Python filelock versions including 2.0.11-1 through 3.32.2-1 contain a vulnerability identified as CVE-2026-112937. The flaw impacts the integrity of the file locking mechanism without affecting confidentiality. It has a medium severity score of 6.1. No public exploits or cloud service implications are reported.
Python filelock is a platform-independent file locking library. A vulnerability identified as CVE-2026-112936 affects multiple specific versions of python-filelock. The CVSS score is 6.1, indicating a medium severity issue with local attack vector, low complexity, requiring low privileges, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and low availability impact.
A medium severity vulnerability (CVE-2026-112935) affects the python-filelock package, a platform-independent file lock implementation for Python. The flaw impacts multiple specific versions of python-filelock. The CVSS score is 4.7, indicating limited attack vector and complexity but with potential integrity impact. No public exploits or cloud service involvement are reported.
The Python filelock library, a platform-independent file locking utility, has a vulnerability identified as CVE-2026-112934. This issue affects multiple specific versions of the python-filelock package. The vulnerability has a medium severity rating with a CVSS score of 6.1, indicating limited confidentiality impact but potential integrity loss and high availability impact. No public exploits or known active exploitation have been reported. The vulnerability requires local access with low privileges and does not require user interaction.
Python filelock, a platform-independent file locking library, has a vulnerability identified as CVE-2026-112915. The flaw affects multiple specific versions of the python-filelock package. The vulnerability has a medium severity rating with a CVSS score of 5.5, primarily impacting availability. No public exploits or active exploitation in the wild are reported. The vulnerability does not affect confidentiality or integrity but can cause denial of service conditions.
Python filelock, a platform-independent file locking library, has a medium severity vulnerability identified as CVE-2026-112914. The vulnerability affects multiple specific versions of the python-filelock package. The CVSS score is 5.3, indicating a moderate impact with low attack vector and high attack complexity. The vulnerability impacts confidentiality and integrity but does not affect availability. No public exploits or known active exploitation have been reported.
Python filelock is a platform-independent file lock library. A low severity vulnerability (CVE-2026-112912) affects multiple specific versions of this library. The vulnerability has a CVSS score of 2.5, indicating limited impact primarily on confidentiality with no impact on integrity or availability.
The Python filelock library, a platform-independent file locking utility, has a vulnerability identified as CVE-2026-112911. The flaw affects multiple specific versions of the library. The vulnerability has a medium severity rating with a CVSS score of 6.3, indicating a moderate risk. It involves a local attack vector requiring high attack complexity and low privileges, with no user interaction needed. The impact includes high integrity and availability damage but no confidentiality loss. There is no information about available patches or vendor advisories in the provided data.
Python filelock versions including 2.0.11-1 through 3.32.2-1 contain a vulnerability identified as CVE-2026-112909. The vulnerability affects platform-independent file locking functionality prior to version 4.2. It has a medium severity with a CVSS score of 6.1, indicating limited confidentiality impact but high integrity impact. No public exploits or known active exploitation have been reported. The vulnerability does not affect cloud services and no official patch or remediation details are provided in the input data.
CVE-2026-95168 is a high-severity vulnerability in the software 'thefuck' version 3.32 and several other specific versions. It allows a local attacker to execute arbitrary code with high impact on confidentiality, integrity, and availability. The vulnerability requires local access and low attack complexity without user interaction. Multiple specific versions are affected, but no patch or remediation information is provided.
An incomplete cleanup vulnerability in Apache Tomcat affects TLS 1.3 connections, causing them to fail intermittently. This issue impacts Apache Tomcat versions from 11.0.0-M21 through 11.0.26, 10.1.25 through 10.1.60, and 9.0.90 through 9.0.122. Upgrading to versions 11.0.27, 10.1.61, or 9.0.123 resolves the problem.
An incomplete cleanup vulnerability in Apache Tomcat allows trailer information from a previous request to leak into a subsequent request. This affects Apache Tomcat versions from 11.0.0-M23 through 11.0.26, 10.1.27 through 10.1.60, and 9.0.92 through 9.0.122. Upgrading to versions 11.0.27, 10.1.61, or 9.0.123 resolves the issue.
A time-of-check time-of-use (TOCTOU) race condition vulnerability exists in Apache Tomcat's APR/Native connector when creating Unix domain sockets. This flaw allows an unauthorized local user to access the Unix domain socket. The issue affects Apache Tomcat versions from 9.0.47 through 9.0.122. The vulnerability was not addressed by the fix for CVE-2026-65183, which only covered the NIO connector. Users should upgrade to version 9.0.123 to resolve this vulnerability.
An Execution After Redirect (EAR) vulnerability exists in multiple versions of Apache Tomcat, including versions from 11.0.0-M1 through 11.0.26, 10.1.0-M1 through 10.1.60, 9.0.0.M1 through 9.0.122, and older EOL versions such as 8.5.0 through 8.5.100 and 7.0.0 through 7.0.109. The vulnerability allows execution of code after a redirect operation. Fixed versions are 11.0.27, 10.1.61, and 9.0.123. Users should upgrade to these or later versions to remediate the issue.
Apache Tomcat versions from 9.0.92 through 9.0.122, 10.1.22 through 10.1.60, and 11.0.0-M14 through 11.0.26 contain a 'Not Failing Securely' vulnerability related to FIPS mode activation failure in the OpenSSLLifecycleListener. If FIPS mode activation fails, Tomcat logs an error but continues operating in non-FIPS mode, potentially undermining security expectations. Fixed versions are 9.0.123, 10.1.61, and 11.0.27.
A buffer under-read vulnerability exists in Apache Tomcat 6 and 7 versions, allowing an attacker to cause a denial of service by triggering a large number of requests. The vulnerability has a CVSS 3.1 score of 9.1, indicating critical severity with high impact on confidentiality and availability. Multiple specific versions of Tomcat 6.0.37-1 through 7.0.52-1ubuntu0.14 are affected.
An incorrect object recycling and re-use vulnerability exists in Apache Tomcat versions 6.0.37-1, 6.0.39-1 and related builds, as well as several 7.0.x versions up to 7.0.52-1ubuntu0.14. This vulnerability could allow an unauthenticated remote attacker to cause a denial of service and potentially impact confidentiality due to improper handling of recycled objects.
CVE-2026-101296 is a critical vulnerability in Apache Tomcat 6 and 7 versions that involves a missing critical step in the authentication process. This flaw allows an attacker to potentially bypass authentication controls, leading to high-impact security risks. The vulnerability has a CVSS 4.0 base score of 9.1, indicating critical severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. It affects multiple specific versions of Tomcat 6.0.37 through 7.0.52, including various Ubuntu package builds. No public exploits or known in-the-wild exploitation have been reported yet. No patch or remediation information is provided in the available data, so patch status is not confirmed.
CVE-2026-113399 is a vulnerability in the mozjs52 JavaScript engine related to incorrect boundary conditions in the SVG component. This flaw was addressed and fixed in Firefox version 158.0.1 and Thunderbird 158.0.1. The vulnerability has a medium severity impact as assessed by the source data. There are no known exploits in the wild for this issue. The vendor advisory confirms the fix and provides no indication that further mitigation steps are required beyond updating to the fixed versions.
CVE-2026-113470 is a cryptographic vulnerability in the security block-lists, allow-lists, and other state components of Mozilla Firefox. It relates to compromised intermediate eMudhra certificates that were blocked via OneCRL and distributed through RemoteSettings. The update ensures clients block these compromised certificates even if RemoteSettings is disabled or unavailable. The vulnerability has a medium CVSS score of 5.4 and affects multiple Firefox versions including ESR and standard releases.