74178 matches found
CVE-2026-79824
A directory traversal vulnerability exists in HPE NonStop Python 3.x (specifically version T0993 - T0993L01^AAL and earlier ) caused by a .. (dot dot) sequence in filenames within a TAR archive. This flaw could allow an attacker to overwrite arbitrary files. HPE has released fixes, including vers...
EUVD-2026-101969
A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR archive...
[SECURITY] Fedora 43 Update: python3-docs-3.14.8-1.fc43
The python3-docs package contains documentation on the Python 3 programming language and interpreter...
[SECURITY] Fedora 43 Update: python3.14-3.14.8-1.fc43
Python 3.14 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries...
CLEANSTART-2026-YH75013 Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node
CVE-2026-85525 affects multiple packages. Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node. See references for individual vulnerability details...
CLEANSTART-2026-EE95279 Pydantic AI is a Python agent framework for building applications and workflows with Generative AI
Security vulnerability affects the py3-pydantic-ai package. Pydantic AI is a Python agent framework for building applications and workflows with Generative AI...
CLEANSTART-2026-QG98494 Pydantic AI is a Python agent framework for building applications and workflows with Generative AI
Security vulnerability affects the py3-pydantic-ai package. Pydantic AI is a Python agent framework for building applications and workflows with Generative AI...
CLEANSTART-2026-BF25173 Pydantic AI is a Python agent framework for building applications and workflows with Generative AI
Security vulnerability affects the py3-pydantic-ai package. Pydantic AI is a Python agent framework for building applications and workflows with Generative AI...
CLEANSTART-2026-GN57450 Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Thrift Python, Go, PHP and Java bindings
CVE-2026-43871 affects multiple packages. Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings. See references for individual vulnerability details...
EUVD-2026-101799
A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.createreq of the file python/sglang/srt/session/sessioncontroller.py of the component Session Cleanup. Such manipulation leads to denial of service. The attack may be...
RLSA-2026:82858 Important: python36:3.6 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
HPE NonStop Python path traversal vulnerability
HPE NonStop Python T0993L01^AAL and earlier versions contain a path traversal vulnerability. This vulnerability arises because the TAR archive filename contains a “..” sequence, leading to directory traversal. It may allow attackers to overwrite any file...
PT-2026-115208
Name of the Vulnerable Software and Affected Versions Python Social Auth versions prior to 5.0.2 Description The LINE backend fails to validate the returned OAuth state during the exchange of an authorization code. This allows an attacker to initiate an authorization flow for an account they...
Fedora 43 : python3-docs / python3.14 (2026-a3da6bb5cd)
The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-a3da6bb5cd advisory. New version of Python interpreter Security fix for CVE-2026-19553 Security fix for CVE-2026-82049 Security fix for CVE-2026-15310 Security fix for...
CVE-2026-79824: Path Traversal: '\dir\..\filename'
A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR archive...
PT-2026-114865
A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR archive...
Linux Distros Unpatched Vulnerability : CVE-2026-79824
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR...
CVE-2026-102946: Authentication Bypass by Spoofing
joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to 1.7.4, joserfc.jws.deserializejson accepts a JWS General JSON Serialization with an empty signatures array as authenticated. The verifygeneraljson loop performs no...
