CLEANSTART-2026-SY44974 Security fixes for CVE-2015-20107, CVE-2015-2104, CVE-2019-16056, CVE-2019-16935, CVE-2019-20907, CVE-2019-5010, CVE-2020-14422, CVE-2020-8492, CVE-2021-23336, CVE-2021-29921, CVE-2021-3177, CVE-2022-45061, CVE-2023-27043, CVE-2024-6232, CVE-2024-6923, CVE-2025-59375, CVE-2026-3219, CVE-2026-6357 applied in versions: 3.10.5-r0, 3.11.1-r0, 3.11.5-r0, 3.12.12-r0, 3.12.13-r0, 3.12.3-r2, 3.12.6-r0, 3.6.8-r1, 3.7.5-r0, 3.8.2-r0, 3.8.4-r0, 3.8.5-r0, 3.8.7-r2, 3.8.8-r0, 3.9.4-r0, 3.9.5-r0

🗓️ 18 May 2026 13:12:05Reported by GoogleType

osv🔗 osv.dev👁 31 Views

Security fixes for multiple CVEs in the python package across various versions; resolved in later releases.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities found in Java, Node.js and IBM WebSphere Application Server Liberty	15 Apr 202502:54	–	ibm
IBM Security Bulletins	Security Bulletin: AIX/VIOS is affected by multiple vulnerabilities due to Python	19 Nov 202515:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Linux Kernel, Samba, Sudo, Python, and tcmu-runner affect IBM Spectrum Protect Plus	6 May 202202:35	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Certifi, Setuptools and Python may affect IBM Spectrum Protect Plus Microsoft File Systems Backup and Restore (CVE-2022-23491, CVE-2022-40897, CVE-2022-45061)	1 Feb 202310:43	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to regular expression DoS and command injection due to the python package (CVE-2024-6232, CVE-2024-9287)	23 Jul 202516:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Insights is affected by multiple vulnerabilities	19 Jun 202517:12	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Python may affect the IBM Storage Scale System	12 Dec 202312:03	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Pak for Data - Python (CVE-2019-20907)	17 Aug 202303:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates	4 Dec 202410:17	–	ibm

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-SY44974.json
osv	www.osv.dev/vulnerability/CVE-2015-20107
osv	www.osv.dev/vulnerability/CVE-2015-2104
osv	www.osv.dev/vulnerability/CVE-2019-16056
osv	www.osv.dev/vulnerability/CVE-2019-16935
osv	www.osv.dev/vulnerability/CVE-2019-20907
osv	www.osv.dev/vulnerability/CVE-2019-5010
osv	www.osv.dev/vulnerability/CVE-2020-14422
osv	www.osv.dev/vulnerability/CVE-2020-8492
osv	www.osv.dev/vulnerability/CVE-2021-23336

18 Sep 2026 12:17Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.5 - 9.8

CVSS 28

CVSS 35.9

CVSS 45.3

EPSS0.40736

SSVC