18 matches found
[SECURITY] Fedora 43 Update: python-nh3-0.2.21-9.fc43
Python binding to Ammonia HTML sanitizer Rust crate...
Fedora 43 : python-nh3 / rust-ammonia (2026-9324385c43)
The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-9324385c43 advisory. - Update the ammonia crate to version 4.1.4. - Rebuild nh3 to apply fixes for RUSTSEC-2026-0193 and RUSTSEC-2026-0213. Tenable has extracted the preceding...
Fedora 44 : python-nh3 / rust-ammonia (2026-61f0d68398)
The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-61f0d68398 advisory. - Update the ammonia crate to version 4.1.4. - Rebuild nh3 to apply fixes for RUSTSEC-2026-0193 and RUSTSEC-2026-0213. Tenable has extracted the preceding...
Fedora 45 : python-nh3 / rust-ammonia (2026-48677bc7ac)
The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-48677bc7ac advisory. - Update the ammonia crate to version 4.1.4. - Rebuild nh3 to apply fixes for RUSTSEC-2026-0193 and RUSTSEC-2026-0213. Tenable has extracted the preceding...
PraisonAI Vulnerable to Stored XSS via Unsanitized Agent Output in HTML Rendering (nh3 Not a Required Dependency)
SummaryThe Flask API endpoint in src/praisonai/api.py renders agent output as HTML without effective sanitization. The sanitizehtml function relies on the nh3 library, which is not listed as a required or optional dependency in pyproject.toml. When nh3 is absent the default installation, the...
CVE-2026-59923
A flaw was found in Mistune, a Python Markdown parser. This vulnerability allows an attacker to bypass URL protections by using specially crafted Markdown links or images containing percent-encoded javascript URIs. This can lead to the execution of arbitrary scripts in the rendered HTML,...
Fedora 44 : python-nh3 (2026-5ebb12f543)
"The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5ebb12f543 advisory. Update to 0.3.6 Tenable, Inc. The descriptive text and package checks in this plugin were extracted from Fedora Security Advisory FEDORA-2026-5ebb12f543...
Cross-site Scripting (XSS)
Overview PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent...
CVE-2026-40112
PraisonAI is a multi-agent teams system. Prior to 4.5.128, the Flask API endpoint in src/praisonai/api.py renders agent output as HTML without effective sanitization. The sanitizehtml function relies on the nh3 library, which is not listed as a required or optional dependency in pyproject.toml...
CVE-2026-40112 PraisonAI has Stored XSS via Unsanitized Agent Output in HTML Rendering (nh3 Not a Required Dependency)
PraisonAI is a multi-agent teams system. Prior to 4.5.128, the Flask API endpoint in src/praisonai/api.py renders agent output as HTML without effective sanitization. The sanitizehtml function relies on the nh3 library, which is not listed as a required or optional dependency in pyproject.toml...
Fedora: Security Advisory (FEDORA-2025-074aba6ad4)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2025-7ec84ba6e9)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2025-1be5992b52)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 42 : python-nh3 / rust-ammonia (2025-7ec84ba6e9)
The remote Fedora 42 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-7ec84ba6e9 advisory. Update the ammonia crate to version 4.0.1 and rebuild python-nh3 to apply fixes for RUSTSEC-2025-0071. Tenable has extracted the preceding description block...
Fedora 41 : python-nh3 / rust-ammonia (2025-1be5992b52)
The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-1be5992b52 advisory. Update the ammonia crate to version 3.3.1 and rebuild python-nh3 to apply fixes for RUSTSEC-2025-0071. Tenable has extracted the preceding description block...
Fedora 43 : python-nh3 / rust-ammonia (2025-074aba6ad4)
The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-074aba6ad4 advisory. Update the ammonia crate to version 4.1.2 and rebuild python-nh3 to apply fixes for RUSTSEC-2025-0071. Tenable has extracted the preceding description block...
Fedora 44 : python-nh3 / rust-ammonia (2025-06a8d5853b)
The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-06a8d5853b advisory. Update the ammonia crate to version 4.1.2 and rebuild python-nh3 to apply fixes for RUSTSEC-2025-0071. Tenable has extracted the preceding description block...