p PatchFirst

PatchFirst · Latest vulnerabilities

Python stack vulnerabilities · Page 59

Vulnerabilities published for Python in the last 30 days: 360. Listed in the KEV catalogue: 1.

RSS ↗ JSON ↗
Filter vulnerabilities
Python

Vulnerabilities: 7131

  1. CVE-2026-59886

    High · CVSS 7.5EPSS 0.62%Fix available

    pyasn1: Uncontrolled resource consumption when converting decoded REAL values

    pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER encoded REAL value only a few bytes long can carry a very large exponent, causing float conversion through prettyPrint(), str(), comparison, arithmetic, int(), or an explicit float() call to consume excessive CPU and memory and hang applications that decode untrusted ASN.1 data and then print, log, or compare decoded objects. This issue is fixed in version 0.6.4.

    pyasn1 pyasn1 pyasn1 pyasn1 pyasn1 pyasn1 pyasn1 pyasn1 pyasn1 pyasn1 pyasn1 pyasn1Operating systems Python
    • Update to 0.4.8-1ubuntu0.3
    • Update to 0.4.8-3+deb12u3
    • Update to 0.4.8-4ubuntu0.3
    • Update to 0.6.1-1+deb13u3
    • Update to 0.6.3-1ubuntu0.1
    • Update to 0.6.4
    • Update to 0.6.4-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. CVE-2026-54058

    High · CVSS 8.3EPSS 0.52%Fix available

    Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

    Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width, causing pixel access such as Image.tobytes(), getpixel, convert, or save to read beyond the mapped region and disclose adjacent process memory or fault. This issue is fixed in version 12.3.0.

    pillow pillow pillow pillow pillow pillow pillow pillow pillow pillow-python2 pillow pillowOperating systems Python
    • Update to 12.3.0
    • Update to 12.3.0-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  3. CVE-2026-59197

    High · CVSS 8.2EPSS 0.45%Fix available

    Pillow: Heap out-of-bounds write in Pillow `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`

    Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very large odd filter size because ImageFilter.RankFilter.filter() calls image.expand(size // 2, size // 2) before rank-filter size validation and ImagingExpand() computes output dimensions with unchecked signed int arithmetic. This issue is fixed in version 12.3.0.

    pillow pillow pillow pillow pillow pillow pillow pillow pillow pillow-python2 pillow pillowOperating systems Python
    • Update to 12.3.0
    • Update to 12.3.0-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  4. CVE-2026-59200

    High · CVSS 7.5EPSS 0.39%Fix available

    Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()

    Pillow is a Python imaging library. From 5.1.0 until 12.3.0, PdfParser.PdfStream.decode() in PIL/PdfParser.py calls zlib.decompress() with bufsize set to the PDF stream Length field without bounding the decompressed output size, allowing a crafted FlateDecode PDF stream to exhaust memory from a small file. This issue is fixed in version 12.3.0.

    pillow pillow pillow pillow pillow pillow pillow pillow pillow pillow-python2 pillow pillowOperating systems Python
    • Update to 12.3.0
    • Update to 12.3.0-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  5. CVE-2026-59198

    Medium · CVSS 6.5EPSS 0.31%Fix available

    Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images

    Pillow is a Python imaging library. From 5.2.0 until 12.3.0, Pillow's TGA RLE encoder reads past its packed row buffer when saving a mode 1 image with TGA RLE compression, allowing adjacent process heap bytes to be copied into the generated TGA file. This issue is fixed in version 12.3.0.

    pillow pillow pillow pillow pillow pillow pillow-python2 pillow pillow pillowOperating systems Python
    • Update to 10.2.0-1ubuntu1.3
    • Update to 12.1.1-2ubuntu1.3
    • Update to 12.3.0
    • Update to 12.3.0-1
    • Update to 7.0.0-4ubuntu0.9+esm1
    • Update to 9.0.1-1ubuntu0.5
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  6. CVE-2026-59205

    High · CVSS 7.5EPSS 0.39%Fix available

    Pillow: Controlled heap out-of-bounds write in `ImageCmsTransform.apply()` via output mode mismatch

    Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, imOut) API can trigger controlled native heap corruption when the caller supplies an output image whose mode does not match the transform's declared output mode. This issue is fixed in version 12.3.0.

    pillow pillow pillow pillow pillow pillow pillow pillow pillow pillow-python2 pillow pillowOperating systems Python
    • Update to 12.3.0
    • Update to 12.3.0-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  7. CVE-2026-59203

