Changes

2026-10

• 

  h11: h11 accepts some malformed Chunked-Encoding bodies

  PyPI · h11✕security
  Quote

  “h11 accepts some malformed Chunked-Encoding bodies”

  osv.dev ›
• 

  idna: Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

  PyPI · idna✕security
  Quote

  “Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix”

  osv.dev ›
• 

  jinja2: Jinja2 sandbox escape via string formatting

  PyPI · jinja2✕security
  Quote

  “Jinja2 sandbox escape via string formatting”

  osv.dev ›
• 

  jinja2: Jinja2 vulnerable to sandbox breakout through attr filter selecting format method

  PyPI · jinja2✕security
  Quote

  “Jinja2 vulnerable to sandbox breakout through attr filter selecting format method”

  osv.dev ›
• 

  jinja2: Regular Expression Denial of Service (ReDoS) in Jinja2

  PyPI · jinja2✕security
  Quote

  “Regular Expression Denial of Service (ReDoS) in Jinja2”

  osv.dev ›
• 

  jinja2: Jinja has a sandbox breakout through malicious filenames

  PyPI · jinja2✕security
  Quote

  “Jinja has a sandbox breakout through malicious filenames”

  osv.dev ›
• 

  jinja2: Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter

  PyPI · jinja2✕security
  Quote

  “Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter”

  osv.dev ›
• 

  jinja2: Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter

  PyPI · jinja2✕security
  Quote

  “Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter”

  osv.dev ›
• 

  jinja2: Jinja has a sandbox breakout through indirect reference to format method

  PyPI · jinja2✕security
  Quote

  “Jinja has a sandbox breakout through indirect reference to format method”

  osv.dev ›
• 

  mako: Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup

  PyPI · mako✕security
  Quote

  “Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup”

  osv.dev ›
• 

  mako: Mako: Path traversal via drive-letter URI on Windows in TemplateLookup

  PyPI · mako✕security
  Quote

  “Mako: Path traversal via drive-letter URI on Windows in TemplateLookup”

  osv.dev ›
• 

  mako: Mako: Path traversal via double-slash URI prefix in TemplateLookup

  PyPI · mako✕security
  Quote

  “Mako: Path traversal via double-slash URI prefix in TemplateLookup”

  osv.dev ›
• 

  mako: mako is vulnerable to Regular Expression Denial of Service

  PyPI · mako✕security
  Quote

  “mako is vulnerable to Regular Expression Denial of Service”

  osv.dev ›
• 

  py: py vulnerable to Regular Expression Denial of Service

  PyPI · py✕security
  Quote

  “py vulnerable to Regular Expression Denial of Service”

  osv.dev ›
• 

  pygments: Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching

  PyPI · pygments✕security
  Quote

  “Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching”

  osv.dev ›
• 

  pytest: pytest has vulnerable tmpdir handling

  PyPI · pytest✕security
  Quote

  “pytest has vulnerable tmpdir handling”

  osv.dev ›
• 

  python-dotenv: python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback

  PyPI · python-dotenv✕security
  Quote

  “python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback”

  osv.dev ›
• 

  python-multipart: Denial of service (DoS) via deformation `multipart/form-data` boundary

  PyPI · python-multipart✕security
  Quote

  “Denial of service (DoS) via deformation multipart/form-data boundary”

  osv.dev ›
• 

  python-multipart: python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service

  PyPI · python-multipart✕security
  Quote

  “python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service”

  osv.dev ›
• 

  python-multipart: python-multipart: Semicolon treated as querystring field separator enables parameter smuggling

  PyPI · python-multipart✕security
  Quote

  “python-multipart: Semicolon treated as querystring field separator enables parameter smuggling”

  osv.dev ›
• 

  python-multipart: python-multipart affected by Denial of Service via large multipart preamble or epilogue data

  PyPI · python-multipart✕security
  Quote

  “python-multipart affected by Denial of Service via large multipart preamble or epilogue data”

  osv.dev ›
• 

  python-multipart: python-multipart has Denial of Service via unbounded multipart part headers

  PyPI · python-multipart✕security
  Quote

  “python-multipart has Denial of Service via unbounded multipart part headers”

  osv.dev ›
• 

  python-multipart: python-multipart: Negative Content-Length in parse_form buffers the entire body in memory

  PyPI · python-multipart✕security
  Quote

  “python-multipart: Negative Content-Length in parse_form buffers the entire body in memory”

  osv.dev ›
• 

  python-multipart: python-multipart: Content-Disposition parameter smuggling via RFC 2231/5987 extended parameters

  PyPI · python-multipart✕security
  Quote

  “python-multipart: Content-Disposition parameter smuggling via RFC 2231/5987 extended parameters”

  osv.dev ›
• 

  python-multipart: Python-Multipart has Arbitrary File Write via Non-Default Configuration

  PyPI · python-multipart✕security
  Quote

  “Python-Multipart has Arbitrary File Write via Non-Default Configuration”

  osv.dev ›
• 

  requests: Requests vulnerable to .netrc credentials leak via malicious URLs

  PyPI · requests✕security
  Quote

  “Requests vulnerable to .netrc credentials leak via malicious URLs”

  osv.dev ›
• 

  requests: Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function

  PyPI · requests✕security
  Quote

  “Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function”

  osv.dev ›
• 

  sqlalchemy: SQLAlchemy is vulnerable to SQL Injection via group_by parameter

  PyPI · sqlalchemy✕security
  Quote

  “SQLAlchemy is vulnerable to SQL Injection via group_by parameter”

  osv.dev ›
• 

  sqlalchemy: SQLAlchemy vulnerable to SQL Injection via order_by parameter

  PyPI · sqlalchemy✕security
  Quote

  “SQLAlchemy vulnerable to SQL Injection via order_by parameter”

  osv.dev ›
• 

  starlette: Starlette has possible denial-of-service vector when parsing large files in multipart forms

