blitzortung (>=1.9.0, <=1.11.6), bpp-iplweb (>=202406.1129.0, <=202504.1174.0) +21 more potentially affected by CVE-2026-115776 via twisted (24.11.0)

twisted PYPI version 24.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - blitzortung =1.9.0, =202406.1129.0, =1.3.0, =5.0.0, =0.1.0, =0.1.0, =0.1.0, =2.1.0a0, =0.0.1, =0.1.15, =7.5.0, =0.9.6, =0.9.8 - opentera 1.3.0 a...

blitzortung (>=1.9.0, <=1.11.6), bpp-iplweb (>=202406.1129.0, <=202504.1174.0) +21 more potentially affected by CVE-2026-115778 via twisted (24.11.0)

twisted PYPI version 24.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - blitzortung =1.9.0, =202406.1129.0, =1.3.0, =5.0.0, =0.1.0, =0.1.0, =0.1.0, =2.1.0a0, =0.0.1, =0.1.15, =7.5.0, =0.9.6, =0.9.8 - opentera 1.3.0 a...

blitzortung (>=1.9.0, <=1.11.6), bpp-iplweb (>=202406.1129.0, <=202504.1174.0) +21 more potentially affected by CVE-2026-115877 via twisted (24.11.0)

twisted PYPI version 24.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - blitzortung =1.9.0, =202406.1129.0, =1.3.0, =5.0.0, =0.1.0, =0.1.0, =0.1.0, =2.1.0a0, =0.0.1, =0.1.15, =7.5.0, =0.9.6, =0.9.8 - opentera 1.3.0 a...

bpp-iplweb (>=202209.1088.0, <=202504.1174.0), circe-transformations-certic (0.0.3) +1 more potentially affected by CVE-2026-106443 via weasyprint (55.0.0)

weasyprint PYPI version 55.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - bpp-iplweb =202209.1088.0, =202504.1174.0 - circe-transformations-certic 0.0.3 - render50 8.0.0 Source cves: CVE-2026-106443 Source advisor...

blitzortung (>=1.9.0, <=1.11.6), bpp-iplweb (>=202406.1129.0, <=202504.1174.0) +21 more potentially affected by CVE-2026-106454 via twisted (24.11.0)

twisted PYPI version 24.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - blitzortung =1.9.0, =202406.1129.0, =1.3.0, =5.0.0, =0.1.0, =0.1.0, =0.1.0, =2.1.0a0, =0.0.1, =0.1.15, =7.5.0, =0.9.6, =0.9.8 - opentera 1.3.0 a...

bpp-iplweb (>=202209.1088.0, <=202504.1174.0), circe-transformations-certic (0.0.3) +1 more potentially affected by CVE-2026-106443 via weasyprint (55.0.0)

weasyprint PYPI version 55.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - bpp-iplweb =202209.1088.0, =202504.1174.0 - circe-transformations-certic 0.0.3 - render50 8.0.0 Source cves: CVE-2026-106443 Source advisor...

blitzortung (>=1.9.0, <=1.11.6), bpp-iplweb (>=202406.1129.0, <=202504.1174.0) +21 more potentially affected by CVE-2026-106454 via twisted (24.11.0)

twisted PYPI version 24.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - blitzortung =1.9.0, =202406.1129.0, =1.3.0, =5.0.0, =0.1.0, =0.1.0, =0.1.0, =2.1.0a0, =0.0.1, =0.1.15, =7.5.0, =0.9.6, =0.9.8 - opentera 1.3.0 a...

Rocky Linux 8 [CIQ] Security Update: libssh / libssh-config / libssh-debuginfo / libssh-debugsource / etc (crlsa-2024_0628)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20240628 advisory. ssh: Prefix truncation attack on Binary Packet Protocol BPP CVE-2023-48795 Tenable has extracted the preceding description block directly from the CIQ security...

Unity Linux 20.1070e Security Update: ghostscript (UTSA-2022-001763)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-001763 advisory. A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer...

