https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 22:32:03 +0000 https://vulnerability.circl.lu/vuln/cve-2025-15367 <p><strong>Affected:</strong> Python Software Foundation CPython</p> <p>The poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters.</p> <p><strong>Affected:</strong> Python Software Foundation CPython</p> <p>The poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters.</p> https://vulnerability.circl.lu/vuln/cve-2025-15367 https://vulnerability.circl.lu/vuln/rhsa-2026:2128 <p>security update for python3</p> <p>security update for python3</p> https://vulnerability.circl.lu/vuln/rhsa-2026:2128 https://vulnerability.circl.lu/vuln/rhsa-2026:4943 <p>curl: libcurl: Curl out of bounds read for cookie path gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service cpython: Excessive read buffering DoS in http.client util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory cpython: IMAP command injection in user-controlled commands cpython: POP3 command injection in user-controlled commands openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation golang: net/url: Memory exhaustion in query parameter parsing in net/url openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in…</p> <p>curl: libcurl: Curl out of bounds read for cookie path gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service cpython: Excessive read buffering DoS in http.client util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory cpython: IMAP command injection in user-controlled commands cpython: POP3 command injection in user-controlled commands openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation golang: net/url: Memory exhaustion in query parameter parsing in net/url openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in…</p> https://vulnerability.circl.lu/vuln/rhsa-2026:4943