homeassistant-stubs (2023.3.0b7), pytest-homeassistant-custom-component (0.13.3) potentially affected by CVE-2026-91129 via homeassistant (2023.3.0b7)

homeassistant PYPI version 2023.3.0b7 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.3.0b7 - pytest-homeassistant-custom-component 0.13.3 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2023.1.0b2), pytest-homeassistant-custom-component (0.12.38) potentially affected by CVE-2026-91129 via homeassistant (2023.1.0b2)

homeassistant PYPI version 2023.1.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.1.0b2 - pytest-homeassistant-custom-component 0.12.38 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2022.9.3), pytest-homeassistant-custom-component (0.11.22) potentially affected by CVE-2026-91129 via homeassistant (2022.9.3)

homeassistant PYPI version 2022.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.9.3 - pytest-homeassistant-custom-component 0.11.22 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2022.4.0b0), pytest-homeassistant-custom-component (0.8.0) potentially affected by CVE-2026-91129 via homeassistant (2022.4.0b0)

homeassistant PYPI version 2022.4.0b0 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.4.0b0 - pytest-homeassistant-custom-component 0.8.0 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2023.8.3), pytest-homeassistant-custom-component (0.13.52) potentially affected by CVE-2026-91129 via homeassistant (2023.8.3)

homeassistant PYPI version 2023.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.8.3 - pytest-homeassistant-custom-component 0.13.52 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2022.11.0b1), pytest-homeassistant-custom-component (0.12.12) potentially affected by CVE-2026-91129 via homeassistant (2022.11.0b1)

homeassistant PYPI version 2022.11.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.11.0b1 - pytest-homeassistant-custom-component 0.12.12 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2023.1.0b4), pytest-homeassistant-custom-component (0.12.40) potentially affected by CVE-2026-91129 via homeassistant (2023.1.0b4)

homeassistant PYPI version 2023.1.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.1.0b4 - pytest-homeassistant-custom-component 0.12.40 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2022.2.0), pytest-homeassistant-custom-component (0.6.6) potentially affected by CVE-2026-91129 via homeassistant (2022.2.0)

homeassistant PYPI version 2022.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.2.0 - pytest-homeassistant-custom-component 0.6.6 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2021.12.0), pytest-homeassistant-custom-component (0.5.4) potentially affected by CVE-2026-91129 via homeassistant (2021.12.0)

homeassistant PYPI version 2021.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.12.0 - pytest-homeassistant-custom-component 0.5.4 Source cves: CVE-2026-91129 Source advisory:...

PYSEC-2026-4037 djust is vulnerable to stored/reflected XSS via javascript: URLs in built-in component template tags

Impact Many djust built-in component template tags djust.components.templatetags. render a developer/user-supplied URL into an href / action attribute, HTML-escaping it with conditionalescape but never validating the URL scheme. HTML escaping prevents attribute breakout but does not neutralize a...

djust is vulnerable to stored/reflected XSS via javascript: URLs in built-in component template tags

ImpactMany djust built-in component template tags djust.components.templatetags. render a developer/user-supplied URL into an href / action attribute, HTML-escaping it with conditionalescape but never validating the URL scheme. HTML escaping prevents attribute breakout but does not neutralize a...

CVE-2026-103505

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver v3.1.0 through v3.4.2 might allow remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma-separated values in the...

CVE-2026-102305

An ui misrepresentation flaw was found in the SignIn component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=533021953 https://code.google.com/p/chromium/issues/detail?id=102305...

CVE-2026-102303

An uninitialized resource flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=559727039 https://code.google.com/p/chromium/issues/detail?id=102303...

CLEANSTART-2026-CV55977 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel Salesforce Component

Security vulnerability affects the apache-nifi package. Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection', Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel Salesforce Component...

CLEANSTART-2026-OT47585 Authorization handling for component configuration verification requests in Apache NiFi 1

Security vulnerability affects the apache-nifi package. Authorization handling for component configuration verification requests in Apache NiFi 1...

PT-2026-104029

Name of the Vulnerable Software and Affected Versions SConnect affected versions not specified Description An unauthenticated remote code execution RCE issue exists in the SConnect native host component. The flaw results from a combination of memory management issues and cryptographic weaknesses...

Linux Distros Unpatched Vulnerability : CVE-2026-100817

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Other issue in the JavaScript: WebAssembly component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. CVE-2026-100817 Note that Nessus relies o...

PT-2026-105176

RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, The runtime-parameters lookup path coerces the URL :component segment to an atom with rabbit data coercion:to atom/1 in lookup component/1 deps/rabbit/src/rabbit runtime parameters.erl, creating a new atom for any...

Linux Distros Unpatched Vulnerability : CVE-2026-100813

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. CVE-2026-100813 Note that Nessus relie...