60069 matches found
openSUSE 16 Security Update : python-msgpack (openSUSE-SU-2026:21239-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21239-1 advisory. This update for python-msgpack fixes the following issue - CVE-2026-57585: reusing an Unpacker instance after an error has been caught can lead to an...
OPENSUSE-SU-2026:11238-1 python313-pypdf-6.14.2-1.1 on GA media
These are all security issues fixed in the python313-pypdf-6.14.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11240-1 python313-websockets-16.0-2.1 on GA media
These are all security issues fixed in the python313-websockets-16.0-2.1 package on the GA media of openSUSE Tumbleweed...
MAL-2026-7025 Malicious code in tronsev (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 74ab279920219404ed526a79d48c3e9135856fd7905a135ce506c1c148557500 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...
CVE-2026-54499
Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. Prior to 1.12.2, Stanza model loaders such as stanza.models.common.pretrain.Pretrain.load attempt torch.load..., weightsonly=True but fall back to torch.load...,...
MAL-2026-7023 Malicious code in dbzy-tools (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0432a46ed92acb897826fc16d26cba900bd3d18f0de5baa7f2909a44d9ec625 The package advertises itself as a network debugging tool but its CLI and modules compose a remote-access toolkit. The dbzy-tools console entry calls...
DEBIAN-CVE-2026-54590
AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Version 2.23.0 contains an incomplete fix for CVE-2026-45309 in SSHServerConfig.settokens that blocks /, , and .. before %u substitution in...
UBUNTU-CVE-2026-55195
py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Prior to 1.1.3, py7zr's Worker.decompress extracted archive entries without tracking total decompressed size, allowing a crafted .7z file such as a 15.6 KB archive that expan...
UBUNTU-CVE-2026-55206
py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Prior to 1.1.3, PackInfo.read in archiveinfo.py used an On^2 cumulative sum pattern for attacker-controlled numstreams values parsed from archive headers, allowing a crafted...
GHSA-P4GQ-832X-FM9V vulnerabilities
Vulnerabilities for packages: py3-nltk...
CVE-2026-12243 vulnerabilities
Vulnerabilities for packages: py3-nltk...
CVE-2026-55206 py7zr: O(n^2) algorithmic complexity DoS in PackInfo._read()
py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Prior to 1.1.3, PackInfo.read in archiveinfo.py used an On^2 cumulative sum pattern for attacker-controlled numstreams values parsed from archive headers, allowing a crafted...
GHSA-G4RG-993R-MGX7 vulnerabilities
Vulnerabilities for packages: py3-captum...
GHSA-MP2F-45PM-3CG9 vulnerabilities
Vulnerabilities for packages: py3-captum...
GHSA-F8Q6-P94X-37V3 vulnerabilities
Vulnerabilities for packages: py3-captum...
GHSA-Q5H6-FCF5-49G9 vulnerabilities
Vulnerabilities for packages: py3-nltk...
CVE-2021-42740 vulnerabilities
Vulnerabilities for packages: py3-captum...
CVE-2026-53486 vulnerabilities
Vulnerabilities for packages: py3-captum...