Sweet offers free HTTP2Shell virtual patching amid claimed attacks
Sweet says exploitation attempts hit 88% of monitored environments and is giving any organization sensors for 30 days.
58
Product
Python
- Mentions · 7d4
- Mentions · 30d12
- All mentions14
- First seenSep 1, 2026
- Last mentioned2d ago
Timeline
14 articles · newest firstSweet offers free HTTP2Shell virtual patching amid claimed attacks
The offer covers non-customers for 30 days; Sweet reports attempts in 88% of monitored environments.
58
Brotli flaw CVE-2026-111497 can crash systems or run code; no attacks seen
OpenAI Codex Security found the Google library bug, Node.js disclosed it on October 21, and dependents shipped emergency patches.
72
Microsoft ships emergency .NET fixes for Brotli flaw CVE-2026-111497
The CVSS 8.1 buffer overflow can disclose data, crash processes, or raise privileges; working exploits exist but attacks are not confirmed.
74
http2shell claimed as RCE in Node, Python, and more
The Hacker News item only shows a title plus 49 points and 10 comments, with no versions or exploit status.
58
Python users urged to prefer system stores after eMudhra CA incident
The reply says distribution pip and requests should use the system certifi store.
38
Python developer urges packages to stop vendoring CA roots
The reply says distribution ca-certificates should be the default, with certifi used as a dependency only when necessary.
18
Python 3.15.1, 3.14.9 and 3.13.17 are released
The oss-security note only links a Python discussion announcement and does not list changes or CVEs.
18
Python users pointed to eMudhra emSign CA certificate incident
The forwarded note only cites a Python discussion statement and a comment, without describing the certificate impact.
36
Hello Python 3.15, goodbye 3.10, and now I can use 3.11
Python 3.15 adds explicit lazy imports, and Simon Willison drops Python 3.10 support for his tools.
5
Profiling web-edit with Python 3.15: flame graphs and source heatmaps
Simon Willison profiles the web-edit app using Python 3.15 flame graphs and source heatmaps.
8
Python 3.15.0 added to actions/python-versions
Python 3.15.0 is now available in GitHub Actions python-versions for CI test matrices.
6
USN-8744-1: Python vulnerabilities
Ubuntu issued USN-8744-1 fixing CVE-2026-3644, a Python http.cookies content-injection flaw, plus a pyexpat recursion DoS across six Ubuntu LTS releases.
22
Python 3.15.0 candidate 2 is here!
Python 3.15.0 release candidate 2 arrives, locking changes to bug fixes ahead of the final October release.
5
Related CVEs
by mentions- CVE-2026-11149783%9.2Buffer overflow in Google Brotli decoder 1.0.3–1.2.0
- CVE-2026-3644<1%6.0The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete
Appears with
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.