📰 Python 3.15 Released With Experimental JIT Compiler Running Faster

Python 3.15 is out today as the newest annual feature release for the Python programming language...

🔗 Source: https://www.phoronix.com/news/Python-3.15-Released

#python

📰 SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft

A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business Technology Platform (BTP) that use the SDK, SAP's official Python client for BTP services. An attacker must be able to control the tenant subdomain,.

🔗 Source: https://thehackernews.com/2026/10/sap-discloses-critical-cvss-10-flaw-in.html

#python

📰 n8n saved me more time this year than any AI tool, and most of my workflows don't use AI at all

Before I started using n8n, most of my automations were Python or Bash scripts that ran through cron jobs. They got things done, although adding something new or figuring out why a script stopped working took more effort than I wanted. I only have a working knowledge of Python, and even when an AI tool helps me write the code, I still have to understand enough of it to maintain the automation. With n8n, I can follow the workflow on a canvas,...

🔗 Source: https://www.xda-developers.com/n8n-saved-more-time-year-ai-tool-workflows-dont-use-ai/

#python

📰 LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind.The compromise affects LiteLLM 1.107.0, distributed through PyPI wheels and Docker images. The Python package has since been quarantined on Python Package Index (PyPI), and the.

🔗 Source: https://thehackernews.com/2026/10/litellm-compromised-in-supply-chain.html

#python

📰 Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

Pillow, the most widely used image library for Python, can be made to run operating system commands on a server by specifying the name of a file it is told to open.The flaw, CVE-2026-112900, is in the way Pillow handles EPS images, which it opens by passing the file's name to Ghostscript, a separate program it runs to turn the image into pixels, without checking the name first.

🔗 Source: https://thehackernews.com/2026/10/critical-flaw-in-pythons-popular-pillow.html

#python

📰 Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

A memory-corruption flaw in Google's Brotli decoder sits in many programs that unpack Brotli-compressed data, among them Bun, the Python Brotli and brotlicffi packages, and Envoy proxies set up to decompress Brotli.Tracked as CVE-2026-111497, the flaw allows crafted compressed data to overwrite past the end of a buffer and corrupt a program's memory, potentially.

🔗 Source: https://thehackernews.com/2026/10/brotli-decoder-flaw-behind-nodejs-rce.html

#python

📰 Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline

LiteLLM on Friday revealed that an Agent Platform master key accidentally published to a public GitHub repository in late May 2026 ultimately allowed the threat actor to push a malicious version of the popular Python package."On May 27, 2026, a configuration file was committed to the public LiteLLM-Labs/lite-harness repository which inadvertently contained the master key to a deployment of.

🔗 Source: https://thehackernews.com/2026/10/leaked-litellm-master-key-let-attackers.html

#python

📰 Linux's Perf Python Scripts More Robust & Faster With Linux 7.4

Merged this weekend to Linux 7.4 Git were all of the perf subsystem tooling updates. Most notable to these tooling updates for dealing with performance counters and more on Linux is an overhaul to the Python code...

🔗 Source: https://www.phoronix.com/news/Linux-7.4-Perf-Tools

#git #linux #python