p PatchFirst

PatchFirst · Свежие уязвимости

Python: уязвимости стека · Страница 6

За последние 30 дней в Python опубликовано уязвимостей: 312; в каталоге KEV: 0.

RSS ↗ JSON ↗
Фильтры уязвимостей
Python

Уязвимостей: 7029

  1. CVE-2026-113723

    Высокий · CVSS 7.1EPSS 0,18%Есть исправление

    virtualenv: Bash prompt values can change meaning under older compatibility modes

    virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, caller-supplied prompt text can become executable syntax in the bash activation prompt. An attacker must influence the value passed to virtualenv, and a user must subsequently activate the environment and draw the prompt. This vulnerability is fixed in 21.14.9.

    virtualenv python-virtualenv python-virtualenv python-virtualenv virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenvОперационные системы Python
    • Обновитесь до 21.14.9
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  2. CVE-2026-113722

    Высокий · CVSS 7.8EPSS 0,29%Есть исправление

    virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax

    virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, virtualenv's ScriptMakerCustom and pip pass an incompletely quoted interpreter path to distlib ScriptMaker when generating POSIX console scripts. When the path contains a space or produces a shebang longer than 127 bytes, distlib emits a /bin/sh wrapper whose double-quoted interpreter path still expands command substitutions and backticks. An attacker who influences the environment destination can therefore execute commands with the user's privileges when the user later runs a generated launcher; environment creation and activation do not trigger the com

    virtualenv python-virtualenv python-virtualenv python-virtualenv virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenvОперационные системы Python
    • Обновитесь до 21.14.9
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  3. CVE-2026-113721

    Средний · CVSS 4.5EPSS 0,14%Есть исправление

    virtualenv: Generated files can follow existing destination links

    virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, ViaTemplateActivator._generate() removes an existing output only when Path.exists() is true, allowing a dangling symlink to survive and redirect generated activation content, while PyEnvCfg.write() opens pyvenv.cfg without first replacing an existing symbolic or hard link. Another local account that prepares final entries inside the destination can therefore cause environment creation to create or overwrite files outside the requested tree with constrained virtualenv-generated content and the invoking user's permissions. The destination parent must remai

    virtualenv python-virtualenv python-virtualenv python-virtualenv virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenvОперационные системы Python
    • Обновитесь до 21.14.9
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  4. CVE-2026-113720

    Средний · CVSS 4.4EPSS 0,13%Есть исправление

    virtualenv: Seeded files retain permissions from an older cache

    virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the app-data copy seeder uses shutil.copy() to copy cached package files into later environments, causing cached source modes to override the current run's umask. A cache populated under a permissive umask can therefore produce files writable by another local account in a later traversable environment, allowing package code such as pip/__init__.py to be modified and executed by the environment owner. The attacker cannot force the earlier umask, and a private destination parent prevents access. This issue is fixed in version 21.14.9.

    virtualenv python-virtualenv python-virtualenv python-virtualenv virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenvОперационные системы Python
    • Обновитесь до 21.14.9
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  5. CVE-2026-113715

    Низкий · CVSS 2EPSS 0,24%Есть исправление

    virtualenv: Venv configuration readback can reinterpret path boundaries

    virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the stdlib venv creator reads generated pyvenv.cfg with str.splitlines() and merges parsed keys over virtualenv's selected configuration. An untrusted caller who influences the destination pathname can include a line-boundary character such as U+2028 to inject keys including home and include-system-site-packages, causing path data to change configuration structure before final output. Setting include-system-site-packages to true weakens environment isolation, while an altered home can change which standard-library files the interpreter loads if the attac

    virtualenv python-virtualenv python-virtualenv python-virtualenv virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenvОперационные системы Python
    • Обновитесь до 21.14.9
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  6. CVE-2026-113719

    Средний · CVSS 4.5EPSS 0,14%Есть исправление

    virtualenv: Seed replacement does not contain metadata deletion paths

    virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, PipInstall._uninstall_previous_version() accepts existing seed-package metadata and _uninstall_dist() joins entries from top_level.txt and RECORD to site-packages without checking containment. When a reused destination contains distribution metadata influenced by another account, relative traversal, absolute entries, or linked parents can cause app-data reseeding to delete files outside the environment or the environment root with the invoking user's permissions, provided that user has deletion rights over the named paths. The deletion occurs during envi

    virtualenv python-virtualenv python-virtualenv python-virtualenv virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenvОперационные системы Python
    • Обновитесь до 21.14.9
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  7. CVE-2026-113718

    Высокий · CVSS 7.1EPSS 0,18%Есть исправление

    virtualenv: Xonsh activation literals depend on the script decoding codec

    virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, POSIX xonsh activation quote() uses repr() to write printable non-ASCII prompt or destination data into UTF-8 activate.xsh, while xonsh can read that script using $XONSH_ENCODING. Under a legacy multibyte codec such as GBK or Big5, a UTF-8 trail byte can consume the backslash before an adjacent quote, allowing the literal to close and attacker-influenced statements to execute when the user sources the generated script. This issue is fixed in version 21.14.9.

