Lucene search
+L

25 matches found

OSV
OSV
added 2026/07/07 4:3 p.m.11 views

PYSEC-2026-1759 Parsl Monitoring Visualization Vulnerable to SQL Injection

Affected Product: Parsl Python Parallel Scripting Library Component: parsl.monitoring.visualization Vulnerability Type: SQL Injection CWE-89 Severity: High CVSS Rating Recommended: 7.5 - 8.6 URL: https://github.com/Parsl/parsl/blob/master/parsl/monitoring/visualization/views.py Summary A SQL...

5.3CVSS6.2AI score0.00239EPSS
SaveExploits1References6
OSV
OSV
added 2026/07/06 11:3 a.m.7 views

USN-8505-1 python-parsl vulnerability

It was discovered that Parsl incorrectly constructed SQL queries using unsafe string formatting with user-supplied input in the parsl-visualize component. A remote attacker could possibly use this issue to perform SQL injection attacks, leading to data exfiltration or a denial of service...

7.3CVSS6.1AI score0.00239EPSS
SaveExploits1References2
Ubuntu
Ubuntu
added 2026/07/06 11:3 a.m.12 views

USN-8505-1: Parsl vulnerability

It was discovered that Parsl incorrectly constructed SQL queries using unsafe string formatting with user-supplied input in the parsl-visualize component. A remote attacker could possibly use this issue to perform SQL injection attacks, leading to data exfiltration or a denial of service...

7.3CVSS6.1AI score0.00239EPSS
SaveExploits1
Debian
Debian
added 2026/01/14 7:58 a.m.37 views

[SECURITY] [DSA 6099-1] python-parsl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6099-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 14, 2026 https://www.debian.org/security/faq -...

7.3CVSS7.7AI score0.00239EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2026/01/14 12:0 a.m.2 views

Debian: Security Advisory (DSA-6099-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.3CVSS5.4AI score0.00239EPSS
SaveExploits1References2
OSV
OSV
added 2026/01/14 12:0 a.m.6 views

DSA-6099-1 python-parsl - security update

Bulletin has no description...

7.3CVSS6.9AI score0.00239EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2026/01/14 12:0 a.m.6 views

Debian dsa-6099 : python-parsl-doc - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6099 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6099-1 [email protected] https://www.debian.org/security/ Moritz...

7.3CVSS5.7AI score0.00239EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2026/01/10 5:40 a.m.7 views

CVE-2026-21892

Parsl is a Python parallel scripting library. A SQL Injection vulnerability exists in the parsl-visualize component of versions prior to 2026.01.05. The application constructs SQL queries using unsafe string formatting Python % operator with user-supplied input workflowid directly from URL routes...

7.3CVSS7.5AI score0.00239EPSS
SaveExploits1References1
NVD
NVD
added 2026/01/08 2:15 p.m.6 views

CVE-2026-21892

Parsl is a Python parallel scripting library. A SQL Injection vulnerability exists in the parsl-visualize component of versions prior to 2026.01.05. The application constructs SQL queries using unsafe string formatting Python % operator with user-supplied input workflowid directly from URL routes...

7.3CVSS0.00239EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2026/01/08 2:15 p.m.10 views

CVE-2026-21892

Parsl is a Python parallel scripting library. A SQL Injection vulnerability exists in the parsl-visualize component of versions prior to 2026.01.05. The application constructs SQL queries using unsafe string formatting Python % operator with user-supplied input workflowid directly from URL routes...

7.3CVSS6AI score0.00239EPSS
SaveExploits1References4
OSV
OSV
added 2026/01/08 2:15 p.m.7 views

UBUNTU-CVE-2026-21892

Parsl is a Python parallel scripting library. A SQL Injection vulnerability exists in the parsl-visualize component of versions prior to 2026.01.05. The application constructs SQL queries using unsafe string formatting Python % operator with user-supplied input workflowid directly from URL routes...

