59942 matches found
Important: Red Hat Security Advisory: vim security update
An update for vim is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
Important: Red Hat Security Advisory: python-pillow security update
An update for python-pillow is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...
Code Injection
datamodel-code-generator is vulnerable to Code Injection. The vulnerability is due to insufficient validation of x-python-type values from attacker-controlled JSON Schema content before inserting them into generated Python field annotations, which allows an attacker to execute arbitrary Python co...
ROOT-APP-PYPI-CVE-2023-44271 CVE-2023-44271 in rootio-pillow - Patched by Root
Root has patched CVE-2023-44271 in the rootio-pillow package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-JM82-FX9C-MX94 GHSA-jm82-fx9c-mx94 in rootio-pypdf - Patched by Root
Root has patched GHSA-jm82-fx9c-mx94 in the rootio-pypdf package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-34993 CVE-2026-34993 in rootio-aiohttp - Patched by Root
Root has patched CVE-2026-34993 in the rootio-aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-GR75-JV2W-4656 GHSA-gr75-jv2w-4656 in rootio-langchain - Patched by Root
Root has patched GHSA-gr75-jv2w-4656 in the rootio-langchain package for Root:PyPI. Multiple fixed versions available...
aiohttp - Directory Traversal
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static files. Additionally, the option 'followsymlinks' can be used to determine whether to follow symboli...
RLSA-2026:48021 Important: python-pillow security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
Oracle Linux 8 : python-pillow (ELSA-2026-48021)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-48021 advisory. 5.1.1-23 - Security fix for CVE-2026-54058, CVE-2026-59197 Resolves: RHEL-211857, RHEL-211848 Tenable has extracted the preceding description block...
JetBrains PyCharm < 2026.1.4 / 2026.2 Arbitrary Code Execution
According to its self-reported version, the JetBrains PyCharm installation on the remote host is prior to 2026.1.4. It is, therefore, affected by an arbitrary code execution vulnerability. In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable was...
RHEL 8 : python-pillow (RHSA-2026:48759)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:48759 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...
RockyLinux 10 : vim (RLSA-2026:48650)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:48650 advisory. vim: Vim: Denial of Service via stack out-of-bounds write in spellsoundfoldsofo CVE-2026-57455 vim: Vim: Arbitrary code execution via malicious...
Security update for python-nltk (important)
openSUSE Security Update: Security update for python-nltk Announcement ID: openSUSE-SU-2026:0269-1 Rating: important References: 1272667 Cross-References: CVE-2025-71408 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes one vulnerability is now available. Description: This...
CVE-2026-59881
AIOHTTP WebSocket client vulnerability: before 3.14.2, the client accepts and decompresses frames with RSV1 set even when permessage-deflate was not negotiated, enabling potential CPU and memory overuse by a malicious server. Affected: AIOHTTP (WebSocket client). Root cause: decompressing frames ...
Malicious code in mcp-search-server (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 75c59285ee1a5a83447815e7402410ccfca6a287e0c36d61bcfda3d55396f608 Versions published in 2026-07 after the package was removed by the original author and the name was re-registered by another contain a stub 'share compute swar...
MAL-2026-11198 Malicious code in mcp-search-server (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 75c59285ee1a5a83447815e7402410ccfca6a287e0c36d61bcfda3d55396f608 Versions published in 2026-07 after the package was removed by the original author and the name was re-registered by another contain a stub 'share compute swar...
CVE-2026-13435
The CVE-2026-13435 entry concerns IBM Langflow OSS versions 1.0.0–1.10.1, where an improper input validation in the PythonREPL sandbox allows code execution within a restricted globals environment. The root cause is a bypass of the sandbox validator, enabling access to sensitive values in the ser...