    virtualenv python-virtualenv python-virtualenv python-virtualenv virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenvОперационные системы Python
    • Обновитесь до 21.14.9
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  8. GHSA-hq85-5cpj-mr62

    Без оценкиЕсть исправление

    uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised

    By default, uv verifies TLS connections against a vendored copy of the `webpki-root-certs` bundle. Versions before 0.13.4 include the `emSign ECC Root CA - G3` root. Eight eMudhra intermediate CA certificates that chain to that root have compromised private keys, and the CA has revoked them. An attacker with one of the compromised keys can issue certificates that uv accepts for any hostname, and can be used to issue certificates to enable MITM attacks. uv 0.13.4 removes the root from its vendored bundle, following `webpki-root-certs` 1.0.10. Upgrade to 0.13.4 or later.

    uvPython
    • Обновитесь до 0.13.4
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  9. GHSA-6q48-6c7w-9gw2

    Без оценкиЕсть исправление

    certifi bundles emSign root CAs with compromised intermediate CA keys

    Certifi versions before 2026.10.18 include the `emSign ECC Root CA - G3` root certificate in their bundled CA store. Eight eMudhra intermediate CA certificates that chain to this root have compromised private keys and the CA has revoked them. An attacker with one of the compromised keys can issue valid-looking certificates for any hostname. If the attacker is also on-path, they can intercept or modify TLS traffic from clients that trust the certifi bundle. Examples include `requests`, `urllib3` and `pip`, and the Python.org macOS installer. Certifi 2026.10.18 removed all emSign roots from the bundle. Certifi 2026.10.19 restored the emSign

    certifiPython
    • Обновитесь до 2026.10.19
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  10. CVE-2026-113717

    Низкий · CVSS 2.3EPSS 0,29%Есть исправление

    virtualenv: Pip seeding with download omits wheel digest verification

    virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, PipInvoke.get_pip_install_cmd() handles --seeder pip --download by calling get_wheel(download=False) and then allowing pip to consult the configured index, bypassing virtualenv's download_wheel() and verify_wheel_digest() path. When virtualenv's default-index PyPI digest comparison remains enabled, an index candidate matching the bundled package and version can therefore be selected without comparison to PyPI SHA-256 metadata. Explicit custom-index settings already opt out of that comparison and remain outside this verification-bypass claim; the demonstr

    virtualenv python-virtualenv python-virtualenv python-virtualenv virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenvОперационные системы Python
    • Обновитесь до 21.14.9
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  11. CVE-2026-113716

    Средний · CVSS 4.5EPSS 0,14%Есть исправление

    virtualenv: Builtin creation follows linked environment directories

    virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the builtin creator calls ensure_dir() for executable, library, and package directories, and ensure_dir() accepts an existing symlink to a directory because exists() follows it. Interpreter creation, seed installation, and activation generation then write through the linked parent outside the requested destination when another local account prepared the tree and the invoking user can access the target. The --clear option removes the planted tree first, while ordinary creation reaches it; arbitrary attacker-selected output bytes are not established. This

    virtualenv python-virtualenv python-virtualenv python-virtualenv virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenvОперационные системы Python
    • Обновитесь до 21.14.9
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  12. CVE-2026-113714

    Низкий · CVSS 2.3EPSS 0,22%Есть исправление

    virtualenv: Downloaded wheel selection and caching precede verification

    virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, download_wheel() writes package-index downloads directly into the reusable wheel/house cache before selecting a verification target from pip's textual Saved output. With default-index digest comparison enabled, a controlled package index can inject a misleading Saved line through a discarded link's data-requires-python attribute; this forged-line variant also requires knowledge of an absolute path to the genuine bundled wheel. The wrong path can then be hashed, while a digest mismatch leaves the rejected archive in the cache for later selection without v

    virtualenv python-virtualenv python-virtualenv python-virtualenv virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenvОперационные системы Python
    • Обновитесь до 21.14.9
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  13. CVE-2026-113713

    Средний · CVSS 4.4EPSS 0,14%Есть исправление

    virtualenv: Temporary app-data can leave dangling seed package links

    virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when creation finishes. The environment-variable and configuration-file forms of symlink_app_data can enable this state even though the command-line flag is disabled for temporary app-data. The resulting environment depends on a cache pathname that its owner no longer controls. This issue is fixed in version 21.14.10.

    virtualenv python-virtualenv python-virtualenv python-virtualenv virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenv python-virtualenvОперационные системы Python
    • Обновитесь до 21.14.10
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  14. CVE-2026-112940

