virtualenv’s Seed-Wheel Check Has a Custom-Index Exception
A build record should explain where its seed wheels came from and who approved that source.
Python
A GitPython Commit Could Run an Attacker’s Tracked Hook
GitPython 3.1.60 fixes a repository discovery flaw.
Why a MONAI Model Bundle Deserves a Software Review
A model bundle, shared cache or medical-imaging data file can cross from content into code when a pipeline uses unsafe Python loading paths.
The Agent Asked for Consent. Its Batch Tool Answered for the Operator.
AWS fixed a Strands Agents Tools flaw that let a crafted prompt use the batch tool to bypass human consent and execute Python on the agent host.