| Banks: Unsafe importlib.import_module of attacker-controlled Tool.import_path in CompletionExtension allows RCECVE-2026-61536 · GHSA-64VX-6H2C-RJH7 |
banksExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File OverwriteCVE-2026-33236 · GHSA-469J-VMHF-R6V7Version ranges need review. |
nltkLightspeed Core/lightspeed-core/lightspeed-stack-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| NLTK has a Path Traversal issueCVE-2026-0847 · GHSA-68J8-PQ59-FQGMVersion ranges need review. |
nltkLightspeed Core/lightspeed-core/lightspeed-stack-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| NLTK: Model-artifact APIs bypass pathsec and touch files outside allowed rootsCVE-2026-81726 · GHSA-8MGP-746C-J5XPVersion ranges need review. |
nltkExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different clientCVE-2026-118669 · GHSA-7984-QGVG-3J9C |
oauthlibConfidential Compute Attestation/openshift-sandboxed-containers/osc-podvm-builder-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| pyasn1 has quadratic-time denial of service in constructed string and indefinite-length ANY decodingCVE-2026-119195 · GHSA-9M75-VC3G-4X39 |
pyasn1Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| pyasn1 has quadratic-complexity denial of service in binary REAL decodingCVE-2026-119197 · GHSA-MM57-4V3P-RCHX |
pyasn1Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| pyasn1 has quadratic CPU use in schemaless BER/CER/DER container decodingCVE-2026-119194 · GHSA-FM9C-5RCF-2Q5P |
pyasn1Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| pyasn1 has quadratic CPU consumption in constructed BIT STRING decodingCVE-2026-119196 · GHSA-2QM8-X737-GMW5 |
pyasn1Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromiseCVE-2026-96641 · GHSA-4RM8-3HMM-39FGVersion ranges need review. |
pillowExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1CVE-2026-114501 · GHSA-654X-CWWV-5J9CVersion ranges need review. |
pillowExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoSCVE-2026-96637 · GHSA-G842-9RC4-69PWVersion ranges need review. |
pillowExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)CVE-2026-96636 · GHSA-P8HX-V2P6-RP84Version ranges need review. |
pillowExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Pillow: TarIO negative size field causes infinite CPU-spin loopCVE-2026-96642 · GHSA-3J72-P6QG-6XP7Version ranges need review. |
pillowExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic timeCVE-2026-96643 · GHSA-G4QV-2JXX-769HVersion ranges need review. |
pillowExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)CVE-2026-96644 · GHSA-9V9V-9QVF-H2HJVersion ranges need review. |
pillowExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| filelock: SoftReadWriteLock follows a lock tree swapped in after its first acquire and writes lock records into directories of the user running the lockCVE-2026-112941 · GHSA-WFHQ-Q4J2-C37M |
filelockAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
Low
|
Fix reported |
|
| LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requestsCVE-2026-118667 · GHSA-3FX2-CQW9-XR3C |
langgraph-sdklanggraph |
PyPIRed Hat |
Medium
|
Fix reported |
|
| filelock: StrictSoftFileLock and SoftReadWriteLock adopt a protocol directory another user created first, losing mutual exclusionCVE-2026-112911 · GHSA-9C4X-GM8V-WGC4 |
filelockAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| filelock: Symlink swap during SoftFileLock's writability check leaks whether a path exists and is writable by the lock takerCVE-2026-112912 · GHSA-9J6Q-WVJ5-JGJG |
filelockAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
Low
|
Fix reported |
|