    Высокий · CVSS 7.1EPSS 0,19%Есть исправление

    filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files

    filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock let SQLite reopen the database and side files by name; on POSIX systems an attacker with rename access in a non-sticky parent can swap those names to cause overwrite or unlink operations, while a writable adjacent hot journal is additionally required for attacker-chosen content overwrites. This issue is fixed in version 4.2.1.

    filelock python-filelock python-filelock python-filelock filelock python-filelock python-filelock python-filelock python-filelock python-filelock python-filelockОперационные системы Python
    • Обновитесь до 4.2.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  15. CVE-2026-112937

    Средний · CVSS 6.1EPSS 0,16%Есть исправление

    filelock: ReadWriteLock on the hard-link route deletes any directory another user renames onto its .filelock-* link directory name

    filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, ReadWriteLock can remove a randomized .filelock-* private-hard-link directory during cleanup, allowing another local user with rename access in a non-sticky parent to observe a live name or forge a dead-owner sweep name and rename a sibling directory onto it for deletion. This issue is fixed in version 4.2.1.

    filelock python-filelock python-filelock python-filelock filelock python-filelock python-filelock python-filelock python-filelock python-filelock python-filelockОперационные системы Python
    • Обновитесь до 4.2.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  16. CVE-2026-112914

    Средний · CVSS 5.3EPSS 0,16%Есть исправление

    filelock: SoftFileLock stale-break restore follows a swapped-in symbolic link and hard-links a file of the user running the lock into the lock directory

    filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftFileLock can restore a stale marker by name after moving it aside, allowing another local user with rename access in a non-sticky lock directory to swap in a symbolic link and, on a runtime that follows the link and a same-filesystem target, make the lock user hard-link one of its files into the lock directory. This issue is fixed in version 4.2.1.

    filelock python-filelock python-filelock python-filelock filelock python-filelock python-filelock python-filelock python-filelock python-filelock python-filelockОперационные системы Python
    • Обновитесь до 4.2.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  17. CVE-2026-112906

    Средний · CVSS 4.7EPSS 0,21%Есть исправление

    filelock: SoftFileLock evicts a fresh lock file whose watched age another local user's pre-dated file passed on through inode reuse

    filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftFileLock versions from 4.1.0 can reuse a stale observation when an attacker pre-dates and removes its own marker, at least two lock-user processes are waiting, coarse or matching modification times preserve the observation, and an honest contender creates a fresh marker on the reused inode, causing that live marker to be removed as stale. This issue is fixed in version 4.2.1.

    filelock python-filelock python-filelock python-filelock filelock python-filelock python-filelock python-filelock python-filelock python-filelock python-filelockОперационные системы Python
    • Обновитесь до 4.2.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  18. CVE-2026-112901

    Средний · CVSS 6.9EPSS 0,42%Есть исправление

    Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes

    Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnerable to regular-expression denial of service. In XbmImageFile._open, when an application calls Image.open() on a small crafted XBM file, XbmImagePlugin applies a backtracking expression to the attacker-controlled header before image dimensions are accepted, stalling a worker for minutes and denying service. This issue is fixed in version 13.0.0.

    pillow pillow pillow pillow pillow pillow pillow pillow pillow pillow-python2 pillow pillowОперационные системы Python
    • Обновитесь до 13.0.0
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  19. CVE-2026-112900

    Критический · CVSS 9.2EPSS 1,06%Публичный эксплойтЕсть исправление

    Pillow: Argument Injection in Ghostscript call, potentially leading into RCE

    Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input. EpsImagePlugin.Ghostscript passes a caller-controlled input filename after -f without converting it to a safe absolute path, so a name beginning with a hyphen can be interpreted as a Ghostscript option. An attacker who controls the filename can inject Ghostscript arguments. Arbitrary command execution specifically requires a leading @ argument-file filename and control of the referenced text file containing additional Ghostscript arguments; the reported chain reproduces with the default -dSAFER invoc

    pillow pillow pillow pillow pillow pillow pillow pillow pillow pillow-python2 pillow pillowОперационные системы Python
    • Обновитесь до 13.0.0
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  20. CVE-2026-112898

    Средний · CVSS 6.9EPSS 0,39%Есть исправление

    Pillow: Image.quantize() with empty palette leaks uninitialized stack memory

    Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack memory when Image.quantize() uses an empty palette. ImagingPaletteCacheUpdate() leaves a local cache array uninitialized when the palette has zero entries, and the conversion path emits those bytes as output pixel indices. An attacker who controls the palette image can obtain stack contents from a returned PNG or GIF. This can disclose addresses and stack-canary data without an out-of-bounds access, memory corruption, or process crash. This issue is fixed in version 13.0.0.

    pillow pillow pillow pillow pillow pillow pillow pillow pillow pillow-python2 pillow pillowОперационные системы Python
    • Обновитесь до 13.0.0
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →