Software
Python PythonRegular-expression DoS when parsing TarFile headers
Python PythonQuadratic complexity parsing cookies with backslashes
BleepingComputerPyPI suspends new user registration to block malware campaign
The RegisterOver 170K users caught up in poisoned Python package ruse
BleepingComputerHackers poison source code for largest Discord bot platform
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
BleepingComputerHackers poison source code from largest Discord bot platform
ubuntu/pillowPillow 10.2.0 released, fixes CVE-2023-50447
Python PythonGroups not dropped before running subprocess when using empty 'extra_groups' parameter
ubuntu/pillowAn issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably alloc…
Python urllib3Request body not stripped after redirect in urllib3
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Fedoraproject Fedora`Cookie` HTTP header isn't stripped on cross-origin redirects
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Python PythonAn issue in Python cpython v.3.7 allows an attacker to obtain sensitive information via the _asyncio…
Python PythonPython is vulnerable to a denial of service, caused by a RecursionError in email.utils.parseaddr #10…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Python RequestsUnintended leak of Proxy-Authorization header in requests
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
pip/pillowPillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.
pip/pillowPillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Python PythonPython pgAdmin4 uncontrolled search path
Python PyPImarcador package in PyPI 0.1 through 0.13 included a code-execution backdoor.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Fedoraproject FedoraPillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are misha…
Python PythonIn Python before 3.10.3 on Windows, local users can gain privileges because the search path is inade…
Debian Debian Linuxpath_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path.
Debian Debian LinuxPIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones t…
Debian Debian Linuxpath_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImageP…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Fedoraproject FedoraRegular Expression Denial of Service (ReDoS)
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Oracle Instantis Enterprisetrackurllib3 is vulnerable to a denial of service, caused by a regular expression denial of service (ReDo…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.