  PyPI · starlette✕security
  Quote

  “Starlette has possible denial-of-service vector when parsing large files in multipart forms”

  osv.dev ›
• 

  starlette: Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS

  PyPI · starlette✕security
  Quote

  “Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS”

  osv.dev ›
• 

  starlette: Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks

  PyPI · starlette✕security
  Quote

  “Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks”

  osv.dev ›
• 

  starlette: Starlette Denial of service (DoS) via multipart/form-data

  PyPI · starlette✕security
  Quote

  “Starlette Denial of service (DoS) via multipart/form-data”

  osv.dev ›
• 

  starlette: Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname

  PyPI · starlette✕security
  Quote

  “Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname”

  osv.dev ›
• 

  starlette: Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows

  PyPI · starlette✕security
  Quote

  “Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows”

  osv.dev ›
• 

  starlette: Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`

  PyPI · starlette✕security
  Quote

  “Starlette: Arbitrary HTTP method dispatched to HTTPEndpoint attributes via getattr”

  osv.dev ›
• 

  urllib3: urllib3 streaming API improperly handles highly compressed data

  PyPI · urllib3✕security
  Quote

  “urllib3 streaming API improperly handles highly compressed data”

  osv.dev ›
• 

  urllib3: Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)

  PyPI · urllib3✕security
  Quote

  “Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)”

  osv.dev ›
• 

  urllib3: urllib3: HTTPS proxy TLS configuration may be ignored or overridden

  PyPI · urllib3✕security
  Quote

  “urllib3: HTTPS proxy TLS configuration may be ignored or overridden”

  osv.dev ›
• 

  urllib3: urllib3: Chunked Deflate streaming can enter an infinite loop

  PyPI · urllib3✕security
  Quote

  “urllib3: Chunked Deflate streaming can enter an infinite loop”

  osv.dev ›
• 

  urllib3: urllib3 allows an unbounded number of links in the decompression chain

  PyPI · urllib3✕security
  Quote

  “urllib3 allows an unbounded number of links in the decompression chain”

  osv.dev ›
• 

  urllib3: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation

  PyPI · urllib3✕security
  Quote

  “urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation”

  osv.dev ›
• 

  urllib3: urllib3: Sensitive headers forwarded across origins in proxied low-level redirects

  PyPI · urllib3✕security
  Quote

  “urllib3: Sensitive headers forwarded across origins in proxied low-level redirects”

  osv.dev ›
• 

  urllib3: urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory

  PyPI · urllib3✕security
  Quote

  “urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory”

  osv.dev ›
• 

  uv: uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised

  PyPI · uv✕security
  Quote

  “uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised”

  osv.dev ›
• 

  virtualenv: virtualenv: Xonsh activation literals depend on the script decoding codec

  PyPI · virtualenv✕security
  Quote

  “virtualenv: Xonsh activation literals depend on the script decoding codec”

  osv.dev ›
• 

  virtualenv: virtualenv: Deletion recovery can change a symlink target's mode

  PyPI · virtualenv✕security
  Quote

  “virtualenv: Deletion recovery can change a symlink target's mode”

  osv.dev ›
• 

  virtualenv: virtualenv: Downloaded wheel selection and caching precede verification

  PyPI · virtualenv✕security
  Quote

  “virtualenv: Downloaded wheel selection and caching precede verification”

  osv.dev ›
• 

  virtualenv: virtualenv: Generated files can follow existing destination links

  PyPI · virtualenv✕security
  Quote

  “virtualenv: Generated files can follow existing destination links”

  osv.dev ›
• 

  virtualenv: virtualenv Has TOCTOU Vulnerabilities in Directory Creation

  PyPI · virtualenv✕security
  Quote

  “virtualenv Has TOCTOU Vulnerabilities in Directory Creation”

  osv.dev ›
• 

  virtualenv: virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST

  PyPI · virtualenv✕security
  Quote

  “virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST”

  osv.dev ›
• 

  virtualenv: virtualenv: Bash prompt values can change meaning under older compatibility modes

  PyPI · virtualenv✕security
  Quote

  “virtualenv: Bash prompt values can change meaning under older compatibility modes”

  osv.dev ›
• 

  virtualenv: virtualenv activation scripts run code from a path that contains a placeholder name

  PyPI · virtualenv✕security
  Quote

  “virtualenv activation scripts run code from a path that contains a placeholder name”

  osv.dev ›
• 

  virtualenv: virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use

  PyPI · virtualenv✕security
  Quote

  “virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use”

  osv.dev ›
• 

  virtualenv: virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection

  PyPI · virtualenv✕security
  Quote

  “virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection”

  osv.dev ›
• 

  virtualenv: virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote

  PyPI · virtualenv✕security
  Quote

  “virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote”

  osv.dev ›
• 

  virtualenv: virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax

  PyPI · virtualenv✕security
  Quote

  “virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax”

  osv.dev ›
• 

  virtualenv: virtualenv: Builtin creation follows linked environment directories

  PyPI · virtualenv✕security
  Quote

  “virtualenv: Builtin creation follows linked environment directories”

  osv.dev ›
• 

  virtualenv: virtualenv: Pip seeding with download omits wheel digest verification

  PyPI · virtualenv✕security
  Quote

  “virtualenv: Pip seeding with download omits wheel digest verification”

  osv.dev ›
• 

  virtualenv: virtualenv: Seeded files retain permissions from an older cache

  PyPI · virtualenv✕security
  Quote

  “virtualenv: Seeded files retain permissions from an older cache”

  osv.dev ›