CVE-2026-12210

CVE-2026-12210 affects the universal-tool-calling-protocol project, specifically the python-utcp 1.1.0 release, with a vulnerability in the utcp-gql/utcp-websocket component that enables server-side request forgery. The description notes a remote, public exploit and a lack of vendor response. The...

CVE-2026-12210 universal-tool-calling-protocol python-utcp utcp-gql/utcp-websocket server-side request forgery

A vulnerability was detected in universal-tool-calling-protocol python-utcp 1.1.0. This affects an unknown function of the component utcp-gql/utcp-websocket. Performing a manipulation results in server-side request forgery. The attack can be initiated remotely. The exploit is now public and may b...

[SECURITY] Fedora 43 Update: python-django5-5.2.15-1.fc43

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

[SECURITY] Fedora 43 Update: python-python-multipart-0.0.32-1.fc43

Python-Multipart is a streaming multipart parser for Python...

[SECURITY] Fedora 44 Update: python-django5-5.2.15-1.fc44

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

[SECURITY] Fedora 44 Update: python-python-multipart-0.0.32-1.fc44

Python-Multipart is a streaming multipart parser for Python...

PT-2026-49172

Name of the Vulnerable Software and Affected Versions python-utcp version 1.1.0 Description A server-side request forgery SSRF exists in the utcp-gql/utcp-websocket component of the universal-tool-calling-protocol. This issue allows a remote attacker to initiate a manipulation that results in the...

PT-2026-82005

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-ppx3-28rw-8fpf. This link is maintained to preserve external references. Original Description A vulnerability was detected in universal-tool-calling-protocol python-utcp 1.1.0. This affects an unknown function o...

CVE-2026-12210: Server-Side Request Forgery (SSRF)

A vulnerability was detected in universal-tool-calling-protocol python-utcp 1.1.0. This affects an unknown function of the component utcp-gql/utcp-websocket. Performing a manipulation results in server-side request forgery. The attack can be initiated remotely. The exploit is now public and may b...

WordPress GravityForms Intrusion Detection System

This Python script implements a lightweight Intrusion Detection System IDS designed to monitor and analyze HTTP requests related to Gravity Forms in WordPress environments...

FreeType SHZ 2.14.3 Font Parsing Analyzer for Glyph Stability Assessment

This Python script performs basic robustness testing of font parsing behavior using the FreeType bindings by loading a target font and iterating through a large set of glyph indices. For each glyph, it attempts non-scaled and non-hinted glyph loading while collecting exceptions that may indicate...

OPENSUSE-SU-2026:11036-1 python311-zeroconf-0.149.16-1.1 on GA media

These are all security issues fixed in the python311-zeroconf-0.149.16-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-49728

Name of the Vulnerable Software and Affected Versions Zeroconf versions prior to 0.149.16 Description Unauthenticated hosts on the local link via UDP/5353 can send specially crafted TXT, HINFO, or A/AAAA records to seed the DNSCache and ServiceInfo.properties with truncated, attacker-shaped...

OPENSUSE-SU-2026:11035-1 python311-aiosmtplib-5.1.1-1.1 on GA media

These are all security issues fixed in the python311-aiosmtplib-5.1.1-1.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2026-10143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in SCRAM authentication handling that allows a malicious or machine-in-the-middle broker ...

python311-PyJWT-2.13.0-1.1 on GA media (moderate)

python311-PyJWT-2.13.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11024-1 Rating: moderate Cross-References: CVE-2026-48522 CVE-2026-48523 CVE-2026-48524 CVE-2026-48525 CVE-2026-48526 CVSS scores: CVE-2026-48522 SUSE : 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2026-48522 SUSE :...

Security update for python-python-dotenv (moderate)

openSUSE security update: security update for python-python-dotenv ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20952-1 Rating: moderate References: bsc1262423 Cross-References: CVE-2026-28684 CVSS scores: CVE-2026-28684 SUSE : 6.6...

python311-starlette-1.2.0-1.1 on GA media (moderate)

python311-starlette-1.2.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11026-1 Rating: moderate Cross-References: CVE-2026-48710 CVSS scores: CVE-2026-48710 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2026-48710 SUSE : 6.9...

python311-tornado6-6.5.7-1.1 on GA media (moderate)

python311-tornado6-6.5.7-1.1 on GA media Announcement ID: openSUSE-SU-2026:11027-1 Rating: moderate Cross-References: CVE-2026-49853 CVE-2026-49854 CVE-2026-49855 Affected Products: openSUSE Tumbleweed An update that solves 3 vulnerabilities can now be installed. Description: These are all securi...

python311-paramiko-5.0.0-1.1 on GA media (moderate)

python311-paramiko-5.0.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11025-1 Rating: moderate Cross-References: CVE-2018-1000805 CVE-2018-7750 CVE-2026-44405 CVSS scores: CVE-2018-1000805 SUSE : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2018-7750 SUSE : 10...