Python

Everything Patch Herald has reported about Python: 2 stories, newest first. Part of our Vulnerabilities coverage.

Critical joserfc Flaw in Versions Before 1.7.4 Lets Attackers Forge Signatures

A critical vulnerability in the Python library joserfc allows unauthenticated payload injection. A fix is available in version 1.7.4 for affected systems.

Oct 15, 2026

Vulnerabilities

CVE-2026-107378: CairoSVG Fixes CVSS 8.7 DoS Bug in Versions Before 2.9.1

A high-severity bug in CairoSVG allows small SVG files to consume excessive CPU time, causing denial-of-service for rendering services.

Oct 9, 2026