https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:29:26.542573+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2019:3335 ALSA-2019:3335 — Moderate: python27:2.7 security and bug fix update 2026-10-02T15:29:27.854547+00:00

Affected: AlmaLinux:8: python-psycopg2-doc, AlmaLinux:8: python2-Cython, AlmaLinux:8: python2-PyMySQL, AlmaLinux:8: python2-attrs, AlmaLinux:8: python2-chardet, AlmaLinux:8: python2-coverage, AlmaLinux:8: python2-dns, AlmaLinux:8: python2-docs, AlmaLinux:8: python2-docs-info, AlmaLinux:8: python2-docutils and 17 more

Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing.

Security Fix(es):

* numpy: crafted serialized object passed in numpy.load() in pickle python module allows arbitrary code execution (CVE-2019-6446)

* python: CRLF injection via the query part of the url passed to urlopen() (CVE-2019-9740)

* python: CRLF injection via the path part of the url passed to urlopen() (CVE-2019-9947)

* python: Undocumented local_file protocol allows remote attackers to bypass protection mechanisms (CVE-2019-9948)

* python-urllib3: CRLF injection due to not encoding the '\r\n' sequence leading to possible attack on internal service (CVE-2019-11236)

* python-urllib3: Certification mishandle when error should be thrown (CVE-2019-11324)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2019-02105 bdu:2019-02105 2026-10-02T15:29:27.854655+00:00 bdu:2019-02105 https://cve.radiocsirt.org/vuln/bell-cve-2019-11324 Withdrawn: BELL-CVE-2019-11324 — CVE-2019-11324 does not affect BellSoft software 2026-10-02T15:29:27.854673+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/brew-ansible-cve-2019-11324 BREW-ansible-CVE-2019-11324 — Improper Certificate Validation in urllib3 2026-10-02T15:29:27.854689+00:00

Affected: Homebrew: ansible

The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use of the `ssl_context`, `ca_certs`, or `ca_certs_dir` argument.

 https://cve.radiocsirt.org/vuln/certfr-2022-avi-267 certfr-2022-avi-267 — De multiples vulnérabilités ont été découvertes dans Juniper Networks Junos Space. Elles permettent à un attaquant de p… 2026-10-02T15:29:27.854711+00:00 certfr-2022-avi-267 https://cve.radiocsirt.org/vuln/euvd-2026-54331 EUVD-2026-54331 2026-10-02T15:29:27.854726+00:00 EUVD-2026-54331 https://cve.radiocsirt.org/vuln/fkie_cve-2019-11324 fkie_cve-2019-11324 2026-10-02T15:29:27.854737+00:00

The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use of the ssl_context, ca_certs, or ca_certs_dir argument.

 https://cve.radiocsirt.org/vuln/ghsa-mh33-7rrq-662w GHSA-mh33-7rrq-662w — Improper Certificate Validation in urllib3 2026-10-02T15:29:27.854757+00:00

Affected: PyPI: urllib3

The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use of the `ssl_context`, `ca_certs`, or `ca_certs_dir` argument.

 https://cve.radiocsirt.org/vuln/gsd-2019-11324 gsd-2019-11324 2026-10-02T15:29:27.854777+00:00 gsd-2019-11324 https://cve.radiocsirt.org/vuln/msrc_cve-2019-11324 msrc_CVE-2019-11324 — The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is diffe… 2026-10-02T15:29:27.854788+00:00 msrc_CVE-2019-11324 https://cve.radiocsirt.org/vuln/opensuse-su-2019:2131-1 openSUSE-SU-2019:2131-1 — Security update for python-urllib3 2026-10-02T15:29:27.854805+00:00

Security update for python-urllib3

 https://cve.radiocsirt.org/vuln/pysec-2019-133 PYSEC-2019-133 2026-10-02T15:29:27.854821+00:00

Affected: PyPI: urllib3

The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use of the ssl_context, ca_certs, or ca_certs_dir argument.

 https://cve.radiocsirt.org/vuln/rhba-2020:2785 RHBA-2020:2785 — Red Hat Bug Fix Advisory: OpenShift Container Platform 4.4.11 packages update 2026-10-02T15:29:27.854840+00:00

python-urllib3: CRLF injection due to not encoding the '\r\n' sequence leading to possible attack on internal service python-urllib3: Certification mishandle when error should be thrown

 https://cve.radiocsirt.org/vuln/suse-su-2019:2300-1 SUSE-SU-2019:2300-1 — Security update for python-urllib3 2026-10-02T15:29:27.854858+00:00

Security update for python-urllib3

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-11324 UBUNTU-CVE-2019-11324 2026-10-02T15:29:27.854873+00:00

Affected: Ubuntu:18.04:LTS: python-urllib3

The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use of the ssl_context, ca_certs, or ca_certs_dir argument.