk parser. Features A malware-friendly zip extractor. Great article about BadPack technique; A malware-friendly axml and arsc extractor; A full AXML Android Binary XML implementation; A full ARSC Android Resource implementation; Support for extracting information contain...
ROOT-OS-DEBIAN-11-CVE-2025-69534 CVE-2025-69534 in python3.9 - Patched by Root
Root has patched CVE-2025-69534 in the python3.9 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-3479 CVE-2026-3479 in python3.9 - Patched by Root
Root has patched CVE-2026-3479 in the python3.9 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-8328 CVE-2026-8328 in python3.9 - Patched by Root
Root has patched CVE-2026-8328 in the python3.9 package for Root:Debian:11. Multiple fixed versions available...