CVE-2026-71491

A flaw was found in sqlparse, a Python module for parsing SQL. A remote attacker could exploit this vulnerability by providing specially crafted SQL input that contains numerous comment-only statements. This could cause the groupcomments function to repeatedly rescan these statements, leading to...

CVE-2026-54552

A flaw was found in sh, a Python library for process launching. When sh runs from an elevated process and launches a command with the uid option set to an unprivileged user, the child process may retain the parent process's supplementary groups. This incomplete privilege drop can allow the child...

web-xss-scanner-and-patcher

Web Vulnerability Assessment & Automated Python Scanner A han...

CVE-2026-81662 Flowintel Alert Settings Configuration Allows Remote Code Execution via Arbitrary Configuration Keys

Affected versions of Flowintel improperly trust configuration keys supplied to the alerts settings update endpoint. While configuration values were normalized to Python literals, the corresponding keys were used directly when constructing and replacing lines in conf/configmodule.py. The vulnerabl...

RHSA-2026:60371 Red Hat Security Advisory: python-urllib3 security update

Bulletin has no description...

RHSA-2026:60362 Red Hat Security Advisory: python-urllib3 security update

Bulletin has no description...

RHSA-2026:60353 Red Hat Security Advisory: python-urwid security update

Bulletin has no description...

Exploit for CVE-2015-3246

CVE-2015-3246 and More cve-2015-3245, cve-2015-3246, cve-2015...

CLSA-2026-1787812038 TuxCare security update for setuptools (1 CVE)

TuxCare rebuilt setuptools to address 1 CVE. Fixed in 60.0.0.post1+tuxcare...

yaraast v2.0.1rc1

yaraast Parse, analyze, and transform YARA rules with a Python AST toolkit Overview yaraast is a Python library for parsing and manipulating YARA-family rules using Abstract Syntax Trees AST. It supports classic YARA, YARA-L, and YARA-X workflows with automatic dialect detection and CLI tooling...

SUSE CVE-2026-68514

OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry. In versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.13, the PyOpenEXR Python bindings contain a heap out-of-bounds write triggered when reading a crafted deep...

SUSE SLES15 Security Update : python-sqlparse (SUSE-SU-2026:3762-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3762-1 advisory. - CVE-2026-54284: TokenList.init materializes Osubtree value per group, causing CPU DoS before depth/token caps trigger bsc1275459. -...

PT-2026-82492

Name of the Vulnerable Software and Affected Versions Flowintel versions 3.3.0 and later Description Flowintel improperly trusts configuration keys provided to the alerts settings update endpoint. While configuration values are normalized to Python literals, the keys are used directly to construc...

PT-2026-82619

Name of the Vulnerable Software and Affected Versions NLTK versions prior to 3.10.3 Description An uncontrolled recursion issue exists in the nltk.featstruct.FeatStructReader class. Unauthenticated attackers can trigger a denial of service by providing deeply nested feature-structure input, such ...

TencentOS Server 3: python3 (TSSA-2026:0914)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0914 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

CVE-2026-81690: Improper Link Resolution Before File Access

openssl-encrypt pip package before 1.4.9 contains a symlink-following flaw in its verify-usb v2 added-file allowlist scan. The scan enumerated the drive with rglob, which in CPython does not descend into symlinked directories and treats the symlink as an ordinary directory, while ONOFOLLOW on the...

CHIRP chirp-next-20260814 Arbitrary Code Execution

CHIRP's Kenwood ITM file format driver passes raw CSV field values from an opened file directly to Python's built-in eval with no validation. An attacker who delivers a crafted file to a CHIRP user achieves arbitrary code execution as the victim user. CHIRP — Arbitrary Code Execution via eval in...

TencentOS Server 3: python-idna (TSSA-2026:0900)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0900 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

urllib3: urllib3: Denial of Service due to excessive HTTP response decompression

A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response,...

Important: Red Hat Security Advisory: python-urllib3 security update

An update for python-urllib3 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...