Security Bulletin: Vulnerability in pip affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in pip has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information. Vulnerability...

Photon OS 5.0: Python3 PHSA-2026-5.0-92-0862

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0862. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CLEANSTART-2026-YC81398 Security fixes for CVE-2024-35195, CVE-2024-47081, CVE-2025-8869, CVE-2026-1703, CVE-2026-25645, CVE-2026-3219, CVE-2026-44431, CVE-2026-44432, CVE-2026-6357, CVE-2026-8643, ghsa-58qw-9mgm-455v, ghsa-jp4c-xjxw-mgf9, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc applied in versions: 1.25.2-r0, 2.7.1-r0, 2.7.4-r1

Multiple security vulnerabilities affect the k8s-sidecar package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UC45646 Security fixes for CVE-2024-35195, CVE-2024-47081, CVE-2025-8869, CVE-2026-1703, CVE-2026-25645, CVE-2026-3219, CVE-2026-44431, CVE-2026-44432, CVE-2026-45409, CVE-2026-6357, CVE-2026-8643, ghsa-58qw-9mgm-455v, ghsa-65pc-fj4g-8rjx, ghsa-jp4c-xjxw-mgf9, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc applied in versions: 1.25.2-r0, 2.6.0-r0, 2.6.0-r1

Multiple security vulnerabilities affect the k8s-sidecar package. These issues are resolved in later releases. See references for individual vulnerability details...

bighummingbird (>=0.0.2024070102, <=0.0.2024072501) potentially affected by CVE-2026-6357 via pip (24.1.1)

pip PYPI version 24.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - bighummingbird =0.0.2024070102, =0.0.2024072501 Source cves: CVE-2026-6357 Source advisory: OSV:PYSEC-2026-2876...

aaanalysis (>=1.0.1, <=1.0.2), airunner (>=5.0.0, <=5.6.1) +52 more potentially affected by CVE-2026-6357 via pip (25.3.0)

pip PYPI version 25.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aaanalysis =1.0.1, =5.0.0, =0.1.3, =0.13.0, =1.1.56, =0.1.0, =0.22.1, =0.3.3, =5.4.0, =0.10.0, =0.9.0, =0.1.0a12, =0.2.3 and more Source cves:...

aihandler (>=1.8.15, <=1.9.6), aihandlerwindows (>=1.8.17, <=1.8.19) +15 more potentially affected by CVE-2026-6357 via pip (23.0.1)

pip PYPI version 23.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aihandler =1.8.15, =1.8.17, =1.8.14, =2023.3.0b0, =0.1.1, =2023.3.0b0, =2023.3.0b0, =0.12.0, =0.7.1, =0.7.2 - mqtt-hass-base 4.2.1 - pip-and-pip-tools...

agave (>=0.1.1, <=0.1.7), bankruptcy (>=0.0.2, <=0.0.5) +10 more potentially affected by CVE-2026-6357 via pip (21.0.1)

pip PYPI version 21.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - agave =0.1.1, =0.0.2, =0.2.0, =1.22.1, =0.0.60, =1.0.2, =2.0.3, =0.6.3, =0.0.7, =0.0.39, =0.5.0, =0.5.1 Source cves: CVE-2026-6357 Source advisory:...

build-harness (0.2.1), c4v-py (>=0.1.0.dev2021118, <=0.1.0.dev202201291921) +34 more potentially affected by CVE-2026-6357 via pip (21.3.1)

pip PYPI version 21.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - build-harness 0.2.1 - c4v-py =0.1.0.dev2021118, =0.0.2a0, =0.9.2, =1.26.1, =0.5.0, =4.0.0, =22.16.0, =0.1.9, =0.2.12, =0.1.0, =0.0.57, =0.0.59 -...

aiocloudlibrary (0.2.0), aiorobonect (>=1.2.0, <=1.3.1) +29 more potentially affected by CVE-2026-6357 via pip (24.2.0)

pip PYPI version 24.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aiocloudlibrary 0.2.0 - aiorobonect =1.2.0, =2.4.4rc1, =0.1.1, =0.1.0, =0.7.3 - iflow-mcp-mcp-prefect 3.6.1 and more Source cves: CVE-2026-6357 Source...

