Linux Distros Unpatched Vulnerability : CVE-2026-48802

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - python-engineio is a Python implementation of the Engine.IO realtime client and server. Prior to version 4.13.2, an attacker can cause the creation of unnecessa...

CVE-2026-48802

python-engineio is a Python implementation of the Engine.IO realtime client and server. Prior to version 4.13.2, an attacker can cause the creation of unnecessary background threads in the python-engineio server by exploiting the heartbeat mechanism, which launches a thread when a new connection ...

aibro (>=0.5.5, <=1.1.5), aioambient (>=0.1.1, <=1.2.2) +231 more potentially affected by CVE-2026-48802 via python-engineio (>=3.2.2, <=4.13.1)

python-engineio PYPI version =3.2.2, =0.5.5, =0.1.1, =0.1.1, =4.0.6, =0.16.0, =2.3.0, =1.0.5, =0.9.0, =0.0.3, =4.0.2, =4.0.0.8, =0.1.0, =0.1.5 - baseweb 0.0.5 and more Source cves: CVE-2026-48802 Source advisory: MEND:CVE-2026-48802...

aioambient (>=1.2.1, <=1.2.2), alphaserve (>=0.1.1, <=0.1.2) +106 more potentially affected by CVE-2026-48802 via python-engineio (3.14.2)

python-engineio PYPI version 3.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - aioambient =1.2.1, =0.1.1, =0.9.0, =4.0.2, =4.0.0.8, =0.0.1, =0.3.24, =1.0.0, =0.0.19, =0.1.3, =0.9.9, =2.0.6, =0.1.0, =0.1.0,...

aioambient (0.1.1) potentially affected by CVE-2026-48802 via python-engineio (3.2.2)

python-engineio PYPI version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - aioambient 0.1.1 Source cves: CVE-2026-48802 Source advisory: OSV:PYSEC-2026-3032...

zou (>=0.9.5, <=0.10.16) potentially affected by CVE-2026-48802 via python-engineio (3.2.3)

python-engineio PYPI version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - zou =0.9.5, =0.10.16 Source cves: CVE-2026-48802 Source advisory: OSV:PYSEC-2026-3032...

imjoy (>=0.8.21, <=0.8.22) potentially affected by CVE-2026-48802 via python-engineio (3.8.2)

python-engineio PYPI version 3.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - imjoy =0.8.21, =0.8.22 Source cves: CVE-2026-48802 Source advisory: OSV:PYSEC-2026-3032...

imjoy (>=0.9.0, <=0.9.12) potentially affected by CVE-2026-48802 via python-engineio (3.9.1)

python-engineio PYPI version 3.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - imjoy =0.9.0, =0.9.12 Source cves: CVE-2026-48802 Source advisory: OSV:PYSEC-2026-3032...

SUSE CVE-2026-48802

python-engineio is a Python implementation of the Engine.IO realtime client and server. Prior to version 4.13.2, an attacker can cause the creation of unnecessary background threads in the python-engineio server by exploiting the heartbeat mechanism, which launches a thread when a new connection ...

imjoy (>=0.8.21, <=0.8.22) potentially affected by CVE-2026-48802 via python-engineio (3.8.2)

python-engineio PYPI version 3.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - imjoy =0.8.21, =0.8.22 Source cves: CVE-2026-48802 Source advisory: OSV:GHSA-CGWC-PV48-FHJ5...

eaxum-zou (>=0.0.1, <=0.0.15), jzou (0.12.30) +2 more potentially affected by CVE-2026-48802 via python-engineio (3.8.2.post1)

python-engineio PYPI version 3.8.2.post1 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - eaxum-zou =0.0.1, =0.10.17, =0.13.6 Source cves: CVE-2026-48802 Source advisory: OSV:GHSA-CGWC-PV48-FHJ5...

zou (>=0.9.5, <=0.10.16) potentially affected by CVE-2026-48802 via python-engineio (3.2.3)

python-engineio PYPI version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - zou =0.9.5, =0.10.16 Source cves: CVE-2026-48802 Source advisory: OSV:GHSA-CGWC-PV48-FHJ5...

imjoy (>=0.9.0, <=0.9.12) potentially affected by CVE-2026-48802 via python-engineio (3.9.1)

python-engineio PYPI version 3.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - imjoy =0.9.0, =0.9.12 Source cves: CVE-2026-48802 Source advisory: OSV:GHSA-CGWC-PV48-FHJ5...