TencentOS Server 4: python-ply (TSSA-2026:0434)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0434 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

EulerOS Virtualization 2.10.1 : python-ply (EulerOS-SA-2026-2035)

According to the versions of the python-ply package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An undocumented and unsafe feature in the PLY Python Lex-Yacc library 3.11 allows Remote Code Execution RCE via the picklefile...

EulerOS Virtualization 2.13.0 : python-ply (EulerOS-SA-2026-2184)

According to the versions of the python-ply package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An undocumented and unsafe feature in the PLY Python Lex-Yacc library 3.11 allows Remote Code Execution RCE via the picklefile...

EulerOS Virtualization 2.13.1 : python-ply (EulerOS-SA-2026-2145)

According to the versions of the python-ply package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An undocumented and unsafe feature in the PLY Python Lex-Yacc library 3.11 allows Remote Code Execution RCE via the picklefile...

Security Bulletin: Vulnerability in Ply affects IBM Netezza Appliance

Summary The Ply package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2025-56005 Vulnerability Details CVEID:CVE-2025-56005 DESCRIPTION: An undocumented and unsafe feature in the PLY Python Lex-Yacc library 3.11 allows Remote Code Execution RCE via...

Mageia: Security Advisory (MGASA-2026-0079)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated python-ply packages fix security vulnerability

Unsafe pickle file handling in Ply. CVE-2025-56005...

Fedora 44 : python-pycparser (2026-1594a9755b)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1594a9755b advisory. Remove unsafe dead code CVE-2025-56005 from the bundled ply Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 44 : pypy3.11 (2026-8199b7452a)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8199b7452a advisory. Fix jit backend for ppc64le and s390x Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Fedora 43 : pypy3.11 (2026-85a7950dd4)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-85a7950dd4 advisory. Fix jit backend for ppc64le and s390x Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Fedora: Security Advisory (FEDORA-2026-98502d7938)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 43 : python-ply (2026-516db080b7)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-516db080b7 advisory. Security fix for CVE-2025-56005 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 43 : pypy3.10 (2026-98502d7938)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-98502d7938 advisory. Security fix for CVE-2025-56005 for the bundled ply within the bundled pycparser Tenable has extracted the preceding description block directly from the Fedo...

Fedora 44 : pypy3.10 (2026-55dd4da86b)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-55dd4da86b advisory. Security fix for CVE-2025-56005 for the bundled ply within the bundled pycparser Tenable has extracted the preceding description block directly from the Fedo...

Fedora 45 : python-ply (2026-47a943ac72)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-47a943ac72 advisory. Automatic update for python-ply-3.11-33.fc45. Changelog Wed Mar 25 2026 Charalampos Stratakis - 3.11-33 - Security fix for CVE-2025-56005 - Fixes: rhbz243798...

Fedora 45 : pypy3.10 (2026-06635fd623)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-06635fd623 advisory. Automatic update for pypy3.10-7.3.19-11.3.10.fc45. Changelog Thu Mar 19 2026 Charalampos Stratakis - 7.3.19-11 - Security fix for CVE-2025-56005 for the...

OESA-2026-1597 python-ply security update

/ply/ /ply--.egg-info/ Security Fixes: An undocumented and unsafe feature in the PLY Python Lex-Yacc library 3.11 allows Remote Code Execution RCE via the picklefile parameter in the yacc function. This parameter accepts a .pkl file that is deserialized with pickle.load without validation. Becaus...

OESA-2026-1596 python-ply security update

/ply/ /ply--.egg-info/ Security Fixes: An undocumented and unsafe feature in the PLY Python Lex-Yacc library 3.11 allows Remote Code Execution RCE via the picklefile parameter in the yacc function. This parameter accepts a .pkl file that is deserialized with pickle.load without validation. Becaus...

Exploit for CVE-2025-56005

Ply 3.11 Exploit Rejection This project argues that CVE‑202...

Linux Distros Unpatched Vulnerability : CVE-2025-56005

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An undocumented and unsafe feature in the PLY Python Lex-Yacc library 3.11 allows Remote Code Execution RCE via the picklefile parameter in the yacc function...