https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T05:48:38.007579+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:6712 ALSA-2023:6712 — Moderate: python-wheel security update 2026-10-04T05:48:38.059430+00:00

Affected: AlmaLinux:9: python3-wheel, AlmaLinux:9: python3-wheel-wheel

Wheel is the reference implementation of the Python wheel packaging standard, as defined in PEP 427.

Security Fix(es):

* python-wheel: remote attackers can cause denial of service via attacker controlled input to wheel cli (CVE-2022-40898)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-08101 bdu:2023-08101 2026-10-04T05:48:38.059501+00:00 bdu:2023-08101 https://cve.radiocsirt.org/vuln/brew-bzt-cve-2022-40898 BREW-bzt-CVE-2022-40898 — pypa/wheel vulnerable to Regular Expression denial of service (ReDoS) 2026-10-04T05:48:38.059519+00:00

Affected: Homebrew: bzt

Python Packaging Authority (PyPA) Wheel is a reference implementation of the Python wheel packaging standard. Wheel 0.37.1 and earlier are vulnerable to a Regular Expression denial of service via attacker controlled input to the wheel cli. The vulnerable regex is used to verify the validity of Wheel file names. This has been patched in version 0.38.1.

 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0272 certfr-2023-avi-0272 — De multiples vulnérabilités ont été découvertes dans les produits <span class="textit">IBM</span>. Elles permettent à u… 2026-10-04T05:48:38.059541+00:00 certfr-2023-avi-0272 https://cve.radiocsirt.org/vuln/euvd-2026-230114 EUVD-2026-230114 2026-10-04T05:48:38.059557+00:00 EUVD-2026-230114 https://cve.radiocsirt.org/vuln/fkie_cve-2022-40898 fkie_cve-2022-40898 2026-10-04T05:48:38.059568+00:00

An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.

 https://cve.radiocsirt.org/vuln/ghsa-qwmp-2cf2-g9g6 GHSA-qwmp-2cf2-g9g6 — pypa/wheel vulnerable to Regular Expression denial of service (ReDoS) 2026-10-04T05:48:38.059588+00:00

Affected: PyPI: wheel

Python Packaging Authority (PyPA) Wheel is a reference implementation of the Python wheel packaging standard. Wheel 0.37.1 and earlier are vulnerable to a Regular Expression denial of service via attacker controlled input to the wheel cli. The vulnerable regex is used to verify the validity of Wheel file names. This has been patched in version 0.38.1.

 https://cve.radiocsirt.org/vuln/gsd-2022-40898 gsd-2022-40898 2026-10-04T05:48:38.059608+00:00 gsd-2022-40898 https://cve.radiocsirt.org/vuln/msrc_cve-2022-40898 msrc_CVE-2022-40898 — An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a de… 2026-10-04T05:48:38.059618+00:00 msrc_CVE-2022-40898 https://cve.radiocsirt.org/vuln/oesa-2023-1904 OESA-2023-1904 — python-wheel security update 2026-10-04T05:48:38.059633+00:00

Affected: openEuler:20.03-LTS-SP1: python-wheel, openEuler:20.03-LTS-SP3: python-wheel, openEuler:22.03-LTS: python-wheel, openEuler:22.03-LTS-SP1: python-wheel, openEuler:22.03-LTS-SP2: python-wheel

A built-package format for Python. A wheel is a ZIP-format archive with a specially formatted filename and the .whl extension. It is designed to contain all the files for a PEP 376 compatible install in a way that is very close to the on-disk format. Security Fix(es): An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.(CVE-2022-40898)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12645-1 openSUSE-SU-2024:12645-1 — python310-ciscoconfparse-1.7.7-1.1 on GA media 2026-10-04T05:48:38.059659+00:00

python310-ciscoconfparse-1.7.7-1.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2022-43017 PYSEC-2022-43017 2026-10-04T05:48:38.059674+00:00

Affected: PyPI: wheel

An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.

 https://cve.radiocsirt.org/vuln/rhsa-2023:6793 RHSA-2023:6793 — Red Hat Security Advisory: rh-python38-python security update 2026-10-04T05:48:38.059691+00:00

python: tarfile module directory traversal pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py python-wheel: remote attackers can cause denial of service via attacker controlled input to wheel cli python: CPU denial of service via inefficient IDNA decoder python-cryptography: memory corruption via immutable objects python: urllib.parse url blocklisting bypass python-requests: Unintended leak of Proxy-Authorization header python: TLS handshake bypass

 https://cve.radiocsirt.org/vuln/rlsa-2023:6712 RLSA-2023:6712 — Moderate: python-wheel security update 2026-10-04T05:48:38.059714+00:00

Affected: Rocky Linux:9: python-wheel

Wheel is the reference implementation of the Python wheel packaging standard, as defined in PEP 427.

Security Fix(es):

* python-wheel: remote attackers can cause denial of service via attacker controlled input to wheel cli (CVE-2022-40898)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.3 Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/suse-su-2023:0088-2 SUSE-SU-2023:0088-2 — Security update for python-wheel 2026-10-04T05:48:38.059736+00:00

Security update for python-wheel

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-40898 UBUNTU-CVE-2022-40898 2026-10-04T05:48:38.059749+00:00

Affected: Ubuntu:Pro:14.04:LTS: python-pip, Ubuntu:Pro:14.04:LTS: wheel, Ubuntu:Pro:16.04:LTS: python-pip, Ubuntu:Pro:16.04:LTS: wheel, Ubuntu:18.04:LTS: python-pip, Ubuntu:18.04:LTS: wheel, Ubuntu:20.04:LTS: python-pip, Ubuntu:20.04:LTS: wheel, Ubuntu:22.04:LTS: python-pip, Ubuntu:22.04:LTS: wheel

An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1424 WID-SEC-W-2023-1424 — Xerox FreeFlow Print Server für Solaris: Mehrere Schwachstellen 2026-10-04T05:48:38.059777+00:00

Ein Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.