Python filelock, a platform-independent file locking library, has a vulnerability identified as CVE-2026-112939. The flaw affects multiple specific versions of the python-filelock package. The vulnerability has a medium severity rating with a CVSS score of 4.7, indicating limited impact. It requires local access with high attack complexity and low privileges, and it can cause integrity issues without affecting confidentiality or availability.
Python filelock versions including 2.0.11-1 through 3.32.2-1 contain a vulnerability identified as CVE-2026-112937. The flaw impacts the integrity of the file locking mechanism without affecting confidentiality. It has a medium severity score of 6.1. No public exploits or cloud service implications are reported.
Python filelock is a platform-independent file locking library. A vulnerability identified as CVE-2026-112936 affects multiple specific versions of python-filelock. The CVSS score is 6.1, indicating a medium severity issue with local attack vector, low complexity, requiring low privileges, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and low availability impact.
A medium severity vulnerability (CVE-2026-112935) affects the python-filelock package, a platform-independent file lock implementation for Python. The flaw impacts multiple specific versions of python-filelock. The CVSS score is 4.7, indicating limited attack vector and complexity but with potential integrity impact. No public exploits or cloud service involvement are reported.
The Python filelock library, a platform-independent file locking utility, has a vulnerability identified as CVE-2026-112934. This issue affects multiple specific versions of the python-filelock package. The vulnerability has a medium severity rating with a CVSS score of 6.1, indicating limited confidentiality impact but potential integrity loss and high availability impact. No public exploits or known active exploitation have been reported. The vulnerability requires local access with low privileges and does not require user interaction.
Python filelock, a platform-independent file locking library, has a vulnerability identified as CVE-2026-112915. The flaw affects multiple specific versions of the python-filelock package. The vulnerability has a medium severity rating with a CVSS score of 5.5, primarily impacting availability. No public exploits or active exploitation in the wild are reported. The vulnerability does not affect confidentiality or integrity but can cause denial of service conditions.
Python filelock, a platform-independent file locking library, has a medium severity vulnerability identified as CVE-2026-112914. The vulnerability affects multiple specific versions of the python-filelock package. The CVSS score is 5.3, indicating a moderate impact with low attack vector and high attack complexity. The vulnerability impacts confidentiality and integrity but does not affect availability. No public exploits or known active exploitation have been reported.
Python filelock is a platform-independent file lock library. A low severity vulnerability (CVE-2026-112912) affects multiple specific versions of this library. The vulnerability has a CVSS score of 2.5, indicating limited impact primarily on confidentiality with no impact on integrity or availability.
The Python filelock library, a platform-independent file locking utility, has a vulnerability identified as CVE-2026-112911. The flaw affects multiple specific versions of the library. The vulnerability has a medium severity rating with a CVSS score of 6.3, indicating a moderate risk. It involves a local attack vector requiring high attack complexity and low privileges, with no user interaction needed. The impact includes high integrity and availability damage but no confidentiality loss. There is no information about available patches or vendor advisories in the provided data.
Python filelock versions including 2.0.11-1 through 3.32.2-1 contain a vulnerability identified as CVE-2026-112909. The vulnerability affects platform-independent file locking functionality prior to version 4.2. It has a medium severity with a CVSS score of 6.1, indicating limited confidentiality impact but high integrity impact. No public exploits or known active exploitation have been reported. The vulnerability does not affect cloud services and no official patch or remediation details are provided in the input data.
Python filelock, a platform-independent file locking library, has a medium severity vulnerability identified as CVE-2026-112906. The vulnerability affects multiple specific versions of the python-filelock package. The CVSS score is 4.7, indicating a moderate impact primarily on integrity with no confidentiality or availability impact. No public exploits or known active exploitation have been reported. No patch or remediation details are provided in the available data.
CVE-2026-95168 is a high-severity vulnerability in the software 'thefuck' version 3.32 and several other specific versions. It allows a local attacker to execute arbitrary code with high impact on confidentiality, integrity, and availability. The vulnerability requires local access and low attack complexity without user interaction. Multiple specific versions are affected, but no patch or remediation information is provided.
CVE-2026-92162 is a path traversal vulnerability in Flatpak versions prior to 1.18.1. It affects systems with at least one OCI remote configured, allowing a malicious local user to trick the flatpak-system-helper process into creating root-owned directories and files outside the intended root directory. This vulnerability alone does not lead to privilege escalation but can contribute to local root escalation when combined with other vulnerabilities fixed in version 1.18.1. Systems without OCI remotes configured are not believed to be vulnerable. The issue is patched in Flatpak 1.18.1.
An incomplete cleanup vulnerability in Apache Tomcat affects TLS 1.3 connections, causing them to fail intermittently. This issue impacts Apache Tomcat versions from 11.0.0-M21 through 11.0.26, 10.1.25 through 10.1.60, and 9.0.90 through 9.0.122. Upgrading to versions 11.0.27, 10.1.61, or 9.0.123 resolves the problem.
An incomplete cleanup vulnerability in Apache Tomcat allows trailer information from a previous request to leak into a subsequent request. This affects Apache Tomcat versions from 11.0.0-M23 through 11.0.26, 10.1.27 through 10.1.60, and 9.0.92 through 9.0.122. Upgrading to versions 11.0.27, 10.1.61, or 9.0.123 resolves the issue.
A time-of-check time-of-use (TOCTOU) race condition vulnerability exists in Apache Tomcat's APR/Native connector when creating Unix domain sockets. This flaw allows an unauthorized local user to access the Unix domain socket. The issue affects Apache Tomcat versions from 9.0.47 through 9.0.122. The vulnerability was not addressed by the fix for CVE-2026-65183, which only covered the NIO connector. Users should upgrade to version 9.0.123 to resolve this vulnerability.
An Execution After Redirect (EAR) vulnerability exists in multiple versions of Apache Tomcat, including versions from 11.0.0-M1 through 11.0.26, 10.1.0-M1 through 10.1.60, 9.0.0.M1 through 9.0.122, and older EOL versions such as 8.5.0 through 8.5.100 and 7.0.0 through 7.0.109. The vulnerability allows execution of code after a redirect operation. Fixed versions are 11.0.27, 10.1.61, and 9.0.123. Users should upgrade to these or later versions to remediate the issue.
Apache Tomcat versions from 9.0.92 through 9.0.122, 10.1.22 through 10.1.60, and 11.0.0-M14 through 11.0.26 contain a 'Not Failing Securely' vulnerability related to FIPS mode activation failure in the OpenSSLLifecycleListener. If FIPS mode activation fails, Tomcat logs an error but continues operating in non-FIPS mode, potentially undermining security expectations. Fixed versions are 9.0.123, 10.1.61, and 11.0.27.
A buffer under-read vulnerability exists in Apache Tomcat 6 and 7 versions, allowing an attacker to cause a denial of service by triggering a large number of requests. The vulnerability has a CVSS 3.1 score of 9.1, indicating critical severity with high impact on confidentiality and availability. Multiple specific versions of Tomcat 6.0.37-1 through 7.0.52-1ubuntu0.14 are affected.