MiracleLinux 9 : python-markdown-3.3.4-4.el9_8.2 (AXSA:2026-1228:01)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1228:01 advisory. python-markdown: denial of service via malformed HTML-like sequences CVE-2025-69534 Tenable has extracted the preceding description block directly from the...

AlmaLinux 8 : python-urllib3 (ALSA-2026:36732)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:36732 advisory. urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers CVE-2026-44431 Tenable has extracted the preceding description...

Fedora 44 : python-jiter / rust-jiter (2026-a7f46c285f)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-a7f46c285f advisory. Update rust-jiter to 0.16.0, adding a serde Deserializer implementation; update python-jiter to match. Both packages now use PyO3 0.29, with fixes for...

RHEL 8 : python-urllib3 (RHSA-2026:36732)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:36732 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

PT-2026-56827

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.10.0 Description Open WebUI runs client-side Python using Pyodide a Python distribution for the browser within a same-origin web worker. This allows stored chat payloads to utilize pyodide.http.pyfetch, the js...

PT-2026-56882

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.10.0 Description Authenticated users can execute Python code or tools within another user's session. This occurs because the get event call function delivers execute:python and execute:tool Socket.IO events to a...

Photon OS 4.0: Python3 PHSA-2026-4.0-1053

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1053. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-59922

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a run of closed tilde, equals-sign, or caret marker pairs around a character...

OPENSUSE-SU-2026:11236-1 python313-Django6-6.0.7-1.1 on GA media

These are all security issues fixed in the python313-Django6-6.0.7-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-61518

This update for python-sqlparse fixes the following issue - Fixed an issue where formatting list of tuples leads to denial of service bsc1268597...

PT-2026-59715

Impact A malicious user can cause a denial of service by altering a SavedModel such that assertions in function.cc would be falsified and crash the Python interpreter. Patches We have patched the issue in GitHub commits dcc21c7bc972b10b6fb95c2fb0f4ab5a59680ec2 and...

OPENSUSE-SU-2026:11240-1 python313-websockets-16.0-2.1 on GA media

These are all security issues fixed in the python313-websockets-16.0-2.1 package on the GA media of openSUSE Tumbleweed...

AlmaLinux 10 : python3.14-pip (ALSA-2026:36193)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:36193 advisory. python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite CVE-2026-8643 Tenable has extracted the...

Linux Distros Unpatched Vulnerability : CVE-2026-53511

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - calibre is an e-book manager. Prior to 9.10.0, a malicious EPUB, OPF, or PDF file can execute arbitrary Python code when its metadata is read by calibre,...

openSUSE 16 Security Update : python-msgpack (openSUSE-SU-2026:21239-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21239-1 advisory. This update for python-msgpack fixes the following issue - CVE-2026-57585: reusing an Unpacker instance after an error has been caught can lead to an...

Fedora 43 : python-jiter / rust-jiter (2026-f774d1a878)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-f774d1a878 advisory. Update rust-jiter to 0.16.0, adding a serde Deserializer implementation; update python-jiter to match. Both packages now use PyO3 0.29, with fixes for...

OPENSUSE-SU-2026:11239-1 python313-tornado6-6.5.7-2.1 on GA media

These are all security issues fixed in the python313-tornado6-6.5.7-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-56836

Name of the Vulnerable Software and Affected Versions pyload-ng affected versions not specified Description An issue exists where the software is susceptible to Server-Side Request Forgery SSRF. The is global address and is global host functions in src/pyload/core/utils/web/check.py rely on...

Oracle Linux 8 : python-urllib3 (ELSA-2026-36732)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-36732 advisory. 1.24.2-10 - Security fix for CVE-2026-44431 Resolves: RHEL-184858 Tenable has extracted the preceding description block directly from the Oracle Linux security...

ROS-20260709-73-0034

The vulnerability in python-pip relates to an incorrect restriction on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...