Python

4 posts tagged with “Python”

CVE-2026-76832: Agno PythonTools Path Traversal Escapes base_dir
cvesecurityvulnerability

CVE-2026-76832: Agno PythonTools Path Traversal Escapes base_dir

How to fix CVE-2026-76832: upgrade agno to 2.3.24 or later (current PyPI 2.9.0). PythonTools path traversal can read, write, or run files outside base_dir.

Aug 19, 2026
Read
BREAKING: CVE-2026-76850 - LMDeploy Pickle RCE in Disaggregated Serving
cvesecurityvulnerability

BREAKING: CVE-2026-76850 - LMDeploy Pickle RCE in Disaggregated Serving

How to fix CVE-2026-76850: upgrade InternLM lmdeploy to 0.16.0. Unauthenticated pickle RCE in disaggregated serving. Affects >=0.9.2 and <0.16.0.

Aug 19, 2026
Read
BREAKING: CVE-2026-74764 - Pandora TAR Path Traversal Enables Arbitrary File Write
cvesecurityvulnerability

BREAKING: CVE-2026-74764 - Pandora TAR Path Traversal Enables Arbitrary File Write

CVE-2026-74764 is a CVSS 10.0 path traversal in Pandora TAR extraction that lets untrusted archives write outside the analysis directory. v1.12.5 is affected; deploy the upstream fix.

Aug 16, 2026
Read
CVE-2026-9318: tablib Stored XSS via HTML Export Dataset Title
cvesecurityvulnerability

CVE-2026-9318: tablib Stored XSS via HTML Export Dataset Title

tablib, a Python tabular data library with over 147 million PyPI downloads, contains a stored cross-site scripting vulnerability in its HTML export functionality. Attackers can embed JavaScript payloads in dataset titles that execute when the exported HTML file is opened in a browser. Fixed in version 3.10.0.

Aug 12, 2026
Read