Photon OS 5.0: Python3 PHSA-2025-5.0-91-0688

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0688. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

170051277-trab-final-gces (>=0.3.0, <=0.5.0), 2022-2-gces-ifpf (0.3.0) +7060 more potentially affected by CVE-2025-50181 via urllib3 (1.26.20)

urllib3 PYPI version 1.26.20 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - 170051277-trab-final-gces =0.3.0, =0.0.1a0, =2.3.84, =0.1.0, =0.1.0, =0.1.0, =1.0.28, =0.6.0, =0.1.10, =16.0.0, =0.0.3, =0.1.3 and more Source...

album-of-the-year-api (>=0.2.0, <=0.2.12), asusrouter (>=0.2.0, <=0.18.1) +132 more potentially affected by CVE-2025-50181 via urllib3 (1.26.8)

urllib3 PYPI version 1.26.8 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - album-of-the-year-api =0.2.0, =0.2.0, =0.1.2, =0.0.1, =0.6.1.1, =3.4.3, =1.0.0, =0.1.1, =0.1.0, =0.3.7, =0.1.0, =0.1.4 and more Source cves:...

9gag-scraper (>=0.0.6, <=0.0.7), ai-enterprise-agent (>=0.0.2, <=0.0.9) +166 more potentially affected by CVE-2025-50181 via urllib3 (1.26.18)

urllib3 PYPI version 1.26.18 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - 9gag-scraper =0.0.6, =0.0.2, =2.1.4, =3.0.2, =1.1.3, =0.2.4, =0.0.1, =6.4.19, =1.0.0, =23.11.0, =0.243.0, =0.0.1, =0.0.2, =0.0.5 and more Source...

accomate (>=1.0.4, <=2.0.0.6), account-generator-helper (>=1.0.1, <=1.0.14) +213 more potentially affected by CVE-2025-50181 via urllib3 (1.26.9)

urllib3 PYPI version 1.26.9 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - accomate =1.0.4, =1.0.1, =1.0.0, =22.5.13, =0.4.0, =0.3.0, =1.0.0, =1.1.0, =1.42.0, =1.42.0, =1.42.0, =1.44.0 and more Source cves: CVE-2025-5018...

8a-scraper (>=0.0.2, <=0.0.4), ai-economist (>=1.0.0, <=1.1.1) +168 more potentially affected by CVE-2025-50181 via urllib3 (1.25.9)

urllib3 PYPI version 1.25.9 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - 8a-scraper =0.0.2, =1.0.0, =0.0.1, =0.6.2, =0.0.1, =0.1.0.dev1, =0.0.1, =0.0.11, =0.0.1, =0.3.2, =0.42.0, =1.0.0.42058, =1.0.0, =1.1.4 and more...

adversarial-labeller (0.1.8), autodiffing (>=0.0.6, <=0.0.7) +84 more potentially affected by CVE-2025-50181 via urllib3 (1.25.7)

urllib3 PYPI version 1.25.7 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - adversarial-labeller 0.1.8 - autodiffing =0.0.6, =0.32.0, =0.51.0, =0.2.0, =2.1.0, =1.0.27, =0.0.1, =3.1.2, =1.4.1, =1.0.0, =0.1.2.5, =0.1.3.14 a...

akira (0.1.2), an-website (>=22.12.2, <=23.1.13) +193 more potentially affected by CVE-2025-50181 via urllib3 (1.26.13)

urllib3 PYPI version 1.26.13 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - akira 0.1.2 - an-website =22.12.2, =0.1.1, =0.1.0, =2.6.0, =1.0.5, =0.1.5, =1.0.0, =1.2.1, =0.1.1, =0.0.1, =0.209.0, =0.2.1, =3.10.1, =3.11.3 an...

schul-cloud-url-crawler (>=1.0.5, <=1.0.17) potentially affected by CVE-2025-50181 via urllib3 (1.21.0)

urllib3 PYPI version 1.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - schul-cloud-url-crawler =1.0.5, =1.0.17 Source cves: CVE-2025-50181 Source advisory: OSV:PYSEC-2026-1999...

adab (>=1.0.0, <=1.0.4), adcami (>=0.0.1, <=0.1.2) +232 more potentially affected by CVE-2025-50181 via urllib3 (1.26.6)

urllib3 PYPI version 1.26.6 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - adab =1.0.0, =0.0.1, =0.4.1, =0.0.1, =2.3.0, =0.5.5, =0.0.1, =0.0.3, =0.0.3, =0.0.0, =0.0.0, =1.34.0, =1.34.0, =1.34.0, =1.35.0 and more Source...

