117 matches found
Oracle Linux 7 : python-urllib3 (ELSA-2026-9031)
The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-9031 advisory. 1.10.2-7.0.3 - Backport fix for CVE-2025-66471 Orabug: 39233228 Tenable has extracted the preceding description block directly from the Oracle Linux security...
python-urllib3 security update
1.10.2-7.0.3 - Backport fix for CVE-2025-66471 Orabug: 39233228...
CVE-2026-66471
Subscriber Cross Site Scripting XSS in Accordion = 3.0.6 versions...
CVE-2026-66471 WordPress Accordion plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in Accordion = 3.0.6 versions...
Photon OS 5.0: Python3 PHSA-2026-5.0-91-0741
An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0741. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Python3 PHSA-2026-5.0-92-0741
An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0741. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Python3 PHSA-2026-5.0-91-0840
An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0840. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
SUSE SLES15 Security Update : python-urllib3 (SUSE-SU-2026:0367-2)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0367-2 advisory. - CVE-2025-66471: excessive resource consumption via decompression of highly compressed data in Streaming API bsc1254867. -...
Oracle Linux 10 : python-urllib3 (ELSA-2026-28000)
The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-28000 advisory. - Security fix for CVE-2026-44431 - Security fix for CVE-2026-44432 Resolves: RHEL-184817, RHEL-185121 - Security fix for CVE-2025-66471 - Security f...
python-urllib3 security update
1.26.19-4 - Security fix for CVE-2026-44431 - Security fix for CVE-2026-44432 Resolves: RHEL-184817, RHEL-185121 1.26.19-3 - Security fix for CVE-2025-66471 - Security fix for CVE-2025-66418 - Security fix for CVE-2026-21441 Resolves: RHEL-142737, RHEL-137215, RHEL-142755...
Security Bulletin: Multiple Vulnerabilities in urllib3 bundled with IBM Fusion, IBM Fusion HCI, IBM Fusion Data Cataloging, and IBM Fusion Content-Aware Storage
Summary IBM Fusion, IBM Fusion HCI, IBM Fusion Data Cataloging, and IBM Fusion Content-Aware Storage include urllib3. It is susceptible to SSRF, high CPU usage and massive memory allocation vulnerabilities CVE-2025-50181, CVE-2025-66418, CVE-2025-66471,CVE-2026-21441 Vulnerability Details...
Oracle Linux 9 : python-urllib3 (ELSA-2026-28158)
The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-28158 advisory. - Security fix for CVE-2026-44431 and CVE-2026-44432 Resolves: RHEL-184816, RHEL-185123 - Security fix for CVE-2025-66471 - Security fix for...
K000161850: urllib3 vulnerability CVE-2025-66471
Security Advisory Description urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.0 and prior to 2.6.0, the Streaming API improperly handles highly compressed data. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the...
Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : pip vulnerabilities (USN-8344-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8344-1 advisory. It was discovered that pip incorrectly handled TLS certificate verification in session connections. If a session was first used...
SUSE SLES16 : Recommended update for python-urllib3 (SUSE-SU-SUSE-RU-2026:21430-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-SUSE-RU-2026:21430-1 advisory. This update for python-urllib3 fixes the following issue: - Fix regression in CVE-2025-66471.patch bsc1254867 Tenable has extracted...
RHEL 6 : python-urllib3 (RHSA-2026:11722)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:11722 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...
SUSE-RU-2026:21397-1 Recommended update for python-urllib3
This update for python-urllib3 fixes the following issue: - Fix regression in CVE-2025-66471.patch bsc1254867...
SUSE-RU-2026:21430-1 Recommended update for python-urllib3
This update for python-urllib3 fixes the following issue: - Fix regression in CVE-2025-66471.patch bsc1254867...
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for January 2026
Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Process Mining 2.1.0 IF001 Vulnerability Details CVEID:CVE-2026-21860 DESCRIPTION: Werkzeug is a comprehensive WSGI web application library. Prior to version 3.1.5...
RHEL 7 : python-urllib3 (RHSA-2026:9031)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:9031 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...