OPENSUSE-SU-2026:11567-1 python313-Mako-1.4.1-1.1 on GA media

These are all security issues fixed in the python313-Mako-1.4.1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-117481

Name of the Vulnerable Software and Affected Versions Mercury versions prior to 3.2.6 Description Default tokenless deployments allow anonymous clients to achieve remote code execution by creating Jupyter kernels and sending execute request messages containing arbitrary Python code. The issue...

openSUSE 16 Security Update : python-unearth (openSUSE-SU-2026:21606-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21606-1 advisory. Changes in python-unearth: - CVE-2026-73030: iswithindirectory function fails to normalize paths before validation and allows ../ sequences to bypass...

Linux Distros Unpatched Vulnerability : CVE-2026-49825

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.1, link attributes in lxml.html.defs.linkattrs were missing xlink:href, which...

Fedora 43 : python-alembic / python-asyncmy / python-sqlalchemy (2026-7d816931eb)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-7d816931eb advisory. This update contains new upstream releases for python-sqlalchemy bugfixes, python-alembic bugfixes and python-asyncmy bugfixes, security fixes and...

Fedora 44 : python-alembic / python-asyncmy / python-sqlalchemy (2026-6f7b906353)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-6f7b906353 advisory. This update contains new upstream releases for python-sqlalchemy bugfixes, python-alembic bugfixes and python-asyncmy bugfixes, security fixes and...

SUSE SLED15: libpython3_11-1_0 / python311 / python311-base / python311-curses / etc (SUSE-SU-2026:3648-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3648-1 advisory. - Regression in http.cookies bsc1263083. Tenable has extracted the preceding description block directly from t...

OPENSUSE-SU-2026:11569-1 python313-aiosmtplib-5.1.2-1.1 on GA media

These are all security issues fixed in the python313-aiosmtplib-5.1.2-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-68508: Improper Control of Generation of Code

Hydra is a framework for elegantly configuring complex applications. Prior to 1.3.4, hydra.utils.instantiate resolves and calls Python objects selected by configuration through resolvetarget in hydra/internal/instantiate/instantiate2.py, allowing attacker-controlled target values and arguments to...

OPENSUSE-SU-2026:11571-1 python313-djangorestframework-3.18.0-1.1 on GA media

These are all security issues fixed in the python313-djangorestframework-3.18.0-1.1 package on the GA media of openSUSE Tumbleweed...

Python Library sqlparse < 0.6.0 Multiple Vulnerabilities

The version of the sqlparse Python library installed on the remote host is prior to 0.6.0. It is, therefore, affected by multiple vulnerabilities: - A denial of service vulnerability exists in sqlparse due to the regular expressions used by the lexer to match dollar-quoted strings and multiline...

SUSE SLED15: libpython3_13-1_0 / python313 / python313-base / python313-curses / etc (SUSE-SU-2026:3649-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3649-1 advisory. - CVE-2025-15366: user-controlled command can allow additional commands injected using newlines bsc1257044. -...

OPENSUSE-SU-2026:11566-1 python313-GitPython-3.1.59-2.1 on GA media

These are all security issues fixed in the python313-GitPython-3.1.59-2.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 16 Security Update : python-pytest-html (openSUSE-SU-2026:21602-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21602-1 advisory. Changes in python-pytest-html: - Revendor browserslist to fix the following: CVE-2026-73088: unguarded for...in loop over untrusted JSON keys in...

Open Redirect

Overview unstructured is an A library that prepares raw documents for downstream ML tasks. Affected versions of this package are vulnerable to Open Redirect via the url argument in the partition, partitionhtml, and partitionmd functions. An attacker can access internal network resources or...

[SECURITY] [DLA 4748-1] python-httplib2 security update

Debian LTS Advisory DLA-4748-1 [email protected] https://www.debian.org/lts/security/ Emmanuel Arias August 20, 2026 https://wiki.debian.org/LTS Package : python-httplib2 Version : 0.20.4-3+deb12u1 CVE ID : CVE-2026-59939 A flaw was discovered in python-httplib2, a comprehensive Python...

[SECURITY] [DLA 4747-1] python-httplib2 security update

Debian LTS Advisory DLA-4747-1 [email protected] https://www.debian.org/lts/security/ Emmanuel Arias August 20, 2026 https://wiki.debian.org/LTS Package : python-httplib2 Version : 0.18.1-3+deb11u1 CVE ID : CVE-2021-21240 CVE-2026-59939 Debian Bug : 982738 Two vulnerabilities were...

python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module

A flaw was found in Python's http.cookies module. The Morsel.jsoutput function, responsible for generating JavaScript output for cookies, does not properly neutralize the HTML sequence. This oversight could allow a remote attacker to inject malicious script into a web page, potentially leading to...

python: Python: Denial of Service via super-linear regular expression work in csv.Sniffer.sniff()

A flaw was found in the csv.Sniffer.sniff function within Python. An attacker can exploit this by providing specially crafted CSV samples, which can trigger super-linear regular-expression processing during dialect sniffing. This excessive processing consumes significant CPU resources, potentiall...

python: Python pkgutil.get_data(): Path Traversal via improper resource argument validation

A flaw was found in Python's pkgutil.getdata function, which is used to retrieve data from packages. This function did not properly validate the resource argument, allowing a local attacker to perform path traversal attacks. Path traversal enables an attacker to access files and directories store...