hip-data-ml-utils (>=1.0.1, <=1.0.2), pytoil (0.35.0) potentially affected by CVE-2026-113725 via virtualenv (20.16.3)

virtualenv PYPI version 20.16.3 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - hip-data-ml-utils =1.0.1, =1.0.2 - pytoil 0.35.0 Source cves: CVE-2026-113725 Source advisory: OSV:GHSA-VXJ4-Q4G9-CRJ7...

azure-devops-artifacts-helpers (>=1.0.8, <=1.0.9), hip-data-ml-utils (>=0.3.7, <=1.0.0) +2 more potentially affected by CVE-2026-113725 via virtualenv (20.4.2)

virtualenv PYPI version 20.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - azure-devops-artifacts-helpers =1.0.8, =0.3.7, =8.2.1, =0.9.2, =1.1.0 Source cves: CVE-2026-113725 Source advisory: OSV:GHSA-VXJ4-Q4G9-CRJ7...

clearml-agent (>=0.17.0, <=0.17.2), manven (>=0.1.0, <=0.2.0) +4 more potentially affected by CVE-2026-113726 via virtualenv (16.7.12)

virtualenv PYPI version 16.7.12 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - clearml-agent =0.17.0, =0.1.0, =0.4.0, =0.0.1, =0.3.0.dev0, =0.13.2rc2, =0.16.3 Source cves: CVE-2026-113726 Source advisory:...

hip-data-ml-utils (>=1.0.1, <=1.0.2), pytoil (0.35.0) potentially affected by CVE-2026-113726 via virtualenv (20.16.3)

virtualenv PYPI version 20.16.3 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - hip-data-ml-utils =1.0.1, =1.0.2 - pytoil 0.35.0 Source cves: CVE-2026-113726 Source advisory: OSV:GHSA-5VJQ-RRRF-7H2Q...

clearml-agent (>=0.17.0, <=0.17.2), manven (>=0.1.0, <=0.2.0) +4 more potentially affected by CVE-2026-113732 via virtualenv (16.7.12)

virtualenv PYPI version 16.7.12 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - clearml-agent =0.17.0, =0.1.0, =0.4.0, =0.0.1, =0.3.0.dev0, =0.13.2rc2, =0.16.3 Source cves: CVE-2026-113732 Source advisory:...

hip-data-ml-utils (>=1.0.1, <=1.0.2), pytoil (0.35.0) potentially affected by CVE-2026-113732 via virtualenv (20.16.3)

virtualenv PYPI version 20.16.3 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - hip-data-ml-utils =1.0.1, =1.0.2 - pytoil 0.35.0 Source cves: CVE-2026-113732 Source advisory: OSV:GHSA-C947-3PG5-GM8Q...

azure-devops-artifacts-helpers (>=1.0.8, <=1.0.9), hip-data-ml-utils (>=0.3.7, <=1.0.0) +2 more potentially affected by CVE-2026-113732 via virtualenv (20.4.2)

virtualenv PYPI version 20.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - azure-devops-artifacts-helpers =1.0.8, =0.3.7, =8.2.1, =0.9.2, =1.1.0 Source cves: CVE-2026-113732 Source advisory: OSV:GHSA-C947-3PG5-GM8Q...

Roundcube Webmail Project Roundcube Webmail Resource Management Error Vulnerability

The Roundcube Webmail project contains a resource management error vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability arises because the CSS proxy via utils/modcss operations fails to limit the size of style sheets it reads and does not set a read timeout. As...

Security update for cifs-utils

This update for cifs-utils fixes the following issue: CVE-2026-104715: mount options injection via CIFS credentials-file parsing bsc1284932. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you ca...

PT-2026-120804

Name of the Vulnerable Software and Affected Versions Django REST framework versions prior to 3.18.2 Description An issue exists where DefaultContentNegotiation.get accept list in rest framework/negotiation.py accepts an unbounded number and aggregate size of Accept tokens. The select renderer...

XZ Utils 5.6.1 Backdoor Detection

XZ Utils versions 5.6.0 and 5.6.1 contain the backdoor tracked as CVE-2024-3094. This Bash tool checks XZ/LZMA versions, sshd linkage, and known liblzma byte patterns for possible exposure...

Amazon Linux 2023 : dnsmasq, dnsmasq-utils (ALAS2023-2026-3223)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3223 advisory. Amazon Linuxvended DNS resolvers shipped with an older DNSSEC root signing key. For hosts configured with DNSSEC validation enabled, this could result in DNS resolution failures, including for names in...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 : XZ Utils vulnerability (USN-8945-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 host has packages installed that are affected by a vulnerability as referenced in the USN-8945-1 advisory. It was discovered that XZ Utils incorrectly handled certain memory allocation...

SUSE CVE-2026-89096

A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service DoS by sending repeated state notification requests to an exposed rpc.statd service. The service fails to properly release memory allocated during callback processing, leading to continuous memory...

SUSE CVE-2026-89098

A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an...

USN-8945-1 xz-utils vulnerability

It was discovered that XZ Utils incorrectly handled certain memory allocation failures when reinitializing decoders for specific compressed file formats. An attacker could possibly use this issue to trigger an invalid memory write, resulting in a denial of service or arbitrary code execution...

USN-8945-1: XZ Utils vulnerability

It was discovered that XZ Utils incorrectly handled certain memory allocation failures when reinitializing decoders for specific compressed file formats. An attacker could possibly use this issue to trigger an invalid memory write, resulting in a denial of service or arbitrary code execution...

hip-data-ml-utils (>=0.3.7, <=1.0.0), mllibprodest (>=1.5.0, <=1.5.1) +1 more potentially affected by CVE-2026-53995 via mlflow (1.29.0)

mlflow PYPI version 1.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hip-data-ml-utils =0.3.7, =1.5.0, =0.2.33, =0.2.39 Source cves: CVE-2026-53995 Source advisory: OSV:GHSA-WQMH-QCCW-PQWF...

ai-24sea (>=0.1.0, <=1.0.0), cogflow (>=1.12.0, <=3.0.0b16) +4 more potentially affected by CVE-2026-53995 via mlflow (2.22.0)

mlflow PYPI version 2.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ai-24sea =0.1.0, =1.12.0, =1.4.5, =0.1.6, =1.0.2, =1.1.0rc4 Source cves: CVE-2026-53995 Source advisory: OSV:GHSA-WQMH-QCCW-PQWF...

poly-lithic (>=0.1.7.1, <=1.8.0), sm-data-ml-utils (>=0.1.1, <=0.1.3) potentially affected by CVE-2026-53995 via mlflow (2.22.2)

mlflow PYPI version 2.22.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - poly-lithic =0.1.7.1, =0.1.1, =0.1.3 Source cves: CVE-2026-53995 Source advisory: OSV:GHSA-WQMH-QCCW-PQWF...