Fifteen-year-old N-day Python tarfile module vulnerability puts software supply chain under the microscope. Cybersecurity company Trellix announced Wednesday that a known Python vulnerability puts 350 ...

The Python Software Foundation (PSF) has rushed out Python 3.9.2 and 3.8.8 to address two notable security flaws, including one that is remotely exploitable but in practical terms can only be used to ...

Let the OSS Enterprise newsletter guide your open source journey! Sign up here. Google today announced it has extended its Open Source Vulnerabilities (OSV) database to incorporate data from ...

The Python standard library ipaddress also suffers from the critical IP address validation vulnerability identical to the flaw that was reported in the "netmask" library earlier this year. The ...

Security firm Novee has revealed Cordyceps as a class of exploitable CI/CD vulnerabilities across open-source repositories ...

IBM and Red Hat have launched Lightwell to automate vulnerability remediation across enterprise open-source software ...

In the latest supply chain attack, an unknown threat actor has created a malicious Python package that appears to be a software development kit (SDK) for a well-known security client from SentinelOne.

SAN FRANCISCO, CA -- February 20, 2013 -- nCircle, the leader in information risk and security performance management solutions, today announced that IP360&trade users can now create custom ...