python-webex-bot (0.51.0) potentially affected by CVE-2026-113732 via virtualenv (16.4.3)

virtualenv PYPI version 16.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - python-webex-bot 0.51.0 Source cves: CVE-2026-113732 Source advisory: OSV:GHSA-C947-3PG5-GM8Q...

cateye (>=0.3.4, <=0.3.8), edx-completion (>=0.0.1, <=0.1.1) +4 more potentially affected by CVE-2026-113732 via virtualenv (15.1.0)

virtualenv PYPI version 15.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - cateye =0.3.4, =0.0.1, =0.5.7, =1.0.0rc1, =1.2.0, =1.7.1 Source cves: CVE-2026-113732 Source advisory: OSV:GHSA-C947-3PG5-GM8Q...

limbo (8.6.1), python-thingiverse (>=0.0.6rc1.dev0, <=0.0.7.dev0) +1 more potentially affected by CVE-2026-113732 via virtualenv (20.13.1)

virtualenv PYPI version 20.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - limbo 8.6.1 - python-thingiverse =0.0.6rc1.dev0, =0.26.0, =0.26.1 Source cves: CVE-2026-113732 Source advisory: OSV:GHSA-C947-3PG5-GM8Q...

backlogapi (>=0.1.3, <=0.1.5), dcoscli (>=0.4.10, <=0.6.1) +1 more potentially affected by CVE-2026-113732 via virtualenv (15.2.0)

virtualenv PYPI version 15.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - backlogapi =0.1.3, =0.4.10, =0.6.7, =0.7.1 Source cves: CVE-2026-113732 Source advisory: OSV:GHSA-C947-3PG5-GM8Q...

hlvox (0.3.10), python-whiteprint (0.7.0) +2 more potentially affected by CVE-2026-113732 via virtualenv (20.16.5)

virtualenv PYPI version 20.16.5 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - hlvox 0.3.10 - python-whiteprint 0.7.0 - traffic-guardian =1.0.1, =0.1.9, =0.3.7 Source cves: CVE-2026-113732 Source advisory:...

GraphQL Python GraphQL-core 3 resource management error vulnerability

In GraphQL Python, there is a resource management error vulnerability in versions 3.2.3 through 3.2.12 and 3.3.0a3 through 3.3.0rc1. This vulnerability arises because the parser’s maxtokens limit only counts non-comment tokens; however, comments that are skipped are still assigned as Tokens via...

php2shell-test

PHP2Shell — Evaluación no intrusiva de PHP2Shell para CVE-2026...

Security update for python-hpack

This update for python-hpack fixes the following issue: CVE-2026-59980: unbounded variable integer decoding can cause run-away computation on malformed input, leading to quadratic runtime bsc1283035. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods lik...

SUSE-SU-2026:4832-1 Security update for python-hpack

This update for python-hpack fixes the following issue: - CVE-2026-59980: unbounded variable integer decoding can cause run-away computation on malformed input, leading to quadratic runtime bsc1283035...

Security Bulletin: Multiple vulnerabilities in Python affect AIX

Summary Vulnerabilities in Python: SSL/TLS Security Vulnerabilities CVE-2026-19553, CVE-2026-19445, Archive Extraction / Tarfile Vulnerabilities CVE-2026-19672, CVE-2026-82049, CVE-2026-87910, Authentication / Credential Exposure CVE-2026-15806, Memory Management Vulnerabilities CVE-2026-15310,...

CLSA-2026-1792577610 Fix CVE(s): CVE-2024-0397, CVE-2025-8194

SECURITY UPDATE: infinite loop and deadlock when parsing tar archives with negative member offsets - debian/patches/CVE-2025-8194.patch: reject negative byte counts in TarInfo.block with InvalidHeaderError in Lib/tarfile.py, so a crafted negative member size can no longer move the read offset...

SUSE-SU-2026:24267-1 Security update for python-soupsieve

This update for python-soupsieve fixes the following issues: - CVE-2026-85999: quadratic complexity when running the whitespace/comment trimming regex REWSEND can lead to DoS bsc1281119. - CVE-2026-86000: quadratic complexity when running the IDENTIFIER / VALUE selector sub-patterns can lead to a...

Security update for python-oauthlib

This update for python-oauthlib fixes the following issues: CVE-2026-49264: Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation bsc1283526. CVE-2026-49265: Oauthlib: Timing Attack Vulnerability in PKCE codeverifier Comparison bsc1283527...

Security update for python-oauthlib

This update for python-oauthlib fixes the following issue: CVE-2026-49264: Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation bsc1283526. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods lik...

OPENSUSE-SU-2026:22149-1 Security update for python-soupsieve

This update for python-soupsieve fixes the following issues: - CVE-2026-85999: quadratic complexity when running the whitespace/comment trimming regex REWSEND can lead to DoS bsc1281119. - CVE-2026-86000: quadratic complexity when running the IDENTIFIER / VALUE selector sub-patterns can lead to a...

python3 security update

An update is available for python3. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming language,...

RLSA-2026:85239 Important: python3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

AZL-109890 CVE-2026-114094 affecting package python-dulwich 0.21.7-6

Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Git tree path elements on Windows, allowing arbitrary file write. Attackers can craft a malicious repository with a tree entry named 'C:' that bypasses NTFS validation and writes files outside the worktree to achieve remote code...

AZL-109893 CVE-2026-114095 affecting package python-dulwich 0.21.7-6

Dulwich before 1.2.9 contains a denial of service vulnerability in Pack.resolveobject that allows attackers to cause infinite recursion via self-referential OFSDELTA objects. Attackers can supply a malicious packfile with an OFSDELTA deltaoffset of 0 to exhaust CPU during clone, fetch, or cat-fil...

CVE-2026-114053

vLLM from 0.7.3 before 0.31.0 forwards the request-supplied mmprocessorkwargs.coderevision to Transformers AutoProcessor.frompretrained, letting clients select which revision of a model's dynamic processor code is imported when trustremotecode is enabled. An attacker controlling a revision in the...