RHSA-2026:92449

PyJWT is a Python implementation of JSON Web Token standards.

A flaw was found in GLib.

PyJWT is a Python implementation of JSON Web Token standards.

Hydra is a framework for elegantly configuring complex applications.

PyJWT is a Python implementation of JSON Web Token standards.

PyJWT is a Python implementation of JSON Web Token standards.

PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiato…

A flaw was found in GLib.

PyJWT is a Python implementation of JSON Web Token standards.

PyJWT is a Python implementation of JSON Web Token standards.

PyJWT is a Python implementation of JSON Web Token standards.

PyJWT is a Python implementation of JSON Web Token standards.

A flaw was found in xdgmime.

Multidict is an implementation of a multidict data structure.

PyJWT is a Python implementation of JSON Web Token standards.

HTTPX2 is a next generation HTTP client for Python.

vLLM is an inference and serving engine for large language models.

PyJWT is a Python implementation of JSON Web Token standards.

vLLM is an inference and serving engine for large language models.

vLLM is an inference and serving engine for large language models.

vLLM is an inference and serving engine for large language models.

OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+.

PyJWT is a Python implementation of JSON Web Token standards.

vLLM is an inference and serving engine for large language models.

A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib.

PyJWT is a Python implementation of JSON Web Token standards.

FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdec_asf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF strea…

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange.

A flaw was found in GLib.

A flaw was found in GLib.

FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declar…

tarfile.extractall() with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored at a deeper name than the hardlink itself.

PyJWT is a Python implementation of JSON Web Token standards.

HTTPX2 is a next generation HTTP client for Python.

urllib3 is an HTTP client library for Python.

Vim is an open source, command line text editor.

FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious byt…

urllib3 is an HTTP client library for Python.

Vim is an open source, command line text editor.

Vim is an open source, command line text editor.

SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malici…

Vim is an open source, command line text editor.

Vim is an open source, command line text editor.

Vim is an open source, command line text editor.

A flaw was found in GLib.

Vim is an open source, command line text editor.

acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to esc…

urllib3 is an HTTP client library for Python.

FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution in…

urllib3 is an HTTP client library for Python.

Hydra is a framework for elegantly configuring complex applications.

Hydra is a framework for elegantly configuring complex applications.

urllib3 is an HTTP client library for Python.

Werkzeug is a comprehensive WSGI web application library.

PyJWT is a Python implementation of JSON Web Token standards.

A flaw was found in GLib.

Vim is an open source, command line text editor.

Vim is an open source, command line text editor.

OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+.

SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attackers to crash the process by supplying a crafted database with a malformed FTS5 leaf page.

vLLM is an inference and serving engine for large language models.

Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-password comparison path in modules/pam_userdb/pam_userdb.c that allows a local or network-adjacent attacke…

Tesseract is an open source OCR engine.

vLLM is an inference and serving engine for large language models.

Vim is an open source, command line text editor.

HTTPX2 is a next generation HTTP client for Python.

pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels.

Vim is an open source, command line text editor.

vLLM is an inference and serving engine for large language models.

Vim is an open source, command line text editor.

A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files.