Fedora 45 : python-jwcrypto (2026-6d094c5360)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6d094c5360 advisory. Low severity security fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

MiracleLinux 9 : python-tornado-6.5.8-0.el9_8.1 (AXSA:2026-1848:03)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1848:03 advisory. tornado: Tornado: Information disclosure via improper handling of credentials during HTTP redirects CVE-2026-49853 tornado: Tornado: Denial of Servi...

CVE-2026-77401: Protection Mechanism Failure

Zope AccessControl provides a general security framework for use in Zope. Prior to 7.4, applications that allow untrusted users to create and execute AccessControl-controlled Python code do not safely guard str.format and str.formatmap when those methods are reached through a str subclass. In bot...

(0Day) MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of MindsDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the OpenBBtable class. The issue results from the lack of proper validation of a user-supplied strin...

PT-2026-93998

Name of the Vulnerable Software and Affected Versions AsyncSSH versions prior to 2.24.0 Description AsyncSSH is a Python package providing an asynchronous client and server implementation of the SSHv2 protocol. The software fails to validate the send pktsize value provided by a peer, allowing it ...

CVE-2026-62949: Loop with Unreachable Exit Condition

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.24.0, processchannelopen and processchannelopenconfirmation in asyncssh/connection.py accept a peer-supplied sendpktsize value of...

ALSA-2026:67943 Important: python-lxml security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

SUSE SLED15 / SLES15 Security Update : python-GitPython (SUSE-SU-2026:4191-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4191-1 advisory. - CVE-2026-87817: failure to properly validade the git directory location allows attackers to impersonate the...

SUSE SLED15 / SLES15 Security Update : python-sqlparse (SUSE-SU-2026:4145-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4145-1 advisory. This update for python-sqlparse fixes the following issue: - CVE-2026-84305: Reindentation of tuple lists causes near-c...

Fedora 44 : python-jwcrypto (2026-8caad572b0)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8caad572b0 advisory. Low severity security fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

Fedora 45 : python-django6 (2026-522a9411e7)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-522a9411e7 advisory. Update python-django6 providing python3-django to the latest 6.1.1 release Tenable has extracted the preceding description block directly from the...

TencentOS Server 4: python-sqlparse (TSSA-2026:1008)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1008 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Fedora 44 : python-django6 (2026-6613125727)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6613125727 advisory. Update python-django6 providing python3-django to the latest 6.1.1 release Tenable has extracted the preceding description block directly from the...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / Pro Realtime 24.04 LTS : python-sql vulnerability (USN-8765-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / Pro Realtime 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8765-1 advisory. Cdric Krier discovered that python-sql incorrectly escaped values passed to unary operators. An...

Fedora 43 : python-configargparse (2026-2e605e01a6)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2e605e01a6 advisory. Update to 1.7.7. Version 1.7.6 is a security fix for GHSA-6m27-337c-jcgf. Config file or environment variable can trigger writing out a config file,...

CVE-2026-92184

A server-side request forgery (SSRF) vulnerability exists in ag-ui-protocol ag-ui 0.3.0 , affecting the function urllib.request.urlopen in the file integrations/aws-strands/python/src/ag_ui_strands/utils.py within the Multimodal Content component. Manipulation of the argument Value enables the fl...

CVE-2026-92184 ag-ui-protocol ag-ui Multimodal Content utils.py urllib.request.urlopen server-side request forgery

A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. Affected is the function urllib.request.urlopen of the file integrations/aws-strands/python/src/aguistrands/utils.py of the component Multimodal Content. The manipulation of the argument Value results in server-side request forger...

CVE-2026-92184 ag-ui-protocol ag-ui Multimodal Content utils.py urllib.request.urlopen server-side request forgery

A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. Affected is the function urllib.request.urlopen of the file integrations/aws-strands/python/src/aguistrands/utils.py of the component Multimodal Content. The manipulation of the argument Value results in server-side request forger...

sippts v4.2.1

What is Sippts? Sippts is a set of tools to audit VoIP servers and devices using the SIP protocol. Sippts is programmed in Python and it allows us to check the security of a VoIP server using the SIP protocol. Is it free? Yes. You can freely use, modify and distribute it. If you modify it, please...

CVE-2026-61667

DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, DataManagementSystem/Service/FileCatalogHandler.py checkDataset forwards an authenticated caller-controlled datasets value to DatasetManager.py checkDataset, where...