59942 matches found
CVE-2026-62995
joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. in versions 1.7.1 and prior, joserfc accepts JWTs with trailing padding == which are not conforming to the JOSE specifications. This leads to malleability of the JWTs when...
vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion
There is a security flaw in Vim. If you use Vim to open a malicious file written by a hacker, and you use the auto-complete feature while typing, the file can secretly force your computer to run unauthorized commands or malware...
CVE-2026-62995
joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. in versions 1.7.1 and prior, joserfc accepts JWTs with trailing padding == which are not conforming to the JOSE specifications. This leads to malleability of the JWTs when...
CVE-2026-45309
A flaw was found in AsyncSSH, a Python package for SSHv2 protocol implementation. A remote attacker can exploit a path traversal vulnerability by manipulating the SSH username during pre-authentication. This allows the attacker to read sensitive authorized-keys files from unintended directories,...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.12: python3.12-3.12.13-3.7.hum1 aarch64, x8664 python3.12-debug-3.12.13-3.7.hum1 aarch64, x8664 python3.12-devel-3.12.13-3.7.hum1 aarch64, x8664 python3.12-idle-3.12.13-3.7.hum1 aarch64,...
python: Python Tarfile: Unexpected file ownership when extracting hardlinks
A flaw was found in the Python Tarfile.extract function. This vulnerability occurs when processing untrusted tar files containing hardlinks, as the filter parameter is not correctly enforced. An attacker could exploit this to write files with unintended user or group ownership, potentially leadin...
python: Python Tarfile: Unexpected file ownership when extracting hardlinks
A flaw was found in the Python Tarfile.extract function. This vulnerability occurs when processing untrusted tar files containing hardlinks, as the filter parameter is not correctly enforced. An attacker could exploit this to write files with unintended user or group ownership, potentially leadin...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.13: python3.13-3.13.14-1.6.hum1 aarch64, x8664 python3.13-debug-3.13.14-1.6.hum1 aarch64, x8664 python3.13-devel-3.13.14-1.6.hum1 aarch64, x8664 python3.13-freethreading-3.13.14-1.6.hum1...
python: Python Tarfile: Unexpected file ownership when extracting hardlinks
A flaw was found in the Python Tarfile.extract function. This vulnerability occurs when processing untrusted tar files containing hardlinks, as the filter parameter is not correctly enforced. An attacker could exploit this to write files with unintended user or group ownership, potentially leadin...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.11: python3.11-3.11.15-5.4.hum1 aarch64, x8664 python3.11-debug-3.11.15-5.4.hum1 aarch64, x8664 python3.11-devel-3.11.15-5.4.hum1 aarch64, x8664 python3.11-idle-3.11.15-5.4.hum1 aarch64,...
python: Python Tarfile: Unexpected file ownership when extracting hardlinks
A flaw was found in the Python Tarfile.extract function. This vulnerability occurs when processing untrusted tar files containing hardlinks, as the filter parameter is not correctly enforced. An attacker could exploit this to write files with unintended user or group ownership, potentially leadin...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.10: python3.10-3.10.20-3.1.hum1 aarch64, x8664 python3.10-debug-3.10.20-3.1.hum1 aarch64, x8664 python3.10-devel-3.10.20-3.1.hum1 aarch64, x8664 python3.10-idle-3.10.20-3.1.hum1 aarch64,...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.14: python-unversioned-command-3.14.6-2.1.hum1 noarch python3-3.14.6-2.1.hum1 aarch64, x8664 python3-debug-3.14.6-2.1.hum1 aarch64, x8664 python3-devel-3.14.6-2.1.hum1 aarch64, x8664...
python: Python Tarfile: Unexpected file ownership when extracting hardlinks
A flaw was found in the Python Tarfile.extract function. This vulnerability occurs when processing untrusted tar files containing hardlinks, as the filter parameter is not correctly enforced. An attacker could exploit this to write files with unintended user or group ownership, potentially leadin...
ROOT-OS-DEBIAN-11-CVE-2024-5642 CVE-2024-5642 in rootio-python3.9 - Patched by Root
Root has patched CVE-2024-5642 in the rootio-python3.9 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-6019 CVE-2026-6019 in rootio-python3.9 - Patched by Root
Root has patched CVE-2026-6019 in the rootio-python3.9 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-9669 CVE-2026-9669 in rootio-python3.9 - Patched by Root
Root has patched CVE-2026-9669 in the rootio-python3.9 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-7210 CVE-2026-7210 in rootio-python3.9 - Patched by Root
Root has patched CVE-2026-7210 in the rootio-python3.9 package for Root:Debian:11. Multiple fixed versions available...