2754 matches found
PT-2026-55483
Name of the Vulnerable Software and Affected Versions OnionShare versions prior to 2.6.4-1.1 Description OnionShare follows symbolic links symlinks within shared directories, which can lead to the unintended disclosure of local files from the host system. Recommendations Update to version 2.6.4-1...
OPENSUSE-SU-2026:11169-1 python3-onionshare-2.6.4-1.1 on GA media
These are all security issues fixed in the python3-onionshare-2.6.4-1.1 package on the GA media of openSUSE Tumbleweed...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libxml2: libxml2-16-2.15.3-0.1.1.hum1 aarch64, x8664 libxml2-2.15.3-0.1.1.hum1 aarch64, x8664 libxml2-devel-2.15.3-0.1.1.hum1 aarch64, x8664 libxml2-static-2.15.3-0.1.1.hum1 aarch64, x8664...
Important Photon OS Security Update - PHSA-2026-5.0-0911
Updates of 'rubygem-nokogiri', 'python3-mistune', 'rubygem-faraday', 'python3-urllib3' packages of Photon OS have been released...
Medium: python3-urllib3
Issue Overview: urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connectionfromurl.urlopen..., assertsamehost=False still forward these sensitive headers. This vulnerability is fixed in 2.7.0...
Critical Photon OS Security Update - PHSA-2026-4.0-1038
Updates of 'coredns', 'python3-pip', 'redis', 'rsync', 'erlang' packages of Photon OS have been released...
Photon OS 4.0: Python3 PHSA-2026-4.0-1018
An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1018. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
MAL-2026-5719 Malicious code in ect-654321 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec784a9a1926de8d2c18de41c996e69e10f7001bf9fdc7604edc22d5775b4540 ect-654321 contains only a package.json with a preinstall lifecycle hook that unconditionally executes wget...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python-idna: python3-idna-3.18-1.hum1 noarch python-idna-3.18-1.hum1.src src...
CVE-2026-52858
Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim for Vim with the +python3 interpreter enabled and the legacy pythoncomplete.vim for builds with the +python interpreter executes the import and from statements foun...
OPENSUSE-SU-2026:10973-1 python3-oslo.messaging-doc-18.1.0-1.1 on GA media
These are all security issues fixed in the python3-oslo.messaging-doc-18.1.0-1.1 package on the GA media of openSUSE Tumbleweed...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python-trustme: python-trustme-doc-1.2.1-2.hum1 noarch python3-trustme-1.2.1-2.hum1 noarch python-trustme-1.2.1-2.hum1.src src...
EulerOS Virtualization 2.13.0 : python3 (EulerOS-SA-2026-2188)
According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : If the value passed to os.path.expandvars is user-controlled a performance degradation is possible when expanding environment...
CVE-2026-1502 affecting package python3 for versions less than 3.12.9-11
CVE-2026-1502 affecting package python3 for versions less than 3.12.9-11. A patched version of the package is available...
SUSE-SU-2026:2259-1 Security update for python3-pyOpenSSL
This update for python3-pyOpenSSL fixes the following issue - CVE-2026-40475: improper input handling of null bytes can lead to silent data truncation and security-state inconsistency bsc1262803...
RockyLinux 9 : python-jwcrypto (RLSA-2026:19197)
The remote RockyLinux 9 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:19197 advisory. JWCrypto: python-cryptography: python: JWCrypto: Memory exhaustion via crafted compressed JWE tokens CVE-2026-39373 Tenable has extracted the preceding descripti...
CLSA-2026-1778932682 python3: Fix of CVE-2024-4032
CVE-2024-4032: update ipaddress module to reflect latest IANA Special-Purpose Address Registries...
RHSA-2026:17619 Red Hat Security Advisory: python3 security update
Bulletin has no description...
Important: python3
Issue Overview: Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open" API could have commands injected into the underlying shell. See CVE-2026-4519 for details. CVE-2026-4786 Use-after-free UAF wa...