Lucene search
+L

60165 matches found

OPENSUSE Linux
OPENSUSE Linux
added 2026/06/30 12:0 a.m.42 views

Security update for python-starlette (important)

openSUSE security update: security update for python-starlette ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21053-1 Rating: important References: bsc1268389 bsc1268517 bsc1268520 Cross-References: CVE-2026-48817 CVE-2026-54282 CVE-2026-54283 CVSS...

8.7CVSS6.5AI score0.00397EPSS
SaveExploits0References3
Photon
Photon
added 2026/06/30 12:0 a.m.5 views

Important Photon OS Security Update - PHSA-2026-5.0-91-0911

Updates of 'rubygem-faraday', 'python3-urllib3', 'rubygem-nokogiri', 'python3-mistune' packages of Photon OS have been released...

5.5AI score
SaveExploits0
OPENSUSE Linux
OPENSUSE Linux
added 2026/06/30 12:0 a.m.8 views

Security update for python-pdm (moderate)

openSUSE security update: security update for python-pdm ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21161-1 Rating: moderate References: bsc1268384 bsc1268385 bsc1268386 Cross-References: CVE-2026-47763 CVE-2026-47764 CVE-2026-47781 Affected...

8.4CVSS5.7AI score0.00151EPSS
SaveExploits0References3
OPENSUSE Linux
OPENSUSE Linux
added 2026/06/30 12:0 a.m.13 views

Security update for python-PyJWT (important)

openSUSE security update: security update for python-pyjwt ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21095-1 Rating: important References: bsc1266798 bsc1266799 bsc1266800 bsc1266801 bsc1266802 Cross-References: CVE-2026-48522 CVE-2026-48523...

9.1CVSS5.7AI score0.00395EPSS
SaveExploits4References5
Positive Technologies
Positive Technologies
added 2026/06/30 12:0 a.m.12 views

PT-2026-55181

These are all security issues fixed in the python311-pydata-sphinx-theme-0.19.0-2.1 package on the GA media of openSUSE Tumbleweed...

7.5CVSS5.8AI score0.00384EPSS
SaveExploits0References2
Photon
Photon
added 2026/06/30 12:0 a.m.14 views

Critical Photon OS Security Update - PHSA-2026-5.0-0910

Updates of 'python3', 'gnupg' packages of Photon OS have been released...

8.2CVSS5.5AI score0.0073EPSS
SaveExploits0
Photon
Photon
added 2026/06/30 12:0 a.m.5 views

Important Photon OS Security Update - PHSA-2026-5.0-92-0911

Updates of 'python3-urllib3', 'python3-mistune' packages of Photon OS have been released...

5.5AI score
SaveExploits0
OPENSUSE Linux
OPENSUSE Linux
added 2026/06/30 12:0 a.m.11 views

Security update for python-py7zr (important)

openSUSE security update: security update for python-py7zr ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21159-1 Rating: important References: bsc1268665 bsc1268666 bsc1268669 Cross-References: CVE-2026-23879 CVE-2026-55195 CVE-2026-55206 Affected...

8.7CVSS5.9AI score0.00404EPSS
SaveExploits0References3
OSV
OSV
added 2026/06/29 8:46 p.m.8 views

PYSEC-2026-580 Malicious code in coolbox (PyPI)

Part of the "Hades" wave of the Shai-Hulud supply-chain campaign. On 2026-06-08, malicious phantom releases of coolbox were published to PyPI using stolen credentials. The package executes a bundled JavaScript payload via the Bun runtime on import that harvests and exfiltrates credentials and...

5.8AI score
SaveExploits0References3
OSV
OSV
added 2026/06/29 8:25 p.m.12 views

PYSEC-2026-579 Malicious code in cmd2func (PyPI)

Part of the "Hades" wave of the Shai-Hulud supply-chain campaign. On 2026-06-08, malicious phantom releases of cmd2func were published to PyPI using stolen credentials. The package executes a bundled JavaScript payload via the Bun runtime on import that harvests and exfiltrates credentials and...

