62330 matches found
GHSA-PG25-7CX5-CVCM vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-4786 vulnerabilities
Vulnerabilities for packages: python...
GHSA-CCCX-M78H-M3XW vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-6100 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-1502 vulnerabilities
Vulnerabilities for packages: python...
GHSA-HJXQ-7W9Q-2JW6 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-4786 vulnerabilities
Vulnerabilities for packages: python...
GHSA-CCCX-M78H-M3XW vulnerabilities
Vulnerabilities for packages: python...
GHSA-PG25-7CX5-CVCM vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-6100 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-1502 vulnerabilities
Vulnerabilities for packages: python...
GHSA-HJXQ-7W9Q-2JW6 vulnerabilities
Vulnerabilities for packages: python...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.12: python3.12-3.12.13-3.1.hum1 aarch64, x8664 python3.12-debug-3.12.13-3.1.hum1 aarch64, x8664 python3.12-devel-3.12.13-3.1.hum1 aarch64, x8664 python3.12-idle-3.12.13-3.1.hum1 aarch64,...
python: Python base64: Incomplete data decoding due to premature stop at padding
A flaw was found in the Python base64 module. When decoding base64 data using functions like base64.b64decode, the decoding process prematurely stops upon encountering the first padding character. This can result in incomplete data being processed, where any information following the initial...
python: Python pkgutil.get_data(): Path Traversal via improper resource argument validation
A flaw was found in Python's pkgutil.getdata function, which is used to retrieve data from packages. This function did not properly validate the resource argument, allowing a local attacker to perform path traversal attacks. Path traversal enables an attacker to access files and directories store...
python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API
A flaw was found in the Python webbrowser.open API. If a specially crafted URL containing "%action" is processed, an attacker could bypass a previous mitigation for CVE-2026-4519. This bypass allows for command injection into the underlying shell, potentially leading to arbitrary code execution...
python: Python: HTTP header injection via CR/LF in proxy tunnel headers
A flaw was found in Python. This vulnerability allows for the injection of extra information into HTTP communication. Specifically, the system does not properly prevent special characters carriage return and line feed from being included in HTTP client proxy tunnel headers or host fields...
python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules
A flaw was found in Python's decompression modules, including lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile. This vulnerability, a use-after-free, can occur if a program attempts to re-use a decompression object after a memory allocation error, especially when the system is...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.13: python3.13-3.13.13-1.1.hum1 aarch64, x8664 python3.13-debug-3.13.13-1.1.hum1 aarch64, x8664 python3.13-devel-3.13.13-1.1.hum1 aarch64, x8664 python3.13-freethreading-3.13.13-1.1.hum1...