CVE-2026-54626 SAIL: Heap out-of-bounds write in SAIL TGA decoder (indexed-RLE bpp/stride mismatch)

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. In 0.9.10 and earlier, the TGAINDEXEDRLE path selected by imagetype == 9 allocates an image buffer using the one-byte-per-pixel SAILPIXELFORMATBPP8INDEXED format returned by...

CVE-2026-54626 SAIL: Heap out-of-bounds write in SAIL TGA decoder (indexed-RLE bpp/stride mismatch)

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. In 0.9.10 and earlier, the TGAINDEXEDRLE path selected by imagetype == 9 allocates an image buffer using the one-byte-per-pixel SAILPIXELFORMATBPP8INDEXED format returned by...

EUVD-2026-82407

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. In 0.9.10 and earlier, the TGAINDEXEDRLE path selected by imagetype == 9 allocates an image buffer using the one-byte-per-pixel SAILPIXELFORMATBPP8INDEXED format returned by...

CVE-2026-54626

SAIL is a cross-platform image loading and saving library. In versions 0.9.10 and earlier , the TGA decoder's indexed-RLE path (image_type == 9) allocates a pixel buffer using a one-byte-per-pixel format, while the load function derives a two-to-four-byte per-pixel write width from an attacker-co...

bpp-iplweb (>=202209.1088.0, <=202504.1174.0), circe-transformations-certic (0.0.3) +1 more potentially affected by CVE-2026-55073 via weasyprint (55.0.0)

weasyprint PYPI version 55.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - bpp-iplweb =202209.1088.0, =202504.1174.0 - circe-transformations-certic 0.0.3 - render50 8.0.0 Source cves: CVE-2026-55073 Source advisory...

bpp-iplweb (>=202209.1088.0, <=202504.1174.0), circe-transformations-certic (0.0.3) +1 more potentially affected by CVE-2026-55073 via weasyprint (55.0.0)

weasyprint PYPI version 55.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - bpp-iplweb =202209.1088.0, =202504.1174.0 - circe-transformations-certic 0.0.3 - render50 8.0.0 Source cves: CVE-2026-55073 Source advisory...

bpp-iplweb (>=202209.1088.0, <=202307.1106.0), iambic (>=1.0.1, <=2.0.0) potentially affected by CVE-2026-9318 via tablib (1.1.0)

tablib PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on tablib and may be impacted: - bpp-iplweb =202209.1088.0, =1.0.1, =2.0.0 Source cves: CVE-2026-9318 Source advisory: OSV:PYSEC-2026-3702...

bpp-iplweb (>=202209.1088.0, <=202307.1106.0), iambic (>=1.0.1, <=2.0.0) potentially affected by CVE-2026-9318 via tablib (1.1.0)

tablib PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on tablib and may be impacted: - bpp-iplweb =202209.1088.0, =1.0.1, =2.0.0 Source cves: CVE-2026-9318 Source advisory: OSV:GHSA-GQGW-JGHV-MXWX...

bpp-iplweb (>=202209.1088.0, <=202504.1174.0), circe-transformations-certic (0.0.3) +1 more potentially affected by CVE-2026-49452 via weasyprint (55.0.0)

weasyprint PYPI version 55.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - bpp-iplweb =202209.1088.0, =202504.1174.0 - circe-transformations-certic 0.0.3 - render50 8.0.0 Source cves: CVE-2026-49452 Source advisory...

bpp-iplweb (>=202209.1088.0, <=202504.1174.0), circe-transformations-certic (0.0.3) +1 more potentially affected by CVE-2025-68616 via weasyprint (55.0.0)

weasyprint PYPI version 55.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - bpp-iplweb =202209.1088.0, =202504.1174.0 - circe-transformations-certic 0.0.3 - render50 8.0.0 Source cves: CVE-2025-68616 Source advisory...

bpp-iplweb (>=202304.1100.0, <=202504.1174.0), django-user-notification (>=0.8.0, <=0.10.2) +2 more potentially affected by CVE-2024-38357 via django-tinymce (3.7.1)

django-tinymce PYPI version 3.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-tinymce and may be impacted: - bpp-iplweb =202304.1100.0, =0.8.0, =4.3.0, =0.64.0, =0.93.1 Source cves: CVE-2024-38357 Source advisory: OSV:PYSEC-2026-1302...