Curated security research, vulnerabilities, advisories and tools for practitioners.

#python

Security coverage tagged python.

1.

Pillow CVE-2026-112900: How to find and fix it with GitLab

vulnerability | 2026-10-26 12:00 | CVE-2026-112900 | about.gitlab.com | Original ↗ | .md | #ai-security | #supply-chain | #gitlab

2.

SuperGhidra: High-Performance Python Suite for Accelerated Ghidra Reverse Engineering

tool | 2026-10-20 08:22 | github.com | Original ↗ | .md | #ai-security | #github | #red-team

3.

Python Software Foundation - Python 3.11.0a3 to 3.15.0b2

vulnerability | Medium | 2026-08-06 00:00 | CVE-2026-12003 | bishopfox.com | Original ↗ | .md | #privilege-escalation | #windows | #python

4.

Shipping post-quantum cryptography to Python

blog | 2026-06-30 11:00 | blog.trailofbits.com | Original ↗ | .md | #open-source | #post-quantum-cryptography | #cryptography

5.

Build a Multi-Agent AI Code Review Pipeline

blog | 2026-06-11 08:32 | hackenproof.com | Original ↗ | .md | #ai-security | #smart-contracts | #automation

6.

From Zero Python to Building AI Agents That Hunt Bugs For You

research | 2026-06-08 13:31 | hackenproof.com | Original ↗ | .md | #ai-security | #bug-bounty | #web3

7.

Shai-Hulud copycat campaign targets Python developers through PyPI typosquatting

blog | 2026-06-09 00:00 | about.gitlab.com | Original ↗ | .md | #supply-chain | #malware | #credential-theft

8.

How TeamPCP's Python Toolkit Survives a C2 Takedown: FIRESCALE, GitHub, and the Victim's Own Account

research | 2026-05-14 00:00 | hunt.io | Original ↗ | .md | #supply-chain | #threat-intelligence | #malware

9.

Paramiko Security Audit

research | 2026-05-04 22:00 | blog.quarkslab.com | Original ↗ | .md | #appsec | #vulnerability-research | #security-audit

10.

Python pitfalls: Turning developer mistakes into vulnerabilities

blog | 2026-02-27 10:38 | yeswehack.com | Original ↗ | .md | #rce | #vulnerability-research | #path-traversal

11.

Top 10 Python Security Vulnerabilities Developers Should Avoid

blog | 2025-10-05 00:00 | aikido.dev | Original ↗ | .md | #secure-coding | #python | #aikido

12.

Beyond the Bands: Exploiting TiTiler’s Expression Parser for Remote Code Execution

vulnerability | Critical | 2025-07-25 12:00 | CVE-2023-39631 | xbow.com | Original ↗ | .md | #rce | #vulnerability-research | #python

13.

Executing arbitrary Python code from a comment

blog | 2025-07-28 00:00 | hacktron.ai | Original ↗ | .md | #ctf | #python | #arbitrary-code-execution

14.

Making PyPI's test suite 81% faster

blog | 2025-05-01 13:00 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #open-source | #pypi

15.

Sneak peek: A new ASN.1 API for Python

blog | 2025-04-18 13:00 | blog.trailofbits.com | Original ↗ | .md | #rust | #cryptography | #python

16.

Simplify Interviews with guided-capture

blog | 2025-03-26 00:00 | josephthacker.com | Original ↗ | .md | #ai-security | #open-source | #python

17.

Tracking Pyramid C2: Identifying Post-Exploitation Servers in Hunt

blog | 2025-02-12 00:00 | hunt.io | Original ↗ | .md | #python | #c2 | #post-exploitation

18.

PyPI now supports archiving projects

blog | 2025-01-30 14:00 | blog.trailofbits.com | Original ↗ | .md | #open-source | #pypi | #python

19.

Kali Linux 2024.4 Release (Python 3.12, Goodbye i386, Raspberry Pi Imager & Kali NetHunter)

blog | 2024-12-16 00:00 | kali.org | Original ↗ | .md | #python | #kali-linux | #release-notes

20.

Attestations: A new generation of signatures on PyPI

blog | 2024-11-14 14:00 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #pypi | #python

21.

White-box penetration testing: Debugging for Python vulnerabilities

blog | 2024-09-12 12:01 | yeswehack.com | Original ↗ | .md | #pentesting | #python | #docker

22.

Kali Linux 2024.3 Release (Multiple transitions)

blog | 2024-09-11 00:00 | kali.org | Original ↗ | .md | #python | #kali-linux | #release-notes

23.

An Introduction to GCPwn – Part 1

blog | 2024-07-29 00:00 | netspi.com | Original ↗ | .md | #cloud | #cloud-security | #pentesting

24.

Exploiting ML models with pickle file attacks: Part 2

blog | 2024-06-11 15:00 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #malware | #python

25.

Exploiting ML models with pickle file attacks: Part 1

blog | 2024-06-11 13:00 | blog.trailofbits.com | Original ↗ | .md | #deserialization | #python | #machine-learning

26.

Dojo challenge #32 winners!

vulnerability | 2024-05-17 08:23 | yeswehack.com | Original ↗ | .md | #ctf | #prototype-pollution | #python

27.

Unlocking Performance with Memoization: A Developer's Guide

blog | 2024-04-09 10:04 | hackerone.com | Original ↗ | .md | #secure-coding | #python | #performance

28.

Mastering Internationalization in Software Engineering

blog | 2024-04-04 03:10 | hackerone.com | Original ↗ | .md | #python | #javascript | #software-engineering

29.

Secure File Uploads in Flask: Filtering and Validation Techniques

incident | 2024-03-18 03:00 | hackerone.com | Original ↗ | .md | #web-security | #python | #best-practices

30.

Implementing and Auditing HTTPS in Django: Best Practices

blog | 2024-03-14 02:22 | hackerone.com | Original ↗ | .md | #web-security | #python | #tls