Lucene search
+L

60224 matches found

Tenable Nessus
Tenable Nessus
added 2026/06/08 12:0 a.m.23 views

Amazon Linux 2023 : python3, python3-devel, python3-idle (ALAS2023-2026-1785)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1785 advisory. http.cookies.Morsel.jsoutput returns an inline snippet and only escapes for JavaScript string context. It does not neutralize the HTML parser-sensitive sequence inside the generated script element...

6.1CVSS5.5AI score0.00229EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2026/06/08 12:0 a.m.14 views

Amazon Linux 2023 : python3.12, python3.12-devel, python3.12-idle (ALAS2023-2026-1821)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1821 advisory. The import hook in CPython that handles legacy .pyc files SourcelessFileLoader is incorrectly handled in FileLoader a base class and so does not use io.opencode to read the .pyc files. sys.aud...

6.1CVSS5.5AI score0.00229EPSS
SaveExploits1References6
Amazon
Amazon
added 2026/06/08 12:0 a.m.15 views

Medium: python3.9

Issue Overview: http.cookies.Morsel.jsoutput returns an inline snippet and only escapes " for JavaScript string context. It does not neutralize the HTML parser-sensitive sequence inside the generated script element. Mitigation base64-encodes the cookie value to disallow escaping using cookie valu...

6.1CVSS5.4AI score0.00229EPSS
SaveExploits1
Amazon
Amazon
added 2026/06/08 12:0 a.m.19 views

Medium: python-mako

Issue Overview: Mako is a template library written in Python. Prior to 1.3.11, TemplateLookup.gettemplate is vulnerable to path traversal when a URI starts with // e.g., //../../../secret.txt. The root cause is an inconsistency between two slash-stripping implementations. Any file readable by the...

8.7CVSS5.4AI score0.00361EPSS
SaveExploits0
Amazon
Amazon
added 2026/06/08 12:0 a.m.12 views

Medium: python3.12

Issue Overview: The import hook in CPython that handles legacy .pyc files SourcelessFileLoader is incorrectly handled in FileLoader a base class and so does not use io.opencode to read the .pyc files. sys.audit handlers for this audit event therefore do not fire. CVE-2026-2297...

6.1CVSS5.4AI score0.00229EPSS
SaveExploits1
Packet Storm News
Packet Storm News
added 2026/06/08 12:0 a.m.18 views

ProjeQtor 12.4.3 SQL Injection Validator for Login Endpoints

This Python script is a defensive validation tool designed to identify potential SQL injection indicators in login functionality without modifying database contents or attempting exploitation...

5.6AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/06/08 12:0 a.m.16 views

Amazon Linux 2023 : python3.13, python3.13-devel, python3.13-freethreading (ALAS2023-2026-1786)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1786 advisory. http.cookies.Morsel.jsoutput returns an inline snippet and only escapes for JavaScript string context. It does not neutralize the HTML parser-sensitive sequence inside the generated script element...

6.1CVSS5.5AI score0.00229EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2026/06/08 12:0 a.m.14 views

TencentOS Server 4: python-ply (TSSA-2026:0434)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0434 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

9.8CVSS8.6AI score0.16903EPSS
SaveExploits3References2
OSV
OSV
added 2026/06/08 12:0 a.m.10 views

OPENSUSE-SU-2026:10972-1 python311-jupyter-server-2.19.0-1.1 on GA media

These are all security issues fixed in the python311-jupyter-server-2.19.0-1.1 package on the GA media of openSUSE Tumbleweed...

8.1CVSS5.5AI score0.00437EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
added 2026/06/07 5:26 a.m.5 views

python-pyjwt: PyJWT: Denial of Service via unverified JSON Web Token key IDs

A flaw was found in PyJWT, a Python library for JSON Web Token JWT implementation. A remote attacker can exploit this vulnerability by sending specially crafted JWTs with unknown 'kid' key ID values. This can force the PyJWKClient.getsigningkey function to make an unlimited number of unrate-limit...

3.7CVSS6AI score0.00336EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/06/07 5:26 a.m.2 views

urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers

A flaw was found in urllib3, an HTTP client library for Python. When using the low-level API via ProxyManager.connectionfromurl.urlopen with assertsamehost=False, cross-origin redirects can still forward sensitive headers. This could allow a remote attacker to gain unauthorized access to sensitiv...

8.2CVSS6.1AI score0.00331EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/06/07 1:11 a.m.9 views

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python-cryptography: python3-cryptography-48.0.0-3.hum1 aarch64, x8664 python-cryptography-48.0.0-3.hum1.src src...

8.9CVSS5AI score0.0068EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/06/07 1:5 a.m.9 views

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python-urllib3: python3-urllib3+brotli-2.7.0-3.hum1 noarch python3-urllib3+h2-2.7.0-3.hum1 noarch python3-urllib3+socks-2.7.0-3.hum1 noarch python3-urllib3+zstd-2.7.0-3.hum1 noarch...

8.9CVSS5AI score0.0068EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/06/07 12:59 a.m.20 views

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python-trustme: python-trustme-doc-1.2.1-2.hum1 noarch python3-trustme-1.2.1-2.hum1 noarch python-trustme-1.2.1-2.hum1.src src...

8.9CVSS5AI score0.0068EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/06/07 12:53 a.m.8 views

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python-attrs: python3-attrs-26.1.0-3.hum1 noarch python-attrs-26.1.0-3.hum1.src src...

7.5CVSS6.3AI score0.00522EPSS
SaveExploits2References4
RedHat Linux
RedHat Linux
added 2026/06/07 12:53 a.m.5 views

urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers

A flaw was found in urllib3, an HTTP client library for Python. When using the low-level API via ProxyManager.connectionfromurl.urlopen with assertsamehost=False, cross-origin redirects can still forward sensitive headers. This could allow a remote attacker to gain unauthorized access to sensitiv...

8.2CVSS6.3AI score0.00331EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/06/07 12:43 a.m.16 views

CVE-2026-45758

Guardrails AI is a Python framework that helps build AI applications. On May 11, 2026 at approximately 6:00 PM Pacific, an attacker published a malicious version of guardrails-ai 0.10.1 to PyPI. Aany user who installed guardrails-ai==0.10.1 from PyPI on May 11, 2026 may be affected. Security...

9.6CVSS5.5AI score0.00276EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/07 12:0 a.m.16 views

PT-2026-64418

Name of the Vulnerable Software and Affected Versions NLTK Natural Language Toolkit versions prior to 3.9.3 Description The nltk.collocations module contains an eval injection flaw. When collocations.py is executed directly, the main block passes command-line arguments to the eval function as...

8.5CVSS6.1AI score0.00158EPSS
SaveExploits0References9
OPENSUSE Linux
OPENSUSE Linux
added 2026/06/07 12:0 a.m.21 views

python311-pip-26.1.2-1.1 on GA media (moderate)

python311-pip-26.1.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10940-1 Rating: moderate Cross-References: CVE-2026-8643 CVSS scores: CVE-2026-8643 SUSE : 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now...

8.1CVSS5.5AI score0.0032EPSS
SaveExploits0
Snyk
Snyk
added 2026/06/06 9:0 p.m.13 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Shai-Hulud / Miasma software supply chain campaign, a large scale operation that has affected numerous packages across open source ecosystems. The malicio...

9.8CVSS5.7AI score
SaveExploits0References2
Rows per page
Query Builder