SecurityWeek

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.

Python closes critical TLS flaw tied to eMudhra keys in update

Python 3.15.2, 3.14.10, 3.13.18, 3.12.16 and 3.11.18 fix a critical vulnerability caused by compromised eMudhra certificates, ...
The Hacker News

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

Pillow 13.0.0 fixes EPS, JPEG, and TIFF flaws, including command execution paths involving Ghostscript and crafted image ...
Cybernews

eMudhra quits issuing trust certificates after blunder triggers Java and Python updates

Mudhra certificates may need replacement after weak keys pushed Java and Python into emergency updates. See which systems ...
CIOL

Anthropic Backs Python Security With $1.5 Million PSF Partnership

Anthropic has committed $1.5 million to the Python Software Foundation (PSF) under a two-year partnership aimed at strengthening security across Python’s core infrastructure and package ecosystem. The ...

A Critical Vulnerability in PHP. So, Is Python Safe? Thinking About the 'Free and Easy' Side and the Value of Commercial Software

The other day, I saw the news about a critical vulnerability in PHP, which made me think about it all over again.On October ...
techtarget

Boost SOC efficiency with Python security automation

Security operations center teams are looking for an edge amid budget constraints, staff shortages, high alert volumes, tool sprawl, fragmented data and sophisticated cyberattacks that require faster ...