    Medium · CVSS 5.3EPSS 0.4%Fix available

    Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service

    Pillow is a Python imaging library. From 12.0.0 through 12.2.0, Pillow's EPS parser in PIL/EpsImagePlugin.py accepts a negative byte count in the %%BeginBinary directive, allowing a crafted EPS file to cause Image.open() to seek backwards to the same directive and parse it repeatedly in an infinite loop. This issue is fixed in version 12.3.0.

    pillow pillow pillow pillowOperating systems Python
    • Update to 12.3.0
    • Update to 12.3.0-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  8. CVE-2026-59199

    High · CVSS 7.5EPSS 0.39%Fix available

    Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow

    Pillow is a Python imaging library. Prior to 12.3.0, Pillow public image coordinate APIs can trigger a native heap out-of-bounds write when given coordinates near the signed 32-bit integer limits in Image.paste(), Image.crop(), or Image.alpha_composite(). This issue is fixed in version 12.3.0.

    pillow pillow pillow pillow pillow pillow pillow pillow pillow pillow-python2 pillow pillowOperating systems Python
    • Update to 12.3.0
    • Update to 12.3.0-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  9. CVE-2026-59204

    High · CVSS 8.7EPSS 0.39%Fix available

    Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service

    Pillow is a Python imaging library. From 8.2.0 through 12.2.0, src/libImaging/Jpeg2KDecode.c accumulates total_component_width across every tile in a JPEG2000 image instead of recomputing it per tile, allowing a crafted tiled JPEG2000 file to force substantially higher transient memory usage and trigger out-of-memory failures during decoding. This issue is fixed in version 12.3.0.

    pillow pillow pillow pillow pillow pillow pillow pillow pillow pillow-python2 pillow pillowOperating systems Python
    • Update to 12.3.0
    • Update to 12.3.0-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  10. CVE-2026-15736

    High · CVSS 8.3EPSS 0.38%Fix available

    Multiple SQL/DDL Injection and Arbitrary File Read Vulnerabilities in snowflake-sqlalchemy

    Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of user-supplied column identifiers in merge operations could allow SQL injection through attacker-controlled input keys. An attacker may be able to exploit this through request field names in a dynamic upsert endpoint, potentially enabling read access to data visible to the application's database role or modification of values within the same MERGE statement. Improper literal rendering of bound parameters when building certain Snowflake-specific table creation queries could allow SQL injection. An attacker may be able to explo

    snowflake sqlalchemy snowflake-sqlalchemyPython
    • Update to 1.11.0
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  11. CVE-2026-12482

    Low · CVSS 3.1EPSS 0.33%Fix available

    Path Traversal via Symlink Name Validation Bypass in keras-team/keras

    A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious tar archive that bypasses the `filter_safe_tarinfos` validation in `keras/src/utils/file_utils.py`. Specifically, symlink entries are not subjected to the same `is_path_in_dir` validation as regular file entries, allowing symlinks to be created outside the intended extraction directory. This can lead to symlink-based file read, file overwrite, or directory escape attacks. The issue is particularly impactful on Python 3.10 and 3.11, where `filter_safe_tarinfos` is the sole defense against tar path traversal. This vulnerability is distinct from CVE-2025-1

    keras-team/keras keras keras keras keras keras kerasOperating systems Python
    • Update to 3.12.3
    • Update to 3.15.0
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  12. GHSA-8f6j-263m-g72x

    Medium · CVSS 6.9Fix available

    Apple App Store Server Python Library: SignedDataVerifier accepts stale OCSP GOOD responses and can bypass certificate revocation checks

    ### Summary `SignedDataVerifier` attempts to perform online revocation checking when `enable_online_checks=True`, but its OCSP validation logic accepts stale `GOOD` responses as valid indefinitely. In `appstoreserverlibrary/signed_data_verifier.py`, `_ChainVerifier.check_ocsp_status()` verifies the OCSP response signature and CertID match, but never validates the freshness window carried by `producedAt`, `thisUpdate`, or `nextUpdate`. As a result, a previously valid signed OCSP `GOOD` response can be replayed after it is expired, and the library will still treat the certificate as good. If an App Store signing certificate or intermediate is

    app-store-server-libraryPython
    • Update to 3.1.2
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  13. GHSA-xf7x-x43h-rpqh

    High · CVSS 7.5Fix available

    json_repair: Circular JSON Schema `$ref` causes unbounded CPU DoS

    ## Circular JSON Schema `$ref` causes unbounded CPU DoS in `json_repair` ### Summary `SchemaRepairer.resolve_schema()` in `json_repair` follows JSON Schema `$ref` pointers in an unbounded `while` loop without any cycle detection. An attacker who can supply a schema containing a self-referencing `$ref` (e.g., via the demo Flask API or any application that passes untrusted input to `loads(..., schema=...)`), can cause a worker process to spin indefinitely on CPU, resulting in a complete denial of service. No authentication is required against the public demo API. The vulnerability is confirmed reproducible at CVSS 7.5 (High). ### Details `S

    json-repairPython
    • Update to 0.60.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  14. CVE-2026-62240

    High · CVSS 8.3EPSS 0.52%Fix available

    CrewAI < 1.15.1 SSRF Filter Bypass via HTTP Redirect in Scrape Tools

    CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validate_url function that performs one-shot DNS resolution and blocklist checks before returning the original URL unchanged. Attackers can bypass the security filter by supplying URLs that redirect to internal addresses or use DNS rebinding techniques to access internal services and cloud metadata endpoints.

    crewai crewai-toolsPython
    • Update to 1.15.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  15. GHSA-7xw9-549r-8jrc

    High · CVSS 8.5Fix available

    DIRAC: SQL injection and lack of access control in PilotManager service

    ### Details A number of the functions in PilotManager pass parameters directly through to the database layer, which then does not do any escaping on the parameters. For example setPilotStatus: https://github.com/DIRACGrid/DIRAC/blob/1738e7c6d2f31d26f1364255d9d2e87b4896c922/src/DIRAC/WorkloadManagementSystem/Service/PilotManagerHandler.py#L343-L349 https://github.com/DIRACGrid/DIRAC/blob/1738e7c6d2f31d26f1364255d9d2e87b4896c922/src/DIRAC/WorkloadManagementSystem/DB/PilotAgentsDB.py#L117 This won't accept multiple statements separated by a semicolon, but a carefully crafted set of parameters containing SQL escapes would likely be able to chan

    dirac dirac diracPython
    • Update to 8.0.79
    • Update to 9.0.22
    • Update to 9.1.10
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  16. CVE-2026-30762

    High · CVSS 7.5Fix available

    LightRAG: Hardcoded JWT Signing Secret Allows Authentication Bypass

    Subject: Security Vulnerability Report Hardcoded JWT Secret (CVE-2026-30762) Hi HKUDS team, I'm writing to report a security vulnerability I discovered in LightRAG v1.4.10. This has been assigned CVE-2026-30762 by MITRE. Vulnerability: Hardcoded JWT signing secret Type: Improper Authentication (CWE-287) Severity: High Attack Vector: Remote / Unauthenticated Summary: The file lightrag/api/config.py (line 397) uses a default JWT secret "lightrag-jwt-default-secret" when the TOKEN_SECRET environment variable is not set. The AuthHandler in lightrag/api/auth.py (lines 24-25) uses this secret to sign and verify tokens. An unauthenticated attack

    lightrag-hkuPython
    • Update to 1.4.13
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  17. CVE-2026-41041

    Critical · CVSS 9.1EPSS 0.6%Fix available

    Apache Gravitino: URL path injection via unencoded user-supplied identifiers in MCP REST client f-string URL construction, enabling path traversal to unintended API endpoints.

    URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 before 1.2.1. Users are recommended to upgrade to version 1.2.1, which fixes the issue.

    apache gravitino apache-gravitinoPython
    • Update to 1.2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  18. CVE-2026-49876

    Medium · CVSS 6.5EPSS 0.49%Fix available

    Apache Gravitino: Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs

    Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs. A vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 through 1.2.1. Users are recommended to upgrade to version 1.3.0, which fixes the issue.

    apache gravitino apache-gravitinoPython
    • Update to 1.3.0
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  19. CVE-2026-15529

    Medium · CVSS 5.3EPSS 0.44%Fix available

    yzhao062 pyod persistence.py pyod.utils.persistence.load deserialization

    A vulnerability was detected in yzhao062 pyod up to 3.6.1. Affected is the function pyod.utils.persistence.load of the file pyod/utils/persistence.py. Performing a manipulation of the argument path results in deserialization. The attack can be initiated remotely. Upgrading to version 3.6.2 is able to address this issue. It is recommended to apply a patch to fix this issue. The pull request to fix this issue requires some minor changes.

    pyod pyodPython
    • Update to 3.6.2
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  20. CVE-2026-56260

    High · CVSS 8.8EPSS 0.65%Fix available

    Crawl4AI - Arbitrary File Write via output_path Parameter

    Crawl4AI before 0.8.7 contains an arbitrary file write vulnerability in the Docker API server's /screenshot and /pdf endpoints. The output_path parameter accepts arbitrary filesystem paths without validation, allowing an attacker to supply absolute or path-traversal values to write to any location writable by the application's user, overwriting server files and causing denial of service.

    crawl4ai crawl4aiPython
    • Update to 0.8.7
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →