RHSA-2026:82371

PyJWT is a Python implementation of JSON Web Token standards.

A flaw was found in GLib.

PyJWT is a Python implementation of JSON Web Token standards.

fsspec is a specification and Python implementation framework for filesystem interfaces.

PyJWT is a Python implementation of JSON Web Token standards.

PyJWT is a Python implementation of JSON Web Token standards.

A flaw was found in GLib.

A double free issue has been identified in libarchive's RAR5 reader.

PyJWT is a Python implementation of JSON Web Token standards.

PyJWT is a Python implementation of JSON Web Token standards.

PyJWT is a Python implementation of JSON Web Token standards.

PyJWT is a Python implementation of JSON Web Token standards.

Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in load_checkpoint_in_model and load_checkpoint_and_dispatch functions that fail to sanitize weight_map entries from sharded checkpoint index…

Datasets through 5.0.0, fixed in commit f989ef9, contains a path traversal vulnerability in folder-based dataset builders where the file_name metadata field is not properly validated before being joined to the dataset di…

A flaw was found in xdgmime.

Multidict is an implementation of a multidict data structure.

PyJWT is a Python implementation of JSON Web Token standards.

HTTPX2 is a next generation HTTP client for Python.

vLLM is an inference and serving engine for large language models.

PyJWT is a Python implementation of JSON Web Token standards.

vLLM is an inference and serving engine for large language models.

vLLM is an inference and serving engine for large language models.

vLLM is an inference and serving engine for large language models.

PyJWT is a Python implementation of JSON Web Token standards.

vLLM is an inference and serving engine for large language models.

A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib.

PyJWT is a Python implementation of JSON Web Token standards.

FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdec_asf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF strea…

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange.

A flaw was found in GLib.

A flaw was found in GLib.

FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declar…

tarfile.extractall() with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored at a deeper name than the hardlink itself.

PyJWT is a Python implementation of JSON Web Token standards.

HTTPX2 is a next generation HTTP client for Python.

urllib3 is an HTTP client library for Python.

Vim is an open source, command line text editor.

FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious byt…

urllib3 is an HTTP client library for Python.

Vim is an open source, command line text editor.

Vim is an open source, command line text editor.

SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malici…

Vim is an open source, command line text editor.

Vim is an open source, command line text editor.

Vim is an open source, command line text editor.

A flaw was found in GLib.

Vim is an open source, command line text editor.

acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to esc…

urllib3 is an HTTP client library for Python.

HTTPX2 is a next generation HTTP client for Python.

FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution in…

urllib3 is an HTTP client library for Python.

urllib3 is an HTTP client library for Python.

PyJWT is a Python implementation of JSON Web Token standards.

A flaw was found in GLib.

Vim is an open source, command line text editor.

Vim is an open source, command line text editor.

SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attackers to crash the process by supplying a crafted database with a malformed FTS5 leaf page.

vLLM is an inference and serving engine for large language models.

Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-password comparison path in modules/pam_userdb/pam_userdb.c that allows a local or network-adjacent attacke…

Tesseract is an open source OCR engine.

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.

vLLM is an inference and serving engine for large language models.

HTTPX2 is a next generation HTTP client for Python.

Vim is an open source, command line text editor.

HTTPX2 is a next generation HTTP client for Python.

Vim is an open source, command line text editor.

vLLM is an inference and serving engine for large language models.

Vim is an open source, command line text editor.

A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files.