EulerOS 2.0 SP13 : python-sphinx (EulerOS-SA-2026-4190)

According to the versions of the python-sphinx packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Underscore.js is a utility-belt library for JavaScript. Prior to 1.13.8, the .flatten and .isEqual functions use recursion without a depth...

EulerOS 2.0 SP11 : python-sphinx (EulerOS-SA-2026-4372)

According to the versions of the python-sphinx packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Underscore.js is a utility-belt library for JavaScript. Prior to 1.13.8, the .flatten and .isEqual functions use recursion without a depth...

EulerOS 2.0 SP11 : python-sphinx (EulerOS-SA-2026-4282)

According to the versions of the python-sphinx packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Underscore.js is a utility-belt library for JavaScript. Prior to 1.13.8, the .flatten and .isEqual functions use recursion without a depth...

jupyterlite-pyodide-kernel (>=0.7.0a0, <=0.7.2), jupyterlite-sphinx (>=0.22.0, <=0.22.1) +5 more potentially affected by CVE-2026-102831 via jupyterlite-core (>=0.7.6, <=0.8.0rc0)

jupyterlite-core PYPI version =0.7.6, =0.7.0a0, =0.22.0, =1.0.1, =4.2.0, =0.3.0, =0.6.0, =0.10.0a0, =0.10.0 Source cves: CVE-2026-102831 Source advisory: OSV:PYSEC-2026-4060...

jupyterlite-pyodide-kernel (>=0.7.0a0, <=0.7.2), jupyterlite-sphinx (>=0.22.0, <=0.22.1) +5 more potentially affected by CVE-2026-102831 via jupyterlite-core (>=0.7.6, <=0.8.0rc0)

jupyterlite-core PYPI version =0.7.6, =0.7.0a0, =0.22.0, =1.0.1, =4.2.0, =0.3.0, =0.6.0, =0.10.0a0, =0.10.0 Source cves: CVE-2026-102831 Source advisory: OSV:GHSA-6966-VJJ6-99XV...

jupyterlite-pyodide-kernel (>=0.7.0a0, <=0.7.2), jupyterlite-sphinx (>=0.22.0, <=0.22.1) +5 more potentially affected by CVE-2026-102831 via jupyterlite-core (>=0.7.6, <=0.8.0rc0)

jupyterlite-core PYPI version =0.7.6, =0.7.0a0, =0.22.0, =1.0.1, =4.2.0, =0.3.0, =0.6.0, =0.10.0a0, =0.10.0 Source cves: CVE-2026-102831 Source advisory: GHSA-6966-VJJ6-99XV...

jupyterlite-pyodide-kernel (>=0.7.0a0, <=0.7.2), jupyterlite-sphinx (>=0.22.0, <=0.22.1) +5 more potentially affected by CVE-2026-102831 via jupyterlite-core (>=0.7.6, <=0.8.0rc0)

jupyterlite-core PYPI version =0.7.6, =0.7.0a0, =0.22.0, =1.0.1, =4.2.0, =0.3.0, =0.6.0, =0.10.0a0, =0.10.0 Source cves: CVE-2026-102831 Source advisory: MEND:CVE-2026-102831...

EulerOS 2.0 SP12 : python-sphinx (EulerOS-SA-2026-3378)

According to the versions of the python-sphinx packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Underscore.js is a utility-belt library for JavaScript. Prior to 1.13.8, the .flatten and .isEqual functions use recursion without a depth...

EulerOS 2.0 SP12 : python-sphinx (EulerOS-SA-2026-3303)

According to the versions of the python-sphinx packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Underscore.js is a utility-belt library for JavaScript. Prior to 1.13.8, the .flatten and .isEqual functions use recursion without a depth...

PocketSphinx: Buffer overflows in language and acoustic model loading code

ImpactThe trie language model code introduced in PocketSphinx 5prealpha failed to check various boundary conditions when reading the headers of ARPA, DMP, and binary format language model files. In the case of invalid, corrupted or malicious input files, this could lead to stack and heap buffer...

PT-2026-64106

Impact The trie language model code introduced in PocketSphinx 5prealpha failed to check various boundary conditions when reading the headers of ARPA, DMP, and binary format language model files. In the case of invalid, corrupted or malicious input files, this could lead to stack and heap buffer...

PocketSphinx: Buffer overflows in language and acoustic model loading code

Impact The trie language model code introduced in PocketSphinx 5prealpha failed to check various boundary conditions when reading the headers of ARPA, DMP, and binary format language model files. In the case of invalid, corrupted or malicious input files, this could lead to stack and heap buffer...

PT-2026-60899

Name of the Vulnerable Software and Affected Versions PocketSphinx versions 5prealpha through 5.1.0 Description The trie language model code fails to check boundary conditions when reading headers of ARPA, DMP, and binary format language model files, which can lead to stack and heap buffer...

jupyxplorer (0.0.4), sphinx-markdown-builder (0.0.5) potentially affected by CVE-2025-53000 via nbconvert (5.4.0)

nbconvert PYPI version 5.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - jupyxplorer 0.0.4 - sphinx-markdown-builder 0.0.5 Source cves: CVE-2025-53000 Source advisory: OSV:PYSEC-2026-1691...

asekuro (>=0.0.4, <=0.0.5), box-oauth (>=0.2.5, <=0.3.1) +3 more potentially affected by CVE-2025-30167 via jupyter-core (4.4.0)

jupyter-core PYPI version 4.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-core and may be impacted: - asekuro =0.0.4, =0.2.5, =0.3.4, =0.5.10, =0.5.24 - sphinx-markdown-builder 0.0.5 Source cves: CVE-2025-30167 Source advisory:...

openSUSE 16 Security Update : python-pydata-sphinx-theme (openSUSE-SU-2026:21231-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21231-1 advisory. Changes in python-pydata-sphinx-theme: - CVE-2026-13676: fast-uri: failure to canonicalize Unicode/IDN hostnames for HTTP-family URLs allows for bypass...

Security update for python-pydata-sphinx-theme (important)

openSUSE security update: security update for python-pydata-sphinx-theme ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21231-1 Rating: important References: bsc1269597 Cross-References: CVE-2026-13676 CVSS scores: CVE-2026-13676 SUSE : 7.2...

OPENSUSE-SU-2026:21231-1 Security update for python-pydata-sphinx-theme

This update for python-pydata-sphinx-theme fixes the following issues: Changes in python-pydata-sphinx-theme: - CVE-2026-13676: fast-uri: failure to canonicalize Unicode/IDN hostnames for HTTP-family URLs allows for bypass bsc1269597 revendor the vendored tarball with updated versions...

openSUSE 16 Security Update : python-pydata-sphinx-theme (openSUSE-SU-2026:21173-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21173-1 advisory. Changes in python-pydata-sphinx-theme: - Refresh js dependencies: ws to 7.5.11 bsc1268957, CVE-2026-48779 - Refresh vendored tarball...

OPENSUSE-SU-2026:11160-1 python311-pydata-sphinx-theme-0.19.0-2.1 on GA media

These are all security issues fixed in the python311-pydata-sphinx-theme-0.19.0-2.1 package on the GA media of openSUSE Tumbleweed...