c2cciutils (>=1.1.0.dev20260322010408, <=1.1.70), igrafx-mining-sdk (>=2.38.0, <=2.38.1) +13 more potentially affected by CVE-2026-6357 via pip (>=26.0.0, <=26.0.1)

pip PYPI version =26.0.0, =1.1.0.dev20260322010408, =2.38.0, =0.1.1, =0.9.478, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.4.3, =0.1.0, =2.0.0, =2.1.1 Source cves: CVE-2026-6357 Source advisory: OSV:PYSEC-2026-2876...

agave (>=0.0.1.dev0, <=0.0.5.dev0), always-updates (>=5.1.0, <=8.0.0) +21 more potentially affected by CVE-2026-6357 via pip (20.2.4)

pip PYPI version 20.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - agave =0.0.1.dev0, =5.1.0, =0.1.0, =0.0.0, =0.0.1, =1.17.0, =2021.6.0.dev1, =0.0.0, =0.118.5, =2021.4.0b0, =0.2.2, =0.0.0.1.dev0, =1.2.0, =2021.4.1,...

adversarial-insight-ml (0.1.0), aiorobonect (>=0.2.6, <=0.2.8) +20 more potentially affected by CVE-2026-6357 via pip (23.2.1)

pip PYPI version 23.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - adversarial-insight-ml 0.1.0 - aiorobonect =0.2.6, =2.0.3, =1.2.0, =1.0.0, =4.2.0, =0.0.2, =0.0.2, =0.0.5 - musclex 1.23.0 and more Source cves:...

fastq-handler (>=0.1.0, <=0.2.0), findontime (>=0.1.0, <=0.2.71) potentially affected by CVE-2026-6357 via pip (21.2.3)

pip PYPI version 21.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - fastq-handler =0.1.0, =0.1.0, =0.2.71 Source cves: CVE-2026-6357 Source advisory: OSV:PYSEC-2026-2876...

agave (>=0.1.8, <=0.2.2), argnorm (0.0.1rc1) +6 more potentially affected by CVE-2026-6357 via pip (21.2.4)

pip PYPI version 21.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - agave =0.1.8, =0.2.1, =1.24.1, =0.1.6, =1.0.2, =0.1.0, =0.1.5 Source cves: CVE-2026-6357 Source advisory: OSV:PYSEC-2026-2876...

chalice (>=1.9.0, <=1.9.1), corgy-erp (>=0.0.1, <=1.0.7) potentially affected by CVE-2026-6357 via pip (19.2.0)

pip PYPI version 19.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice =1.9.0, =0.0.1, =1.0.7 Source cves: CVE-2026-6357 Source advisory: OSV:PYSEC-2026-2876...

aftool (>=0.1.2, <=0.2.8), agave (>=0.0.3, <=0.1.3.dev2) +23 more potentially affected by CVE-2026-6357 via pip (20.3.4)

pip PYPI version 20.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aftool =0.1.2, =0.0.3, =0.1.0.dev1, =1.21.5, =0.4.0, =1.0.2, =0.1.59, =0.4.3, =0.2.1, =2.6.0b1, =2020.0.1, =0.1.0, =2.4.6.20013014, =2.4.0.19073113,...

dpckan (0.0.1.9000), pysqream-log-analyzer (>=0.0.1, <=0.0.3) +1 more potentially affected by CVE-2026-6357 via pip (21.1.2)

pip PYPI version 21.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - dpckan 0.0.1.9000 - pysqream-log-analyzer =0.0.1, =0.1.8, =0.1.10 Source cves: CVE-2026-6357 Source advisory: OSV:PYSEC-2026-2876...

dsframework (>=0.1.9, <=0.1.12), hes-off (>=1.0.0, <=1.0.1) potentially affected by CVE-2026-6357 via pip (21.1.1)

pip PYPI version 21.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - dsframework =0.1.9, =1.0.0, =1.0.1 Source cves: CVE-2026-6357 Source advisory: OSV:PYSEC-2026-2876...

geonode (>=4.0.0, <=4.0.0.post1), jpeglib (0.10.16) potentially affected by CVE-2026-6357 via pip (22.2.1)

pip PYPI version 22.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - geonode =4.0.0, =4.0.0.post1 - jpeglib 0.10.16 Source cves: CVE-2026-6357 Source advisory: OSV:PYSEC-2026-2876...