60221 matches found
[SECURITY] Fedora 43 Update: python-django5-5.2.15-1.fc43
Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...
[SECURITY] Fedora 43 Update: python-python-multipart-0.0.32-1.fc43
Python-Multipart is a streaming multipart parser for Python...
[SECURITY] Fedora 44 Update: python-django5-5.2.15-1.fc44
Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...
[SECURITY] Fedora 44 Update: python-python-multipart-0.0.32-1.fc44
Python-Multipart is a streaming multipart parser for Python...
Linux Distros Unpatched Vulnerability : CVE-2026-10143
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in SCRAM authentication handling that allows a malicious or machine-in-the-middle broker ...
PT-2026-49728
Name of the Vulnerable Software and Affected Versions zeroconf versions prior to 0.149.16 Description An issue exists where the functions read character string and read string in src/zeroconf/ protocol/incoming.py advance the self.offset by a declared length without verifying it against self. dat...
python311-starlette-1.2.0-1.1 on GA media (moderate)
python311-starlette-1.2.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11026-1 Rating: moderate Cross-References: CVE-2026-48710 CVSS scores: CVE-2026-48710 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2026-48710 SUSE : 6.9...
python311-tornado6-6.5.7-1.1 on GA media (moderate)
python311-tornado6-6.5.7-1.1 on GA media Announcement ID: openSUSE-SU-2026:11027-1 Rating: moderate Cross-References: CVE-2026-49853 CVE-2026-49854 CVE-2026-49855 Affected Products: openSUSE Tumbleweed An update that solves 3 vulnerabilities can now be installed. Description: These are all securi...
python311-PyJWT-2.13.0-1.1 on GA media (moderate)
python311-PyJWT-2.13.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11024-1 Rating: moderate Cross-References: CVE-2026-48522 CVE-2026-48523 CVE-2026-48524 CVE-2026-48525 CVE-2026-48526 CVSS scores: CVE-2026-48522 SUSE : 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2026-48522 SUSE :...
OPENSUSE-SU-2026:11035-1 python311-aiosmtplib-5.1.1-1.1 on GA media
These are all security issues fixed in the python311-aiosmtplib-5.1.1-1.1 package on the GA media of openSUSE Tumbleweed...
Security update for python-python-dotenv (moderate)
openSUSE security update: security update for python-python-dotenv ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20952-1 Rating: moderate References: bsc1262423 Cross-References: CVE-2026-28684 CVSS scores: CVE-2026-28684 SUSE : 6.6...
OPENSUSE-SU-2026:11036-1 python311-zeroconf-0.149.16-1.1 on GA media
These are all security issues fixed in the python311-zeroconf-0.149.16-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-49172
A vulnerability was detected in universal-tool-calling-protocol python-utcp 1.1.0. This affects an unknown function of the component utcp-gql/utcp-websocket. Performing a manipulation results in server-side request forgery. The attack can be initiated remotely. The exploit is now public and may b...
python311-paramiko-5.0.0-1.1 on GA media (moderate)
python311-paramiko-5.0.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11025-1 Rating: moderate Cross-References: CVE-2018-1000805 CVE-2018-7750 CVE-2026-44405 CVSS scores: CVE-2018-1000805 SUSE : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2018-7750 SUSE : 10...
CVE-2026-12191
CVE-2026-12191 affects Comma AI Openpilot 0.11. The issue is a deserialization vulnerability in the pickle.loads/pickle.load usage inside selfdrive/modeld/modeld.py (Pickle Module). Exploitation requires local access. The CVSS metrics indicate high impact (confidentiality, integrity, availability...
Malicious code in generatellm (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31201af7035560c0798b46e67a374b9526a7e8ed2f856235e5eb0438d1a8d080 GenerateLLM 2.23 is a hollow PyPI package placeholder metadata, no functional code under src/, only an egg-info directory whose entire payload is an...
MAL-2026-5771 Malicious code in llamagenerator (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e72d70dd6ee72468c56f2a334414bd1fa8f5ad1e70fea0d89c08f7d1c8ca557 The package's setup.py fetches the raw contents of https://pastebin.com/raw/yBcUM1QB during pip install, takes the first line, and passes it directly...
MAL-2026-5770 Malicious code in llmgenerator (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e55ac2d3368516d538c8efaad2b83814dbb61813f36ab5655f77677ca0d6be On pip install, setup.py performs an HTTP GET to https://pastebin.com/raw/yBcUM1QB, takes the first line of the response body, and passes it to...