Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in `keras/src/utils/file_utils.py`. The functions `filter_safe_tarinfos()` and `filter_safe_zipinfos()` validate archive …

▾ Twilightkeras · kerasEPSS 0.56%via OSV

MAL-2026-5545None

3mo ago

Malicious code in acme-widget-layout-utils (PyPI)

▾ Sunlitacme-widget-layout-utils · acme-widget-layout-utilsvia OSV

CVE-2026-48045Medium· 6.5

3mo ago

python-zeroconf: Unbounded TC-deferred queue allows LAN-local memory exhaustion via spoofed-source flood

▾ Sunlitzeroconf · zeroconfEPSS 0.37%via GHSA

CVE-2026-10143High· 7.5

3mo ago

kafka-python: kafka-python: Denial of Service via excessive SCRAM authentication iteration count (CVE-2026-10143)

A flaw was found in kafka-python. A malicious or machine-in-the-middle broker could exploit a denial-of-service vulnerability during SCRAM authentication. By providing an excessively large iteration count, the broker can cause the client's…

▾ TwilightRed Hat · Red Hat Quay 3.12EPSS 0.52%via CSAF

CVE-2026-10142High· 7.5

3mo ago

kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in the protocol parser that allows a malicious broker or machine-i…

kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in the protocol parser that allows a malicious broker or machine-in-the-middle attacker to exhaust memory or hang connections by sending a crafted 4-byte frame length…

▾ Twilightkafka-python · kafka-pythonEPSS 0.35%via OSV

CVE-2026-42563High· 8.0

3mo ago

dulwich: Dulwich: Arbitrary code execution via malicious Git file paths during merge (CVE-2026-42563)

A flaw was found in Dulwich, a pure-Python implementation of Git file formats and protocols. An attacker can exploit this vulnerability by crafting malicious file paths within an untrusted Git branch. When a victim merges this branch, the …

▾ TwilightRed Hat · Red Hat Ansible Automation Platform 2EPSS 0.80%via CSAF

CVE-2026-42305High· 8.8

3mo ago

dulwich: Dulwich: Remote Code Execution via Malicious Git Repository (CVE-2026-42305)

A flaw was found in Dulwich, a pure-Python implementation of the Git file formats and protocols. A remote attacker could exploit this vulnerability by enticing a user on a Windows system to clone or check out a specially crafted malicious …

▾ TwilightRed Hat · Red Hat OpenShift AI 3.4EPSS 0.85%via CSAF

MAL-2026-5531None

3mo ago

dulwich: Dulwich: Arbitrary code execution via crafted Git submodules (CVE-2026-52726)

A flaw was found in Dulwich, a pure-Python implementation of Git file formats and protocols. This vulnerability allows a remote attacker to achieve arbitrary code execution by crafting a malicious Git submodule. When a user clones or updat…

▾ SunlitRed Hat · Red Hat Enterprise Linux 8EPSS 0.68%via CSAF

CVE-2026-52902Medium· 4.7

3mo ago