7.3CVSS6AI score0.00239EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/01/08 2:2 p.m.2 views

CVE-2026-21892 Parsl Monitoring Visualization Vulnerable to SQL Injection

Parsl is a Python parallel scripting library. A SQL Injection vulnerability exists in the parsl-visualize component of versions prior to 2026.01.05. The application constructs SQL queries using unsafe string formatting Python % operator with user-supplied input workflowid directly from URL routes...

5.3CVSS7.1AI score0.00239EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2026/01/08 2:2 p.m.12 views

CVE-2026-21892

Parsl is a Python parallel scripting library. A SQL Injection vulnerability exists in the parsl-visualize component of versions prior to 2026.01.05. The application constructs SQL queries using unsafe string formatting Python % operator with user-supplied input workflowid directly from URL routes...

7.3CVSS5.9AI score0.00239EPSS
SaveExploits1
Cvelist
Cvelist
added 2026/01/08 2:2 p.m.41 views

CVE-2026-21892 Parsl Monitoring Visualization Vulnerable to SQL Injection

Parsl is a Python parallel scripting library. A SQL Injection vulnerability exists in the parsl-visualize component of versions prior to 2026.01.05. The application constructs SQL queries using unsafe string formatting Python % operator with user-supplied input workflowid directly from URL routes...

5.3CVSS0.00239EPSS
SaveExploits1References2
CVE
CVE
added 2026/01/08 2:2 p.m.35 views

CVE-2026-21892

CVE-2026-21892 affects Parsl (Python parallel scripting library) in the parsl-visualize component. Versions prior to 2026.01.05 construct SQL queries using unsafe Python % formatting with user-supplied input (workflow_id) sourced from URL routes, enabling SQL injection by an unauthenticated attac...

7.3CVSS7.1AI score0.00239EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2026/01/08 2:2 p.m.6 views

CVE-2026-21892 Parsl Monitoring Visualization Vulnerable to SQL Injection

Parsl is a Python parallel scripting library. A SQL Injection vulnerability exists in the parsl-visualize component of versions prior to 2026.01.05. The application constructs SQL queries using unsafe string formatting Python % operator with user-supplied input workflowid directly from URL routes...

5.3CVSS7.1AI score
SaveExploits0References4
EUVD
EUVD
added 2026/01/08 2:2 p.m.11 views

EUVD-2026-1034

Parsl is a Python parallel scripting library. A SQL Injection vulnerability exists in the parsl-visualize component of versions prior to 2026.01.05. The application constructs SQL queries using unsafe string formatting Python % operator with user-supplied input workflowid directly from URL routes...

5.3CVSS7AI score0.00239EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2026/01/08 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-21892

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Parsl is a Python parallel scripting library. A SQL Injection vulnerability exists in the parsl-visualize component of versions prior to 2026.01.05. The...

7.3CVSS6.1AI score0.00239EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/01/08 12:0 a.m.8 views

parsl 安全漏洞

parsl is the Parallel Scripting Library open source a parallel scripting library for Python. A security vulnerability exists in parsl versions prior to 2026.01.05, which stems from an SQL injection in the parsl-visualize component that could lead to data exfiltration or denial of service...

7.3CVSS6.8AI score0.00239EPSS
SaveExploits1References3
OSV
OSV
added 2026/01/06 6:4 p.m.9 views

GHSA-F2MF-Q878-GH58 Parsl Monitoring Visualization Vulnerable to SQL Injection

Affected Product: Parsl Python Parallel Scripting Library Component: parsl.monitoring.visualization Vulnerability Type: SQL Injection CWE-89 Severity: High CVSS Rating Recommended: 7.5 - 8.6 URL: https://github.com/Parsl/parsl/blob/master/parsl/monitoring/visualization/views.py Summary A SQL...

5.3CVSS7.8AI score0.00239EPSS
SaveExploits1References4
Rows per page
Query Builder