homeassistant-stubs (2023.4.1), pytest-homeassistant-custom-component (0.13.18) potentially affected by CVE-2026-91129 via homeassistant (2023.4.1)

homeassistant PYPI version 2023.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.4.1 - pytest-homeassistant-custom-component 0.13.18 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2023.5.0b6), pytest-homeassistant-custom-component (0.13.26) potentially affected by CVE-2026-91129 via homeassistant (2023.5.0b6)

homeassistant PYPI version 2023.5.0b6 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.5.0b6 - pytest-homeassistant-custom-component 0.13.26 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2023.5.0), pytest-homeassistant-custom-component (0.13.28) potentially affected by CVE-2026-91129 via homeassistant (2023.5.0)

homeassistant PYPI version 2023.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.5.0 - pytest-homeassistant-custom-component 0.13.28 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2021.8.0b0), pytest-homeassistant-custom-component (0.4.3) potentially affected by CVE-2026-91129 via homeassistant (2021.8.0b0)

homeassistant PYPI version 2021.8.0b0 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.8.0b0 - pytest-homeassistant-custom-component 0.4.3 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2022.2.0b5), pytest-homeassistant-custom-component (0.6.4) potentially affected by CVE-2026-91129 via homeassistant (2022.2.0b5)

homeassistant PYPI version 2022.2.0b5 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.2.0b5 - pytest-homeassistant-custom-component 0.6.4 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2022.2.0b6), pytest-homeassistant-custom-component (0.6.5) potentially affected by CVE-2026-91129 via homeassistant (2022.2.0b6)

homeassistant PYPI version 2022.2.0b6 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.2.0b6 - pytest-homeassistant-custom-component 0.6.5 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2023.8.3), pytest-homeassistant-custom-component (0.13.52) potentially affected by CVE-2026-91129 via homeassistant (2023.8.3)

homeassistant PYPI version 2023.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.8.3 - pytest-homeassistant-custom-component 0.13.52 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2023.8.4), pytest-homeassistant-custom-component (0.13.53) potentially affected by CVE-2026-91129 via homeassistant (2023.8.4)

homeassistant PYPI version 2023.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.8.4 - pytest-homeassistant-custom-component 0.13.53 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2023.8.0b4), pytest-homeassistant-custom-component (0.13.48) potentially affected by CVE-2026-91129 via homeassistant (2023.8.0b4)

homeassistant PYPI version 2023.8.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.8.0b4 - pytest-homeassistant-custom-component 0.13.48 Source cves: CVE-2026-91129 Source advisory:...

pytest-homeassistant-custom-component (0.8.9) potentially affected by CVE-2026-91129 via homeassistant (2022.4.4)

homeassistant PYPI version 2022.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - pytest-homeassistant-custom-component 0.8.9 Source cves: CVE-2026-91129 Source advisory: OSV:PYSEC-2026-4051...

homeassistant-stubs (2021.12.0), pytest-homeassistant-custom-component (0.5.4) potentially affected by CVE-2026-91129 via homeassistant (2021.12.0)

homeassistant PYPI version 2021.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.12.0 - pytest-homeassistant-custom-component 0.5.4 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2022.7.5), pytest-homeassistant-custom-component (0.10.6) potentially affected by CVE-2026-91129 via homeassistant (2022.7.5)

homeassistant PYPI version 2022.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.7.5 - pytest-homeassistant-custom-component 0.10.6 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2023.4.2), pytest-homeassistant-custom-component (0.13.19) potentially affected by CVE-2026-91129 via homeassistant (2023.4.2)

homeassistant PYPI version 2023.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.4.2 - pytest-homeassistant-custom-component 0.13.19 Source cves: CVE-2026-91129 Source advisory:...

djust is vulnerable to stored/reflected XSS via javascript: URLs in built-in component template tags

ImpactMany djust built-in component template tags djust.components.templatetags. render a developer/user-supplied URL into an href / action attribute, HTML-escaping it with conditionalescape but never validating the URL scheme. HTML escaping prevents attribute breakout but does not neutralize a...

PYSEC-2026-4037 djust is vulnerable to stored/reflected XSS via javascript: URLs in built-in component template tags

Impact Many djust built-in component template tags djust.components.templatetags. render a developer/user-supplied URL into an href / action attribute, HTML-escaping it with conditionalescape but never validating the URL scheme. HTML escaping prevents attribute breakout but does not neutralize a...

CVE-2026-102305

An ui misrepresentation flaw was found in the SignIn component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=533021953 https://code.google.com/p/chromium/issues/detail?id=102305...

CVE-2026-102303

An uninitialized resource flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=559727039 https://code.google.com/p/chromium/issues/detail?id=102303...

CLEANSTART-2026-CV55977 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel Salesforce Component

Security vulnerability affects the apache-nifi package. Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection', Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel Salesforce Component...

CLEANSTART-2026-OT47585 Authorization handling for component configuration verification requests in Apache NiFi 1

Security vulnerability affects the apache-nifi package. Authorization handling for component configuration verification requests in Apache NiFi 1...

Rocky Linux 9.6 [TuxCare] Security Update: exiv2 / exiv2-devel / exiv2-doc / exiv2-libs (ALMALINUX9.6:CLSA-2026:1775221560)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1775221560 advisory. - Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to...