CLEANSTART-2026-OW56041 Security fixes in az 2.89.1-r3

🗓️ 01 Sep 2026 11:17:16Reported by GoogleType

osv🔗 osv.dev👁 3 Views

az 2.89.1-r3 library package fixes four vulnerabilities.

Reporter	Title	Published	Views	Family All 262
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which is vulnerable to multiple CVEs.	31 Aug 202609:12	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerability in paramiko affects IBM Netezza Appliance	12 Aug 202608:11	–	ibm
IBM Security Bulletins	Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite	28 Aug 202605:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by use of a broken cryptographic algorithm vulnerability due to Paramiko	15 Jul 202606:03	–	ibm
IBM Security Bulletins	Security Bulletin: Storage Virtualize Ansible Collection is affected by a vulnerability in the paramiko package	18 May 202617:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Operator for PostgreSQL	7 Aug 202614:04	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar App SDK for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	11 Aug 202614:43	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities exists in IBM Netezza Software	20 Aug 202614:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SOAR is vulnerable to using components with known vulnerabilities (CVE-2026-69247, CVE-2026-69248, CVE-2026-69249)	2 Sep 202610:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses cryptography which is vulnerable to multiple CVEs.	27 Aug 202619:30	–	ibm

Source	Link
github	www.github.com/Azure/azure-cli

04 Sep 2026 13:33Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.13.4

CVSS 48.7

EPSS0.00192

SSVC

az library security fixes multiple CVEs 2.89.1-r3