Critical Photon OS Security Update - PHSA-2026-5.0-91-0830

Updates of 'linux-esx', 'expat', 'linux', 'vim', 'ImageMagick', 'go', 'python3-tornado', 'xz', 'openssh' packages of Photon OS have been released...

AZL-84728 CVE-2026-6019 affecting package python3 3.12.14-2

http.cookies.Morsel.jsoutput returns an inline snippet and only escapes " for JavaScript string context. It does not neutralize the HTML parser-sensitive sequence inside the generated script element. Mitigation base64-encodes the cookie value to disallow escaping using cookie value...

RHSA-2026:9386 Red Hat Security Advisory: python3 security update

Bulletin has no description...

RHSA-2026:9289 Red Hat Security Advisory: python3 security update

Bulletin has no description...

Photon OS 5.0: Python3 PHSA-2026-5.0-0827

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0827. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

SUSE SLES12 Security Update : python3 (SUSE-SU-2026:1385-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1385-1 advisory. - CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined bsc1259611. - CVE-2026-3479: improper...

Important Photon OS Security Update - PHSA-2026-5.0-0827

Updates of 'python3-ujson', 'jq' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-91-0826

Updates of 'python3-pyasn1' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-91-0827

Updates of 'jq', 'python3-ujson' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2026-4.0-1000

Updates of 'jq', 'python3-pyasn1', 'python3-ujson', 'python3-pyOpenSSL' packages of Photon OS have been released...

Photon OS 5.0: Python3 PHSA-2026-5.0-0813

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0813. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

AZL-83054 CVE-2026-4786 affecting package python3 for versions less than 3.12.9-14

Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open" API could have commands injected into the underlying shell. See CVE-2026-4519 for details...

AZL-83051 CVE-2026-6100 affecting package python3 for versions less than 3.12.9-14

Use-after-free UAF was possible in the lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile when a memory allocation fails with a MemoryError and the decompression instance is re-used. This scenario can be triggered if the process is under memory pressure. The fix cleans up the dangling...

Photon OS 5.0: Python3 PHSA-2026-5.0-0816

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0816. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

AZL-82899 CVE-2026-1502 affecting package python3 for versions less than 3.12.9-11

CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host...

Critical Photon OS Security Update - PHSA-2026-5.0-91-0813

Updates of 'linux', 'python3-pyasn1', 'linux-esx' packages of Photon OS have been released...

Fedora: Security Advisory (FEDORA-2026-22d8c9f967)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2026-ff5da930eb)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Critical Photon OS Security Update - PHSA-2026-5.0-92-0802

Updates of 'nghttp2', 'sqlite', 'python3-pyOpenSSL' packages of Photon OS have been released...

CVE-2026-34937

PraisonAI is a multi-agent teams system. Prior to version 1.5.90, runpython in praisonai constructs a shell command string by interpolating user-controlled code into python3 -c "" and passing it to subprocess.run..., shell=True. The escaping logic only handles \ and ", leaving $ and backtick...