73966 matches found
PT-2026-97091
Name of the Vulnerable Software and Affected Versions mcp-toolbox-sdk-python affected versions not specified Description A caching flaw in the toolbox-core package allows a Google ID token to be cached and reused across different audiences within the same process. The module-level token cache fai...
PT-2026-96823
Name of the Vulnerable Software and Affected Versions LightRAG versions prior to 1.5.5 Description The LightRAG API server returns raw Python exception text in HTTP error responses across multiple routers, including document routes.py, graph routes.py, query routes.py, ollama api.py, and lightrag...
pyasn1 Uncontrolled Resource Consumption DoS
The vulnerability of the pyasn1 library in the Python programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-pillow (UTSA-2026-090127)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090127 advisory. Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c. Tenable has extracted the preceding description block directly from the Unity Linux...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-sqlalchemy (UTSA-2026-090396)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090396 advisory. SQLAlchemy 1.2.17 has SQL Injection when the groupby parameter can be controlled. Tenable has extracted the preceding description block directly from the Unity Linux...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-pillow (UTSA-2026-090114)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090114 advisory. In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-pillow (UTSA-2026-090118)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090118 advisory. In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state-shuffle is instructed to read beyond state-buffe...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-090675)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090675 advisory. A flaw was found in Python, specifically in the FTP File Transfer Protocol client library in PASV passive mode. The issue is how the FTP client trusts the host from...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-waitress (UTSA-2026-054067)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054067 advisory. Waitress is a Web Server Gateway Interface server for Python 2 and 3. When using Waitress versions 2.1.0 and prior behind a proxy that does not properly validate the...
bazel-rules-python-source-2.3.3-1.1 on GA media (moderate)
bazel-rules-python-source-2.3.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:11831-1 Rating: moderate Cross-References: CVE-2025-47273 CVSS scores: CVE-2025-47273 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2025-47273 SUSE : 7.7...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-mako (UTSA-2023-002842)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002842 advisory. Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugi...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-reportlab (UTSA-2023-002178)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002178 advisory. Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file. Tenable has extracted the preceding description block directly...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-jwt (UTSA-2026-054077)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054077 advisory. PyJWT is a Python implementation of RFC 7519. PyJWT supports multiple different JWT signing algorithms. With JWT, an attacker submitting the JWT token can choose the...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python (UTSA-2026-090108)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090108 advisory. Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacke...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-pip (UTSA-2023-002333)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002333 advisory. Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote attacker to cause...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-ldap (UTSA-2026-054076)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054076 advisory. python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regular expression denial of...
AlmaLinux 9 : sudo (ALSA-2026:69123)
The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:69123 advisory. sudo: Sudo: Policy bypass allows unauthorized program execution via execveat CVE-2026-82474 Tenable has extracted the preceding description block directly from th...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-tornado (UTSA-2023-002184)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002184 advisory. Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-pip (UTSA-2023-002332)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002332 advisory. An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority component, the authority regular expression...
