https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T20:54:23.494735+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-05266 bdu:2024-05266 2026-10-21T20:54:23.502294+00:00 bdu:2024-05266 https://cve.radiocsirt.org/vuln/brew-sickchill-cve-2024-28397 BREW-sickchill-CVE-2024-28397 — js2py allows remote code execution 2026-10-21T20:54:23.502333+00:00

Affected: Homebrew: sickchill

An issue in the component `js2py.disable_pyimport()` of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call.

 https://cve.radiocsirt.org/vuln/cnvd-2024-29641 cnvd-2024-29641 2026-10-21T20:54:23.502368+00:00 cnvd-2024-29641 https://cve.radiocsirt.org/vuln/euvd-2026-4507 EUVD-2026-4507 2026-10-21T20:54:23.502383+00:00 EUVD-2026-4507 https://cve.radiocsirt.org/vuln/fkie_cve-2024-28397 fkie_cve-2024-28397 2026-10-21T20:54:23.502394+00:00

An issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call.

 https://cve.radiocsirt.org/vuln/ghsa-h95x-26f3-88hr GHSA-h95x-26f3-88hr — js2py allows remote code execution 2026-10-21T20:54:23.502415+00:00

Affected: PyPI: js2py

An issue in the component `js2py.disable_pyimport()` of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call.

 https://cve.radiocsirt.org/vuln/gsd-2024-28397 gsd-2024-28397 2026-10-21T20:54:23.502435+00:00 gsd-2024-28397 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14086-1 openSUSE-SU-2024:14086-1 — python310-Js2Py-0.74-3.1 on GA media 2026-10-21T20:54:23.502445+00:00

python310-Js2Py-0.74-3.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2026-1476 PYSEC-2026-1476 — js2py allows remote code execution 2026-10-21T20:54:23.502461+00:00

Affected: PyPI: js2py

An issue in the component `js2py.disable_pyimport()` of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call.

 https://cve.radiocsirt.org/vuln/suse-su-2024:2272-1 SUSE-SU-2024:2272-1 — Security update for python-Js2Py 2026-10-21T20:54:23.502477+00:00

Security update for python-Js2Py

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-28397 UBUNTU-CVE-2024-28397 2026-10-21T20:54:23.502491+00:00

Affected: Ubuntu:24.04:LTS: python-cloudscraper, Ubuntu:25.10: python-cloudscraper, Ubuntu:26.10: python-cloudscraper, Ubuntu:26.04:LTS: python-cloudscraper

An issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call.