Lucene search
+L

2 matches found

Amazon
Amazon
added 2025/03/06 12:00 a.m.9 views

Medium: python3.11

Issue Overview: A vulnerability has been found in the CPython venv module and CLI where path names provided when creating a virtual environment were not quoted properly, allowing the creator to inject commands into virtual environment "activation" scripts ie "source venv/bin/activate". This means...

7.8CVSS7.7AI score0.01525EPSS
SaveExploits0
Amazon
Amazon
added 2025/01/24 12:00 a.m.11 views

Important: python3.12

Issue Overview: Starting in Python 3.12.0, the asyncio.SelectorSocketTransport.writelines method would not "pause" writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the "high-water mark". Because of this, Protocols would not periodically drain the...

8.7CVSS7.9AI score0.0188EPSS
SaveExploits0
Rows per page
Query Builder