Ubuntu 24.04 LTS : Parsl vulnerability (USN-8505-1)

The remote Ubuntu 24.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8505-1 advisory. It was discovered that Parsl incorrectly constructed SQL queries using unsafe string formatting with user- supplied input in the parsl-visualize component. A remo...

CVE-2026-21892

CVE-2026-21892 affects Parsl (Python parallel scripting library) in the parsl-visualize component. Versions prior to 2026.01.05 construct SQL queries using unsafe Python % formatting with user-supplied input (workflow_id) sourced from URL routes, enabling SQL injection by an unauthenticated attac...