acapelladb (>=0.3.4, <=0.3.8), acapi (>=0.5.0, <=0.8.0) +705 more potentially affected by CVE-2025-50181 via urllib3 (1.24.3)

urllib3 PYPI version 1.24.3 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - acapelladb =0.3.4, =0.5.0, =0.0.1, =0.0.1, =0.24.0.2, =0.1.1, =0.0.2, =0.10.0, =0.81.3, =2.0.2, =2.1.5 and more Source cves: CVE-2025-50181 Sourc...

abracadabra (0.0.7), abstract-python-email-validation (>=0.1.1, <=1.0.0) +151 more potentially affected by CVE-2025-50181 via urllib3 (1.26.4)

urllib3 PYPI version 1.26.4 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - abracadabra 0.0.7 - abstract-python-email-validation =0.1.1, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =1.2.3, =1.0.9, =0.0.2, =0.0.0, =0.1.0, =0.2.0,...

aioboto3 (6.0.0), ais-dom (>=0.72.9, <=0.80.4) +228 more potentially affected by CVE-2025-50181 via urllib3 (1.23.0)

urllib3 PYPI version 1.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - aioboto3 6.0.0 - ais-dom =0.72.9, =1.0.0, =0.1.0, =0.0.57, =0.4.0, =1.16.0, =0.18.0, =0.0.1, =0.3.0, =0.1.74, =0.1.80, =1.0.15 and more Source...

ali-cli (>=0.5.1, <=0.7.2), arjuna (>=1.1.28, <=1.2.24) +78 more potentially affected by CVE-2025-50181 via urllib3 (1.25.3)

urllib3 PYPI version 1.25.3 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - ali-cli =0.5.1, =1.1.28, =0.0.22, =0.0.1, =0.0.5a0, =0.1.0, =0.5.0, =0.2.12, =0.1.0, =1.0.0, =2.5.6, =0.0.2.dev0, =1.0.2, =1.0.3 -...

amazon-ad-sdk (0.2.23), seleniumbase (1.50.5) potentially affected by CVE-2025-50181 via urllib3 (1.26.1)

urllib3 PYPI version 1.26.1 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - amazon-ad-sdk 0.2.23 - seleniumbase 1.50.5 Source cves: CVE-2025-50181 Source advisory: OSV:PYSEC-2026-1999...

afkode (>=0.4.2, <=0.4.4), alteia (>=2.9.0, <=2.15.0) +126 more potentially affected by CVE-2025-50181 via urllib3 (1.26.16)

urllib3 PYPI version 1.26.16 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - afkode =0.4.2, =2.9.0, =0.2.0, =3.6.0, =1.0.1, =0.1.0, =1.0.0, =0.1.6, =0.0.1rc1, =0.0.3.post4 - blue-krill 2.0.5 and more Source cves:...

adattribution (>=0.0.8, <=0.0.10), an-website (>=22.7.9, <=22.7.25) +41 more potentially affected by CVE-2025-50181 via urllib3 (1.26.10)

urllib3 PYPI version 1.26.10 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - adattribution =0.0.8, =22.7.9, =0.0.1, =0.0.4, =0.0.12, =0.0.5, =0.0.6, =0.0.1, =0.1.1, =0.1.6 and more Source cves: CVE-2025-50181 Source...

argo-workflow-tools (>=0.9.6, <=0.9.7), assetsstore (>=1.0.4, <=1.0.7) +23 more potentially affected by CVE-2025-50181 via urllib3 (1.26.0)

urllib3 PYPI version 1.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - argo-workflow-tools =0.9.6, =1.0.4, =0.2.2, =1.0.0, =0.1.9, =0.1.10, =2.1.1, =2.0.0, =0.1.0, =1.1.1, =1.3.0, =1.3.14 and more Source cves:...

abeja-sdk (>=0.2.0rc1, <=1.1.0), abejacli (>=1.0.2rc1, <=1.0.2) +401 more potentially affected by CVE-2025-50181 via urllib3 (1.22.0)

urllib3 PYPI version 1.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - abeja-sdk =0.2.0rc1, =1.0.2rc1, =0.18.0.3, =0.70.0, =0.0.1, =0.5.0, =1.1.0rc6, =0.8.0, =0.0.2, =2.4.1, =0.1.1, =0.1.4 and more Source cves:...

aidockermon (>=0.5.0, <=0.10.3), amazon-ad (>=0.0.1b1, <=0.0.1b9) +102 more potentially affected by CVE-2025-50181 via urllib3 (1.24.1)

urllib3 PYPI version 1.24.1 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - aidockermon =0.5.0, =0.0.1b1, =0.1.0, =0.0.1, =0.2.0, =0.1.1, =0.1.0, =0.2.5, =0.1.0, =0.0.4, =3.4.13, =3.4.15 - commit-helper-testing 3.4.8 and...