5.8AI score
SaveExploits0References3
OSV
OSV
added 2026/06/29 8:18 p.m.12 views

PYSEC-2026-578 Malicious code in bramin (PyPI)

Part of the "Hades" wave of the Shai-Hulud supply-chain campaign. On 2026-06-08, malicious phantom releases of bramin were published to PyPI using stolen credentials. The package executes a bundled JavaScript payload via the Bun runtime on import that harvests and exfiltrates credentials and...

5.8AI score
SaveExploits0References3
OSV
OSV
added 2026/06/29 7:31 p.m.11 views

PYSEC-2026-586 Malicious code in tlask (PyPI)

Part of the "Hades" wave of the Shai-Hulud supply-chain campaign. On 2026-06-08, malicious phantom releases of tlask were published to PyPI using stolen credentials. The package executes a bundled JavaScript payload via the Bun runtime on import that harvests and exfiltrates credentials and...

5.8AI score
SaveExploits0References3
OSV
OSV
added 2026/06/29 4:40 p.m.5 views

OPENSUSE-SU-2026:21173-1 Security update for python-pydata-sphinx-theme

This update for python-pydata-sphinx-theme fixes the following issues: Changes in python-pydata-sphinx-theme: - Refresh js dependencies: ws to 7.5.11 bsc1268957, CVE-2026-48779 - Refresh vendored tarball CVE-2026-6321, bsc1264374...

7.5CVSS7.2AI score0.00782EPSS
SaveExploits1References4
OSV
OSV
added 2026/06/29 4:24 p.m.8 views

PYSEC-2026-583 Malicious code in nhmpy (PyPI)

Part of the "Hades" wave of the Shai-Hulud supply-chain campaign. On 2026-06-08, malicious phantom releases of nhmpy were published to PyPI using stolen credentials. The package executes a bundled JavaScript payload via the Bun runtime on import that harvests and exfiltrates credentials and...

5.8AI score
SaveExploits0References3
OSV
OSV
added 2026/06/29 4:7 p.m.12 views

PYSEC-2026-582 Malicious code in mflux-streamlit (PyPI)

Part of the "Hades" wave of the Shai-Hulud supply-chain campaign. On 2026-06-08, malicious phantom releases of mflux-streamlit were published to PyPI using stolen credentials. The package executes a bundled JavaScript payload via the Bun runtime on import that harvests and exfiltrates credentials...

5.8AI score
SaveExploits0References4
OSV
OSV
added 2026/06/29 3:36 p.m.10 views

PYSEC-2026-581 Malicious code in dynamo-release (PyPI)

Part of the "Hades" wave of the Shai-Hulud supply-chain campaign. On 2026-06-08, malicious phantom releases of dynamo-release were published to PyPI using stolen credentials. The package executes a bundled JavaScript payload via the Bun runtime on import that harvests and exfiltrates credentials...

5.8AI score
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/06/29 12:53 p.m.29 views

Important: Red Hat Security Advisory: python3.12-urllib3 security update

An update for python3.12-urllib3 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

8.9CVSS5.8AI score0.0068EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/06/29 12:13 p.m.15 views

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.13: python3.13-3.13.14-1.1.hum1 aarch64, x8664 python3.13-debug-3.13.14-1.1.hum1 aarch64, x8664 python3.13-devel-3.13.14-1.1.hum1 aarch64, x8664 python3.13-freethreading-3.13.14-1.1.hum1...

6.1CVSS5.8AI score0.00229EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
added 2026/06/29 12:13 p.m.10 views

python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module

A flaw was found in Python's http.cookies module. The Morsel.jsoutput function, responsible for generating JavaScript output for cookies, does not properly neutralize the HTML sequence. This oversight could allow a remote attacker to inject malicious script into a web page, potentially leading to...

6.1CVSS6.4AI score0.00229EPSS
SaveExploits1References8
OSV
OSV
added 2026/06/29 11:50 a.m.8 views

PYSEC-2026-376 Langflow has Remote Code Execution in CSV Agent

Summary The CSV Agent node in Langflow hardcodes allowdangerouscode=True, which automatically exposes LangChain’s Python REPL tool pythonreplast. As a result, an attacker can execute arbitrary Python and OS commands on the server via prompt injection, leading to full Remote Code Execution RCE...

9.8CVSS7.7AI score0.33694EPSS
SaveExploits4References6
Rows per page
Query Builder