PT-2025-39265

🗓️ 01 Jan 2025 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 4 Views

Pip tar extraction vulnerability in fallback; fix by upgrading pip or Python with PEP 706.

Reporter	Title	Published	Views	Family All 590
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for February 2025.	13 Mar 202616:55	–	ibm
IBM Security Bulletins	Security Bulletin:Requests SSL Verification Issue Fixed in 2.32.0	4 May 202612:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.	8 Jul 202610:37	–	ibm
IBM Security Bulletins	Security Bulletin: Investigation Assistant App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	5 May 202614:43	–	ibm
IBM Security Bulletins	Security Bulletin: : Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in dependencies	8 Jun 202614:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Scheduler Optimizer uses requests-2.32.5-py3-none-any.whl which is vulnerable to CVE-2026-25645	7 May 202614:30	–	ibm
IBM Security Bulletins	Security Bulletin: Location Service for ESRI Component uses urllib3-2.6.3 library which was vulnerable to CVE-2026-44431 and CVE-2026-44432	27 May 202613:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in requests-2.32.4-py3-none-any.whl	6 May 202604:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses urllib3-2.6.3-py3-none-any.whl which is vulnerable to CVE-2026-44431, CVE-2026-44432	29 Jun 202614:12	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities addressed with IBM Business Automation Workflow cumulative fixes April 2026	27 May 202615:10	–	ibm

Source	Link
mail	www.mail.python.org/archives/list/[email protected]/thread/IF5A3GCJY3VH7BVHJKOWOJFKTW7VFQEN
osv	www.osv.dev/vulnerability/CVE-2026-44431
osv	www.osv.dev/vulnerability/CLEANSTART-2026-NN42198
docs	www.docs.bell-sw.com/security/cves/CVE-2025-8869
osv	www.osv.dev/vulnerability/CVE-2026-3219
ubuntu	www.ubuntu.com/security/CVE-2025-8869
osv	www.osv.dev/vulnerability/ghsa-58qw-9mgm-455v
osv	www.osv.dev/vulnerability/CVE-2026-45409
osv	www.osv.dev/vulnerability/OESA-2025-2741
osv	www.osv.dev/vulnerability/CVE-2025-8869

07 Jul 2026 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 26.1

CVSS 48.9

CVSS 3.17.5

EPSS0.0068

SSVC