| filelock: SoftReadWriteLock follows a lock tree swapped in after its first acquire and writes lock records into directories of the user running the lockCVE-2026-112941 · GHSA-WFHQ-Q4J2-C37M |
filelockAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
کم
|
اصلاح گزارش شده |
|
| filelock: StrictSoftFileLock and SoftReadWriteLock adopt a protocol directory another user created first, losing mutual exclusionCVE-2026-112911 · GHSA-9C4X-GM8V-WGC4 |
filelockAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| filelock: Symlink swap during SoftFileLock's writability check leaks whether a path exists and is writable by the lock takerCVE-2026-112912 · GHSA-9J6Q-WVJ5-JGJG |
filelockAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
کم
|
اصلاح گزارش شده |
|
| filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable markerCVE-2026-112939 · GHSA-RFPC-QCW5-3PC4 |
filelockAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock pathCVE-2026-112909 · GHSA-69HJ-F68J-2879 |
filelockAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeoutCVE-2026-112915 · GHSA-CWQR-HH33-GH44 |
filelockAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| filelock: SoftReadWriteLock holder refresh writes through a hard link and hangs on a named pipe that another local user renames over its recordCVE-2026-112934 · GHSA-FJ95-FR6C-H845 |
filelockAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| filelock: SoftFileLock stale-lock break removes a live lock file on a reused inode number and admits two holdersCVE-2026-112935 · GHSA-FQ56-3CX3-FJXP |
filelockAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| filelock: ReadWriteLock follows a symlink at the lock path into SQLiteCVE-2026-112936 · GHSA-J8F7-RJXC-MR56 |
filelockAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| filelock: SoftFileLock stale-break restore follows a swapped-in symbolic link and hard-links a file of the user running the lock into the lock directoryCVE-2026-112914 · GHSA-CRV4-6MHJ-J5JH |
filelockAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| filelock: SoftFileLock evicts a fresh lock file whose watched age another local user's pre-dated file passed on through inode reuseCVE-2026-112906 · GHSA-2G95-WG33-C5X2 |
filelockAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookiesCVE-2026-111749 · GHSA-GX76-C99X-2C96 |
aiohttpExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
PyPIRed Hat |
کم
|
اصلاح گزارش شده |
|
| AnyIO run_process/open_process ignores extra_groups and can retain parent supplementary groupsCVE-2026-63349 · GHSA-3W57-8XMC-8V26بازه‌ها نیاز به بررسی دارند. |
anyioAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Hugging Face Transformers downloads custom generation code before trust consentCVE-2026-80047 · GHSA-X9R9-C232-4Q39بازه‌ها نیاز به بررسی دارند. |
transformersLightspeed Core/lightspeed-core/lightspeed-stack-rhel9 |
PyPIRed Hat |
زیاد
|
اصلاح اعلام نشده |
|
| AIOHTTP: HTTP request smuggling via WebSocket upgradeCVE-2026-69243 · GHSA-MFX4-HV73-Q22Vبازه‌ها نیاز به بررسی دارند. |
aiohttpExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 |
PyPIRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflateCVE-2026-59881 · GHSA-MQ44-7P77-Q5H7بازه‌ها نیاز به بررسی دارند. |
aiohttpExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 |
PyPIRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)CVE-2026-69244 · GHSA-CQ5V-8Q36-5273بازه‌ها نیاز به بررسی دارند. |
aiohttpExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 |
PyPIRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| pip: Path traversal in console_scripts/gui_scripts entry point names allows installing scripts outside of target directoryCVE-2026-8643 · GHSA-WF93-45JW-7689بازه‌ها نیاز به بررسی دارند. |
pipExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 |
PyPIRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| aiohttp: CRLF injection in multipart headersCVE-2026-50269 · GHSA-M6QW-4CW2-HM4Mبازه‌ها نیاز به بررسی دارند. |
aiohttpExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 |
PyPIRed Hat |
کم
|
اصلاح گزارش شده |
|
| aiohttp: Unread Compressed Request Bodies Bypass client_max_size During CleanupCVE-2026-54278 · GHSA-G3CQ-J2XW-WF74بازه‌ها نیاز به بررسی دارند. |
aiohttpExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 |
PyPIRed Hat |
متوسط
|
اصلاح گزارش شده |
|
