Schwachstellen im Stack Python · Seite 138

urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)

urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decomp

• Auf 1.25.8-2ubuntu0.4+esm3 aktualisieren
• Auf 1.26.12-1+deb12u3 aktualisieren
• Auf 1.26.5-1~exp1ubuntu0.5 aktualisieren
• Auf 2.0.7-1ubuntu0.4 aktualisieren
• Auf 2.3.0-3+deb13u1 aktualisieren
• Auf 2.3.0-3ubuntu0.2 aktualisieren
• Auf 2.5.0-2 aktualisieren
• Auf 2.6.3 aktualisieren

Open Redirect in OpenCTI's SAML Authentication Flow

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.8.3, an open redirect vulnerability exists in the OpenCTI platform's SAML authentication endpoint (/auth/saml/callback). By manipulating the RelayState parameter, an attacker can force the server to issue a 302 redirect to any external URL, enabling phishing, credential theft, and arbitrary site redirection. This issue has been patched in version 6.8.3.

• Auf 6.8.3 aktualisieren

CVE-2025-61492

A command injection vulnerability in the execute_command function of terminal-controller-mcp 0.1.7 allows attackers to execute arbitrary commands via a crafted input.

badkeys vulnerable to ASCII control character injection on console via malformed input

badkeys is a tool and library for checking cryptographic public keys for known vulnerabilities. In versions 0.0.15 and below, an attacker may inject content with ASCII control characters like vertical tabs, ANSI escape sequences, etc., that can create misleading output of the badkeys command-line tool. This impacts scanning DKIM keys (both --dkim and --dkim-dns), SSH keys (--ssh-lines mode), and filenames in various modes. This issue is fixed in version 0.0.16.

• Auf 0.0.16 aktualisieren

AIOHTTP Vulnerable to Cookie Parser Warning Storm

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. In versions 3.13.2 and below, reading multiple invalid cookies can lead to a logging storm. If the cookies attribute is accessed in an application, then an attacker may be able to trigger a storm of warning-level logs using a specially crafted Cookie header. This issue is fixed in 3.13.3.

• Auf 3.13.3 aktualisieren
• Auf 3.13.3-1 aktualisieren

AIOHTTP vulnerable to DoS through chunked messages

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. In versions 3.13.2 and below, handling of chunked messages can result in excessive blocking CPU usage when receiving a large number of chunks. If an application makes use of the request.read() method in an endpoint, it may be possible for an attacker to cause the server to spend a moderate amount of blocking CPU time (e.g. 1 second) while processing the request. This could potentially lead to DoS as the server would be unable to handle other requests during that time. This issue is fixed in version 3.13.3.

• Auf 3.0.1-1ubuntu0.1~esm6 aktualisieren
• Auf 3.11.16-1+deb13u1 aktualisieren
• Auf 3.11.16-1ubuntu0.1 aktualisieren
• Auf 3.13.3 aktualisieren
• Auf 3.13.3-1 aktualisieren
• Auf 3.8.1-4ubuntu0.2+esm2 aktualisieren
• Auf 3.8.4-1+deb12u2 aktualisieren
• Auf 3.9.1-1ubuntu0.1+esm2 aktualisieren

AIOHTTP vulnerable to denial of service through large payloads

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a request to be crafted in such a way that an AIOHTTP server's memory fills up uncontrollably during processing. If an application includes a handler that uses the Request.post() method, an attacker may be able to freeze the server by exhausting the memory. This issue is fixed in version 3.13.3.

• Auf 3.0.1-1ubuntu0.1~esm6 aktualisieren
• Auf 3.11.16-1+deb13u1 aktualisieren
• Auf 3.11.16-1ubuntu0.1 aktualisieren
• Auf 3.13.3 aktualisieren
• Auf 3.13.3-1 aktualisieren
• Auf 3.8.1-4ubuntu0.2+esm2 aktualisieren
• Auf 3.8.4-1+deb12u2 aktualisieren
• Auf 3.9.1-1ubuntu0.1+esm2 aktualisieren

AIOHTTP vulnerable to DoS when bypassing asserts

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow for an infinite loop to occur when assert statements are bypassed, resulting in a DoS attack when processing a POST body. If optimizations are enabled (-O or PYTHONOPTIMIZE=1), and the application includes a handler that uses the Request.post() method, then an attacker may be able to execute a DoS attack with a specially crafted message. This issue is fixed in version 3.13.3.

• Auf 3.11.16-1+deb13u1 aktualisieren
• Auf 3.11.16-1ubuntu0.1 aktualisieren
• Auf 3.13.3 aktualisieren
• Auf 3.13.3-1 aktualisieren
• Auf 3.8.1-4ubuntu0.2+esm2 aktualisieren
• Auf 3.8.4-1+deb12u2 aktualisieren
• Auf 3.9.1-1ubuntu0.1+esm2 aktualisieren

AIOHTTP Regex Mismatch Allows Unicode in ASCII-Only Protocol Fields

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below contain parser logic which allows non-ASCII decimals to be present in the Range header. There is no known impact, but there is the possibility that there's a method to exploit a request smuggling vulnerability. This issue is fixed in version 3.13.3.

• Auf 3.0.1-1ubuntu0.1~esm6 aktualisieren
• Auf 3.11.16-1+deb13u1 aktualisieren
• Auf 3.11.16-1ubuntu0.1 aktualisieren
• Auf 3.13.3 aktualisieren
• Auf 3.13.3-1 aktualisieren
• Auf 3.8.1-4ubuntu0.2+esm2 aktualisieren
• Auf 3.8.4-1+deb12u2 aktualisieren
• Auf 3.9.1-1ubuntu0.1+esm2 aktualisieren

AIOHTTP allows for a brute-force leak of internal static filepath components

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below enable an attacker to ascertain the existence of absolute path components through the path normalization logic for static files meant to prevent path traversal. If an application uses web.static() (not recommended for production deployments), it may be possible for an attacker to ascertain the existence of path components. This issue is fixed in version 3.13.3.

• Auf 3.0.1-1ubuntu0.1~esm6 aktualisieren
• Auf 3.11.16-1+deb13u1 aktualisieren
• Auf 3.11.16-1ubuntu0.1 aktualisieren
• Auf 3.13.3 aktualisieren
• Auf 3.13.3-1 aktualisieren
• Auf 3.8.1-4ubuntu0.2+esm2 aktualisieren
• Auf 3.8.4-1+deb12u2 aktualisieren
• Auf 3.9.1-1ubuntu0.1+esm2 aktualisieren

AIOHTTP's Unicode processing of header values could cause parsing discrepancies

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below of the Python HTTP parser may allow a request smuggling attack with the presence of non-ASCII characters. If a pure Python version of AIOHTTP is installed (i.e. without the usual C extensions) or AIOHTTP_NO_EXTENSIONS is enabled, then an attacker may be able to execute a request smuggling attack to bypass certain firewalls or proxy protections. This issue is fixed in version 3.13.3.

• Auf 3.11.16-1+deb13u1 aktualisieren
• Auf 3.11.16-1ubuntu0.1 aktualisieren
• Auf 3.13.3 aktualisieren
• Auf 3.13.3-1 aktualisieren
• Auf 3.8.1-4ubuntu0.2+esm2 aktualisieren
• Auf 3.8.4-1+deb12u2 aktualisieren
• Auf 3.9.1-1ubuntu0.1+esm2 aktualisieren

AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host's memory. This issue is fixed in version 3.13.3.

• Auf 3.11.16-1+deb13u1 aktualisieren
• Auf 3.11.16-1ubuntu0.1 aktualisieren
• Auf 3.13.3 aktualisieren
• Auf 3.13.3-1 aktualisieren
• Auf 3.8.4-1+deb12u2 aktualisieren

GraphQL IDOR allows authenticated user to delete workspace content of other users

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.8.1, the GraphQL mutation "WorkspacePopoverDeletionMutation" allows users to delete workspace-related objects such as dashboards and investigation cases. However, the mutation lacks proper authorization checks to verify ownership of the targeted resources. An attacker can exploit this by supplying an active UUID of another user. Since the API does not validate whether the requester owns the resource, the mutation executes successfully, resulting in unauthorized deletion of the entire workspace. Version 6.8.1 fixes the issue.

