Lucene search
+L

60202 matches found

Amazon
Amazon
added 2026/06/22 12:0 a.m.10 views

Important: python3.13-pip

Issue Overview: A flaw was found in pip, the package installer for Python. A remote attacker can exploit this vulnerability by tricking a victim into installing a malicious Python wheel. This wheel contains specially crafted entry-point names that use directory traversal or absolute paths. This...

5.5CVSS6.1AI score0.0032EPSS
SaveExploits0
Amazon
Amazon
added 2026/06/22 12:0 a.m.10 views

Medium: python

Issue Overview: http.cookies.Morsel.jsoutput returns an inline snippet and only escapes " for JavaScript string context. It does not neutralize the HTML parser-sensitive sequence inside the generated script element. Mitigation base64-encodes the cookie value to disallow escaping using cookie valu...

6.1CVSS5.8AI score0.00229EPSS
SaveExploits1
OSV
OSV
added 2026/06/22 12:0 a.m.4 views

OPENSUSE-SU-2026:11099-1 python311-python-multipart-0.0.32-1.1 on GA media

These are all security issues fixed in the python311-python-multipart-0.0.32-1.1 package on the GA media of openSUSE Tumbleweed...

5.3CVSS5.9AI score0.00218EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/06/22 12:0 a.m.9 views

Amazon Linux 2023 : python3.11, python3.11-devel, python3.11-idle (ALAS2023-2026-1832)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1832 advisory. The import hook in CPython that handles legacy .pyc files SourcelessFileLoader is incorrectly handled in FileLoader a base class and so does not use io.opencode to read the .pyc files. sys.aud...

6.1CVSS5.8AI score0.00229EPSS
SaveExploits1References6
OPENSUSE Linux
OPENSUSE Linux
added 2026/06/22 12:0 a.m.7 views

Security update for python-nltk (important)

openSUSE Security Update: Security update for python-nltk Announcement ID: openSUSE-SU-2026:0211-1 Rating: important References: 1268526 Cross-References: CVE-2026-54293 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes one vulnerability is now available. Description: This...

7.5CVSS7.6AI score0.00555EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2026/06/22 12:0 a.m.9 views

Amazon Linux 2 : vim, --advisory ALAS2-2026-3368 (ALAS-2026-3368)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3368 advisory. Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave in the netrw plugin...

8.8CVSS6.3AI score0.00224EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
added 2026/06/22 12:0 a.m.21 views

Amazon Linux 2023 : python3-pip, python3-pip-wheel (ALAS2023-2026-1837)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1837 advisory. A flaw was found in pip, the package installer for Python. A remote attacker can exploit this vulnerability by tricking a victim into installing a malicious Python wheel. This wheel contains specially...

8CVSS6.2AI score0.0032EPSS
SaveExploits0References4
OSV
OSV
added 2026/06/22 12:0 a.m.3 views

OPENSUSE-SU-2026:11098-1 python311-nltk-3.10.0rc1-1.1 on GA media

These are all security issues fixed in the python311-nltk-3.10.0rc1-1.1 package on the GA media of openSUSE Tumbleweed...

7.5CVSS5.9AI score0.00555EPSS
SaveExploits1References1
OSV
OSV
added 2026/06/22 12:0 a.m.4 views

OPENSUSE-SU-2026:11100-1 python312-3.12.13-6.1 on GA media

These are all security issues fixed in the python312-3.12.13-6.1 package on the GA media of openSUSE Tumbleweed...

9.1CVSS6.1AI score0.00579EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2026/06/22 12:0 a.m.15 views

Amazon Linux 2 : python3-urllib3, --advisory ALAS2-2026-3376 (ALAS-2026-3376)

The version of python3-urllib3 installed on the remote host is prior to 1.25.6-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3376 advisory. urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-leve...

8.2CVSS6AI score0.00331EPSS
SaveExploits0References4
Amazon
Amazon
added 2026/06/22 12:0 a.m.12 views

Medium: python3.11

Issue Overview: The import hook in CPython that handles legacy .pyc files SourcelessFileLoader is incorrectly handled in FileLoader a base class and so does not use io.opencode to read the .pyc files. sys.audit handlers for this audit event therefore do not fire. CVE-2026-2297...

6.1CVSS5.8AI score0.00229EPSS
SaveExploits1
OSV
OSV
added 2026/06/22 12:0 a.m.4 views

OPENSUSE-SU-2026:11101-1 python315-3.15.0~b2-1.1 on GA media

These are all security issues fixed in the python315-3.15.0b2-1.1 package on the GA media of openSUSE Tumbleweed...

7.5CVSS6.7AI score0.02655EPSS
SaveExploits0References5
Amazon
Amazon
added 2026/06/22 12:0 a.m.12 views

Important: python-jwt

Issue Overview: PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, when the verifier is decoding JSON Web Tokens, while supporting both asymmetric and HMAC algorithms, the library does not validate use of JSON Web Keys in HMAC algorithm, allowing attacker to use the issuer publi...

7.4CVSS5.8AI score0.00395EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2026/06/22 12:0 a.m.20 views

Amazon Linux 2023 : python3-click (ALAS2023-2026-1854)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1854 advisory. Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit function, allowing attackers to pass arbitrary OS commands from an unprivileged account. CVE-2026-72...

7.2CVSS6.1AI score0.009EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2026/06/22 12:0 a.m.14 views

Amazon Linux 2 : python-pip, --advisory ALAS2-2026-3358 (ALAS-2026-3358)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3358 advisory. A flaw was found in pip, the package installer for Python. A remote attacker can exploit this vulnerability by tricking a victim into installing a malicious Python wheel. This wheel contains specially...

8CVSS6.2AI score0.0032EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/06/22 12:0 a.m.13 views

Fedora 44 : python3-docs / python3.14 (2026-a2c583a4ab)

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-a2c583a4ab advisory. New Python release including bugfixes and security fixes. Tenable has extracted the preceding description block directly from the Fedora security...

7.5CVSS5.9AI score0.0079EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/06/22 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2025-26240

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In JazzCore python-pdfkit 1.0.0, the fromstring method enables the execution of JavaScript code within the context of the server application and the exfiltratio...

8.4CVSS5.8AI score0.00392EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/06/22 12:0 a.m.21 views

Amazon Linux 2023 : python3-jwt, python3-jwt+crypto (ALAS2023-2026-1842)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1842 advisory. PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, when the verifier is decoding JSON Web Tokens, while supporting both asymmetric and HMAC algorithms, the library does not validate u...

7.4CVSS5.9AI score0.00395EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2026/06/22 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-54278

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, during cleanup it is possible for a compressed request body to ...

8.7CVSS5.3AI score0.00397EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/06/22 12:0 a.m.9 views

CentOS 9 : python-urllib3-1.26.5-8.el9

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the python-urllib3-1.26.5-8.el9 build changelog. - urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API v...

8.9CVSS5.9AI score0.0068EPSS
SaveExploits0References3
Rows per page
Query Builder