Skip to content

/

ZeroHour

ZeroHour aggregates public sources — security and AI press, vendor advisories, NVD, CISA KEV, FIRST EPSS, leak-site trackers and Have I Been Pwned — and classifies them with AI. Summaries can be wrong: read the original. All times are UTC.

News CVEs Incidents Tags Daily brief Traffic Sources RSS & API Kiosk Health Sitemap

Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

#python — news, CVEs and analysis · ZeroHour

today 43 visits · 56 views · 7 reads·all time 17K views

06:59 UTC· 6m ago

Tag

#python

6 stories this week · 17 this month · 19 in 6 months · mostly security

stories per day · 30 days

Related#open-source 4 #datasette 3 #patch 3 #archive-extraction 2 #cloudflare 2 #cpython 2 #developer-tools 2 #hugging-face 2 #llm 2 #observability 2 #release 2 #security-release 2 #supply-chain 2 #tarfile 2 #testing 2 #workers 2 #active-exploitation 1 #aicoding 1

17 stories, newest first · one card per story

oss-security·2d ago high

CVE-2026-97230: IO::Socket::SSL::SelfCertificate versions 1.00 for Perl contains malware which executes Python code from an obfuscated URL

#perl #cpan #supply-chain

CVE-2026-97230

arXiv cs.AI / cs.LG / cs.CL·3d ago

Can LLMs Reason About Runtime Behavior? A Repository-Level Dynamic Benchmark

#llm #benchmark #code-reasoning

AI research

SANS Internet Storm Center·4d ago

The Truth about GET and HTTP Standards, (Tue, Sep 22nd)

#apache #http #nginx

Research

Cloudflare Blog·5d ago

Python Workers are now generally available

#cloudflare #python #workers

2 sources 11 min1

Hugging Face Blog·6d ago

tokenizers v1: encode, decode and scaling, measured

#developer-tools #hugging-face #library

AI tools & infra

Simon Willison·10d ago

datasette 1.0a40

#datasette #httpx2 #python

AI tools & infra

oss-security·12d ago

Cpython: [CVE-2026-82049] tarfile extraction filters allow file modification and content disclosure via hard link to symlink

#archive-extraction #cpython #python

CVE-2026-82049

1

oss-security·15d ago

CPython: [CVE-2026-87910] tarfile hardlink fallback ignores custom extraction filter rejection via None

#archive-extraction #cpython #cve-2026-87910

CVE-2026-87910

1

Simon Willison·16d ago

datasette 0.65.4

#datasette #patch #python

Tools

Ubuntu Security Notices·16d ago

USN-8744-1: Python vulnerabilities

#content-injection #denial-of-service #expat

CVE-2026-3644

1

SANS Internet Storm Center·24d ago

Honeypot-Omaha and batch.py [Guest Diary], (Wed, Sep 2nd)

#cowrie #dshield #honeypot

12 min2

Simon Willison·24d ago

llm-anthropic 0.28

#anthropic #claude #developer-tools

AI tools & infra

2

Exploit-DB·25d ago

[webapps] Marimo 0.20.4 - RCE

#marimo #notebook #proof-of-concept

Exploit / PoC

1

CERT/CC Vulnerability Notes·25d ago

VU#456290: Hugging Face Transformers library writes remote code to disk prior to consent check

#cve-2026-80047 #hugging-face #machine-learning

Vulnerability

1

The Hacker News·25d ago critical

Attackers Exploit Critical Langflow and Rails Flaws in Credential

#active-exploitation #credential-harvesting #cryptomining

in the wild 3 min1

Palo Alto Unit 42·Aug 17, 2026

New Python-Based Payload MechaFlounder Used by Chafer

#apt #backdoor #chafer

11 min1

Exploit-DB·Aug 11, 2026 high

[remote] PraisonAI praisonaiagents 1.6.77 - Remote Code Execution

#ai-agents #llm #poc

Exploit / PoC