A critical authentication bypass vulnerability in the Python.org release management API was responsibly disclosed and patched earlier this year, potentially allowing attackers to manipulate download URLs and verification materials served to millions of Python users. On February 23, 2026, security researcher Splitline Ng of the DEVCORE Research Team reported the flaw to the Python Security […]
The post Python.org API Authentication Bypass Could Let Attackers Modify Download Metadata appeared first on Cyber Security News.