d086db8 · scanned 2026-10-30 07:35 UTC
PyPI331affects this code · P0
Werkzeug safe_join() allows Windows special device names
werkzeug→ 3.1.9Get these as pull requests
affects this code · P0
cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing
cryptography→ 50.0.0affects this code · P0
certifi bundles emSign root CAs with compromised intermediate CA keys
certifi→ 2026.10.18affects this code · P0
filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break
filelock→ 4.2.1affects this code · P0
urllib3: HTTPS proxy TLS configuration may be ignored or overridden
urllib3→ 2.8.0affects this code · P0
uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised
uv→ 0.13.4affects this code · P0
virtualenv: Xonsh activation literals depend on the script decoding codec
virtualenv→ 21.14.9