SUSE SLES15 Security Update : python-Django (SUSE-SU-2026:4626-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4626-1 advisory. - CVE-2026-77050: potential denial-of-service in getsupportedlanguagevariant when processing many distinct, very long language codes bsc1284481...

CVE-2026-108383: Improper Control of Generation of Code

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, FieldRepresentation.getfielddefault renders a schema-controlled enum field default as an enum member reference...

CVE-2026-108377: Improper Control of Generation of Code

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.62.3 through 0.70.5, ClassRepresentation.rendermetaclass inserts a schema-controlled Avro record name into the quoted Meta.schemana...

CVE-2026-108378: Improper Control of Generation of Code

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.40.0 through 0.70.5, ClassRepresentation.renderdocstring copies a schema record's doc value into a generated triple-double-quoted...

CVE-2026-85864: Improper Restriction of Names for Files and Other Resources

Improper privilege management in Python allows an authorized attacker to elevate privileges locally...

AlmaLinux 9.2 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791919907)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791919907 advisory. - The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and...

PT-2026-111642

Name of the Vulnerable Software and Affected Versions Heym versions prior to 0.0.40 Description An authenticated user with permissions to create or edit a workflow using an Agent custom Python tool can bypass the blacklist-based sandbox located in backend/app/services/python tool executor.py. Thi...

MiracleLinux 9 : python3.14-3.14.8-1.el9_8 (AXSA:2026-2028:08)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2028:08 advisory. python: python: Certificate verification bypass via missing serverhostname validation in SSLContext.wrapbio CVE-2026-19553 python: Use-after-free of...

CVE-2026-109293 Open WebUI 0.11.0 before 0.11.4 Tool Source Disclosure via Tool Export Endpoint

Open WebUI from 0.11.0 before 0.11.4 contains an information disclosure vulnerability that allows authenticated non-admin users with tool export permission to obtain tool source code shared with them read-only. Attackers can request GET /api/v1/tools/export to retrieve the full Python source of...

CVE-2026-109293

Open WebUI from 0.11.0 before 0.11.4 contains an information disclosure vulnerability that allows authenticated non-admin users with tool export permission to obtain tool source code shared with them read-only. Attackers can request GET /api/v1/tools/export to retrieve the full Python source of...

CVE-2026-109293 Open WebUI 0.11.0 before 0.11.4 Tool Source Disclosure via Tool Export Endpoint

Open WebUI from 0.11.0 before 0.11.4 contains an information disclosure vulnerability that allows authenticated non-admin users with tool export permission to obtain tool source code shared with them read-only. Attackers can request GET /api/v1/tools/export to retrieve the full Python source of...

EUVD-2026-97595

Open WebUI from 0.11.0 before 0.11.4 contains an information disclosure vulnerability that allows authenticated non-admin users with tool export permission to obtain tool source code shared with them read-only. Attackers can request GET /api/v1/tools/export to retrieve the full Python source of...

James Bardin: A Python SCP module with path traversal vulnerabilities

James Bardin’s Pure Python SCP module versions 0.16.1 and earlier have a path traversal vulnerability. This vulnerability stems from issues with the recvfile/recvpushd functions in the SCP Receive Handler component, which allow for path traversal attacks by remote attackers...

CVE-2026-102925 affecting package python-virtualenv for versions less than 20.36.1-7

CVE-2026-102925 affecting package python-virtualenv for versions less than 20.36.1-7. A patched version of the package is available...

CVE-2026-97689 affecting package python-urllib3 for versions less than 2.0.7-7

CVE-2026-97689 affecting package python-urllib3 for versions less than 2.0.7-7. A patched version of the package is available...

CVE-2026-102930 affecting package python-virtualenv for versions less than 20.36.1-7

CVE-2026-102930 affecting package python-virtualenv for versions less than 20.36.1-7. A patched version of the package is available...

Security update for python-Django

This update for python-Django fixes the following issues: CVE-2026-77050: potential denial-of-service in getsupportedlanguagevariant when processing many distinct, very long language codes bsc1284481. CVE-2026-84429: potential denial-of-service attack due to quadratic time complexity when parsing...

SUSE-SU-2026:4626-1 Security update for python-Django

This update for python-Django fixes the following issues: - CVE-2026-77050: potential denial-of-service in getsupportedlanguagevariant when processing many distinct, very long language codes bsc1284481. - CVE-2026-84429: potential denial-of-service attack due to quadratic time complexity when...

Mini-Soc-Security-Operation-Center-

Mini SOC A small, working Security Operations Center built wi...

Important: Red Hat Security Advisory: python-tornado security update

An update for python-tornado is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...