• Auf 6.8.1 aktualisieren

CVE-2025-67303

An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data. This was due to the application storing its files in an insufficiently protected location that was accessible via the web interface

• Auf 3.38 aktualisieren

Langflow Missing Authentication on Critical API Endpoints

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0.dev45, multiple critical API endpoints in Langflow are missing authentication controls. The issue allows any unauthenticated user to access sensitive user conversation data, transaction histories, and perform destructive operations including message deletion. This affects endpoints handling personal data and system operations that should require proper authorization. Version 1.7.0.dev45 contains a patch.

• Auf 0.7.1 aktualisieren
• Auf 1.7.1 aktualisieren

Arbitrary Code Execution in feast-dev/feast

A high-severity remote code execution vulnerability exists in feast-dev/feast version 0.53.0, specifically in the Kubernetes materializer job located at `feast/sdk/python/feast/infra/compute_engines/kubernetes/main.py`. The vulnerability arises from the use of `yaml.load(..., Loader=yaml.Loader)` to deserialize `/var/feast/feature_store.yaml` and `/var/feast/materialization_config.yaml`. This method allows for the instantiation of arbitrary Python objects, enabling an attacker with the ability to modify these YAML files to execute OS commands on the worker pod. This vulnerability can be exploited before the configuration is validated, potenti

• Auf 0.54.0 aktualisieren

Cowrie < 2.9.0 Unrestricted wget/curl Emulation Enables SSRF-Based DDoS Amplification

Cowrie versions prior to 2.9.0 contain a server-side request forgery (SSRF) vulnerability in the emulated shell implementation of wget and curl. In the default emulated shell configuration, these command emulations perform real outbound HTTP requests to attacker-supplied destinations. Because no outbound request rate limiting was enforced, unauthenticated remote attackers could repeatedly invoke these commands to generate unbounded HTTP traffic toward arbitrary third-party targets, allowing the Cowrie honeypot to be abused as a denial-of-service amplification node and masking the attacker’s true source address behind the honeypot’s IP.

• Auf 2.9.0 aktualisieren

CVE-2025-69277

libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren't in the main cryptographic group.

• Auf 1.0.18-1+deb12u1 aktualisieren
• Auf 1.0.18-1+deb13u1 aktualisieren
• Auf 1.0.18-1ubuntu0.22.04.1 aktualisieren
• Auf 1.0.18-1ubuntu0.24.04.1 aktualisieren
• Auf 1.0.18-1ubuntu0.25.10.1 aktualisieren
• Auf 1.0.18-2 aktualisieren
• Auf 1.24.0 aktualisieren
• Auf 1.6.2 aktualisieren
• Auf 2.5.0 aktualisieren
• Auf 3.6.1 aktualisieren

CBORDecoder reuse can leak shareable values across decode calls

cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) serialization format. Starting in version 3.0.0 and prior to version 5.8.0, whhen a CBORDecoder instance is reused across multiple decode operations, values marked with the shareable tag (28) persist in memory and can be accessed by subsequent CBOR messages using the sharedref tag (29). This allows an attacker-controlled message to read data from previously decoded messages if the decoder is reused across trust boundaries. Version 5.8.0 patches the issue.

• Auf 5.8.0 aktualisieren
• Auf 5.8.0-1 aktualisieren

Picklescan missing detection when calling pty.spawn

### Summary Using pty.spawn, which is a built-in python library function to execute arbitrary commands on the host system. ### Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to `pty.spawn` function in the `__reduce__` method. Then the victim attempts to use picklescan to scan the pickle file for issues and sees this - ``` ----------- SCAN SUMMARY ----------- Scanned files: 1 Infected files: 0 Dangerous globals: 0 ``` The victim proceeds to load the pickle file and execute attacker-injected arbitrary code. ### PoC ``` class PtyExploit: def __reduce__(self): return (pty.spawn

• Auf 0.0.33 aktualisieren