https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T15:16:27.907345+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2016-3953 CVE-2016-3953 2026-10-09T15:16:27.909088+00:00

The sample web application in web2py before 2.14.2 might allow remote attackers to execute arbitrary code via vectors involving use of a hardcoded encryption key when calling the session.connect function.

 https://cve.radiocsirt.org/vuln/ghsa-q2rq-qgcf-m22w GHSA-q2rq-qgcf-m22w — web2py remote code execution via hardcoded encryption key in session.connect function 2026-10-09T15:16:27.909136+00:00

Affected: PyPI: web2py

The sample web application in web2py before 2.14.2 might allow remote attackers to execute arbitrary code via vectors involving use of a hardcoded encryption key when calling the `session.connect` function.