The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not being reproduceable and they argue this is not a valid vulnerability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | May 15, 2025 | Oct 16, 2022 |
| Freebsd | — | Upgrade py39-py | Apr 14, 2023 | Apr 9, 2023 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.2.3Upgrade Splunk Enterprise to version 9.1.6Upgrade Splunk Enterprise to version 9.3.1 | Sep 30, 2025 | Oct 16, 2022 |
| Suse | — | Upgrade python-pyUpgrade python3-py | Jan 27, 2023 | Oct 16, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub