CVE-2026-21892 Parsl Monitoring Visualization Vulnerable to SQL Injection

Parsl is a Python parallel scripting library. A SQL Injection vulnerability exists in the parsl-visualize component of versions prior to 2026.01.05. The application constructs SQL queries using unsafe string formatting Python % operator with user-supplied input workflowid directly from URL routes...

CVE-2026-21892 Parsl Monitoring Visualization Vulnerable to SQL Injection

Parsl is a Python parallel scripting library. A SQL Injection vulnerability exists in the parsl-visualize component of versions prior to 2026.01.05. The application constructs SQL queries using unsafe string formatting Python % operator with user-supplied input workflowid directly from URL routes...

EUVD-2026-1034

Parsl is a Python parallel scripting library. A SQL Injection vulnerability exists in the parsl-visualize component of versions prior to 2026.01.05. The application constructs SQL queries using unsafe string formatting Python % operator with user-supplied input workflowid directly from URL routes...

CVE-2025-69225 vulnerabilities

Vulnerabilities for packages: open-webui, dask-kubernetes, py3-cassandra-medusa, kserve, checkov, airflow, kubeflow-pipelines-visualization-server...

CVE-2025-69224 vulnerabilities

Vulnerabilities for packages: open-webui, dask-kubernetes, py3-cassandra-medusa, kserve, checkov, airflow, kubeflow-pipelines-visualization-server...

CVE-2025-69228 vulnerabilities

Vulnerabilities for packages: open-webui, dask-kubernetes, py3-cassandra-medusa, kserve, checkov, airflow, kubeflow-pipelines-visualization-server...

GHSA-6JHG-HG63-JVVF vulnerabilities

Vulnerabilities for packages: open-webui, dask-kubernetes, py3-cassandra-medusa, kserve, checkov, airflow, kubeflow-pipelines-visualization-server...

GHSA-MQQC-3GQH-H2X8 vulnerabilities

Vulnerabilities for packages: open-webui, dask-kubernetes, py3-cassandra-medusa, kserve, checkov, airflow, kubeflow-pipelines-visualization-server...

CVE-2025-69226 vulnerabilities

Vulnerabilities for packages: open-webui, dask-kubernetes, py3-cassandra-medusa, kserve, checkov, airflow, kubeflow-pipelines-visualization-server...

GHSA-54JQ-C3M8-4M76 vulnerabilities

Vulnerabilities for packages: open-webui, dask-kubernetes, py3-cassandra-medusa, kserve, checkov, airflow, kubeflow-pipelines-visualization-server...

Linux Distros Unpatched Vulnerability : CVE-2026-21892

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Parsl is a Python parallel scripting library. A SQL Injection vulnerability exists in the parsl-visualize component of versions prior to 2026.01.05. The...

CVE-2026-21883: Missing Origin Validation in WebSockets

Bokeh is an interactive visualization library written in Python. In versions 3.8.1 and below, if a server is configured with an allowlist e.g., dashboard.corp, an attacker can register a domain like dashboard.corp.attacker.com or use a subdomain if applicable and lure a victim to visit it. The...

CVE-2025-69227 vulnerabilities

Vulnerabilities for packages: open-webui, dask-kubernetes, py3-cassandra-medusa, kserve, checkov, airflow, kubeflow-pipelines-visualization-server...

CVE-2025-69229 vulnerabilities

Vulnerabilities for packages: open-webui, dask-kubernetes, py3-cassandra-medusa, kserve, checkov, airflow, kubeflow-pipelines-visualization-server...

GHSA-6MQ8-RVHQ-8WGG vulnerabilities

Vulnerabilities for packages: open-webui, dask-kubernetes, py3-cassandra-medusa, kserve, checkov, airflow, kubeflow-pipelines-visualization-server...

CVE-2025-69223 vulnerabilities

Vulnerabilities for packages: open-webui, dask-kubernetes, py3-cassandra-medusa, kserve, checkov, airflow, kubeflow-pipelines-visualization-server...

GHSA-G84X-MCQJ-X9QQ vulnerabilities

Vulnerabilities for packages: open-webui, dask-kubernetes, py3-cassandra-medusa, kserve, checkov, airflow, kubeflow-pipelines-visualization-server...

GHSA-JJ3X-WXRX-4X23 vulnerabilities

Vulnerabilities for packages: open-webui, dask-kubernetes, py3-cassandra-medusa, kserve, checkov, airflow, kubeflow-pipelines-visualization-server...

CVE-2025-69229 vulnerabilities

Vulnerabilities for packages: authentik, kubeflow-pipelines-visualization-server, py3-cassandra-medusa, apache-beam-python-3.11-sdk, open-webui, airflow, py3-vllm-cuda-12.4, kserve, py3.13-scanner-test-libraries-aiohttp, dask-kubernetes, awx, checkov, request-1276...

GHSA-6MQ8-RVHQ-8WGG vulnerabilities

Vulnerabilities for packages: authentik, kubeflow-pipelines-visualization-server, py3-cassandra-medusa, apache-beam-python-3.11-sdk, open-webui, airflow, py3-vllm-cuda-12.4, kserve, py3.13-scanner-test-libraries-aiohttp, dask-kubernetes, awx, checkov, request-1276...