A 15-year-old Python vulnerability remains unpatched on hundreds of thousands of open source repositories, causing concern for supply chain risks, according to new research by Trellix. Kasimir Schulz, ...

The Python Software Foundation (PSF) has rushed out Python 3.9.2 and 3.8.8 to address two notable security flaws, including one that is remotely exploitable but in practical terms can only be used to ...

PSF urges users to update systems to Python 3.8.8 or 3.9.2. (Source: PSF) The Python Software Foundation is sending updates for Python 3.9.2 and 3.8.8 to address critical security vulnerabilities, ...

Threat actors are exploiting CVE-2026-58138, a critical-severity remote code execution vulnerability in Orkes Conductor.

The Python standard library ipaddress also suffers from the critical IP address validation vulnerability identical to the flaw that was reported in the "netmask" library earlier this year. The ...

Let the OSS Enterprise newsletter guide your open source journey! Sign up here. Google today announced it has extended its Open Source Vulnerabilities (OSV) database to incorporate data from ...

Telegram fixed a zero-day vulnerability in its Windows desktop application that could be used to bypass security warnings and automatically launch Python scripts. Over the past few days, rumors have ...

In the latest supply chain attack, an unknown threat actor has created a malicious Python package that appears to be a software development kit (SDK) for a well-known security client from SentinelOne.