Lucene search
+L

60080 matches found

OSV
OSV
added 2026/07/08 12:6 p.m.8 views

RLSA-2026:36193 Important: python3.14-pip security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

8CVSS7AI score0.0032EPSS
SaveExploits0References2
Rockylinux
Rockylinux
added 2026/07/08 12:3 p.m.11 views

python3.14-pip security update

An update is available for python3.14-pip. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...

8CVSS6.1AI score0.0032EPSS
SaveExploits0
OSV
OSV
added 2026/07/08 12:3 p.m.4 views

RLSA-2026:36315 Important: python3.14-pip security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

8CVSS7AI score0.0032EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/08 11:22 a.m.15 views

Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by a Denial of Service vulnerability due to pyasn1

Summary pyasn1 is used by IBM Cloud Pak for Data System 1.0 as a generic ASN.1 encoding and decoding library for Python applications. CVE-2026-30922 affects pyasn1's ASN.1 decoder, where processing of crafted payloads containing deeply nested SEQUENCE or SET tags with indefinite length markers...

7.5CVSS6.8AI score0.00803EPSS
SaveExploits1Affected Software1
OSV
OSV
added 2026/07/08 10:55 a.m.4 views

SUSE-SU-2026:22704-1 Security update for python-msgpack

This update for python-msgpack fixes the following issue - CVE-2026-57585: reusing an Unpacker instance after an error has been caught can lead to an out-of-bounds read bsc1269947...

7.5CVSS5.2AI score0.00279EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/07/08 10:36 a.m.11 views

Astra Linux – Vulnerability in Python 3.11

The import hook in CPython that handles legacy .pyc files SourcelessFileLoader is incorrectly handled in FileLoader a base class, and therefore does not use io.opencode to read the .pyc files. As a result, the sys.audit handlers for this audit event do not trigger...

5.7CVSS6AI score0.00202EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/07/08 10:36 a.m.10 views

Astra Linux – Vulnerability in Python 3.11

Python-Markdown version 3.8 contains a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown parsing. Since Python-Markdown does not catch this exception, any application that processes Markdown controlled by...

8.2CVSS5.8AI score0.00566EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/07/08 10:36 a.m.11 views

Astra Linux – Vulnerability in Python 3.11

The email module, specifically the “BytesGenerator” class, did not properly quote newlines for email headers when serializing an email message. This issue occurs only when using “LiteralHeader” to write headers that do not follow email folding rules. The new behavior will reject incorrectly folde...

6CVSS7AI score0.0056EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/07/08 10:36 a.m.15 views

Astra Linux – Vulnerability in Python 3.11

User-controlled header names and values containing newlines can allow for the injection of HTTP headers...

5.9CVSS6.7AI score0.00463EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/07/08 10:36 a.m.9 views

Astra Linux – Vulnerability in Python 3.11

The poplib module, when a user-controlled command is passed to it, can have additional commands injected using newlines. Mitigation rejects commands that contain control characters...

5.9CVSS6.8AI score0.00315EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/07/08 10:36 a.m.9 views

Astra Linux – Vulnerability in Python 3.11

When loading a plist file, the plistlib module reads data in a size specified by the file itself. This means that a malicious file can cause out-of-memory OOM and denial-of-service DoS issues...

5.5CVSS6.6AI score0.00218EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/07/08 10:36 a.m.8 views

Astra Linux – Vulnerability in Python 3.11

When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model, a C stack overflow occurs...

7.5CVSS6.6AI score0.00621EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/07/08 10:36 a.m.17 views

Astra Linux – Vulnerability in Python 3.11

DISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.getdata has the same security model as open. The documentation has been updated to clarify this point. There is no vulnerability in the function if the intended security model is followed. pkgutil.getdata d...

5.7AI score0.00238EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/07/08 10:36 a.m.9 views

Astra Linux – Vulnerability in Python 3.11

The webbrowser.open API accepts URLs with leading hyphens, which can be treated as command-line options for certain web browsers. However, the new behavior disallows the use of leading hyphens. It is recommended that users sanitize URLs before passing them to webbrowser.open...

7.1CVSS6.5AI score0.00308EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/07/08 10:36 a.m.6 views

Astra Linux – Vulnerability in python-urllib3

urllib3 is a HTTP client library for Python. The streaming API of urllib3 is designed for efficiently handling large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP...

8.9CVSS6.7AI score0.02667EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/07/08 10:36 a.m.21 views

Astra Linux – Vulnerability in Python-APT

Dereferencing a NULL pointer in TagSection.keys in Python-apt on APT-based Linux systems allows a local attacker to cause a denial of service process crash through a crafted deb822 file containing malformed non-UTF-8 keys...

6.9CVSS6AI score0.00142EPSS
SaveExploits1References3
AstraLinux
AstraLinux
added 2026/07/08 10:36 a.m.10 views

Astra Linux – Vulnerability in Python 3.11

The ‘zipfile’ module does not check the validity of the offset value specified in the ZIP64 End of Central Directory EOCD Locator record. Instead, the ZIP64 EOCD record is assumed to be the previous record in the ZIP archive. This behavior could be exploited to create ZIP archives that are...

4.3CVSS6.4AI score0.00353EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/07/08 10:36 a.m.9 views

Astra Linux – Vulnerability in Python 3.11

The imaplib module, when a user-controlled command is passed to it, can have additional commands injected using newlines. Mitigation rejects commands that contain control characters...

5.9CVSS6.8AI score0.0036EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/07/08 10:36 a.m.12 views

Astra Linux – Vulnerability in Python 3.11

When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length. This allows a malicious server to cause the client to read large amounts of data into memory, potentially leading to Out-of-Memory errors or other types of...

7.5CVSS7.5AI score0.01594EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/07/08 10:36 a.m.7 views

Astra Linux – Vulnerability in Python 3.11

When constructing nested elements using XMLDom.minidom methods like appendChild, which rely on clearidcache, the algorithm has a quadratic complexity. This can affect the availability of documents when they are constructed with excessively nested structures...

6.3CVSS6.7AI score0.00781EPSS
SaveExploits0References3
Rows per page
Query Builder