GHSA-HC7R-6254-88W5 vulnerabilities

Vulnerabilities for packages: py3-systemd...

OPENSUSE-SU-2026:11159-1 python311-jupyter-server-2.20.0-1.1 on GA media

These are all security issues fixed in the python311-jupyter-server-2.20.0-1.1 package on the GA media of openSUSE Tumbleweed...

Security update for python-click (moderate)

openSUSE security update: security update for python-click ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21017-1 Rating: moderate References: bsc1263898 Cross-References: CVE-2026-7246 CVSS scores: CVE-2026-7246 SUSE : 6.7...

Security update for python-pip (important)

openSUSE security update: security update for python-pip ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20993-1 Rating: important References: bsc1266669 Cross-References: CVE-2026-8643 CVSS scores: CVE-2026-8643 SUSE : 8.1...

Oracle Linux 7 : python (ELSA-2026-19589)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19589 advisory. - Fix for CVE-2026-4786 Orabug: 39418723 - Fix for CVE-2026-4519 Orabug: 39243798 - Fix for CVE-2025-15366 and CVE-2025-15367 Orabug: 39114639 Tenable has...

Linux Distros Unpatched Vulnerability : CVE-2026-57456

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion runtime/autoload/python3complete.vim and the legacy...

OPENSUSE-SU-2026:11160-1 python311-pydata-sphinx-theme-0.19.0-2.1 on GA media

These are all security issues fixed in the python311-pydata-sphinx-theme-0.19.0-2.1 package on the GA media of openSUSE Tumbleweed...

Security update for python-starlette (important)

openSUSE security update: security update for python-starlette ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21053-1 Rating: important References: bsc1268389 bsc1268517 bsc1268520 Cross-References: CVE-2026-48817 CVE-2026-54282 CVE-2026-54283 CVSS...

Important Photon OS Security Update - PHSA-2026-5.0-91-0911

Updates of 'rubygem-faraday', 'python3-urllib3', 'rubygem-nokogiri', 'python3-mistune' packages of Photon OS have been released...

Security update for python-pdm (moderate)

openSUSE security update: security update for python-pdm ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21161-1 Rating: moderate References: bsc1268384 bsc1268385 bsc1268386 Cross-References: CVE-2026-47763 CVE-2026-47764 CVE-2026-47781 Affected...

Security update for python-PyJWT (important)

openSUSE security update: security update for python-pyjwt ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21095-1 Rating: important References: bsc1266798 bsc1266799 bsc1266800 bsc1266801 bsc1266802 Cross-References: CVE-2026-48522 CVE-2026-48523...

Critical Photon OS Security Update - PHSA-2026-5.0-0910

Updates of 'python3', 'gnupg' packages of Photon OS have been released...

Security update for python-py7zr (important)

openSUSE security update: security update for python-py7zr ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21159-1 Rating: important References: bsc1268665 bsc1268666 bsc1268669 Cross-References: CVE-2026-23879 CVE-2026-55195 CVE-2026-55206 Affected...

Important Photon OS Security Update - PHSA-2026-5.0-92-0911

Updates of 'python3-urllib3', 'python3-mistune' packages of Photon OS have been released...

PT-2026-55181

These are all security issues fixed in the python311-pydata-sphinx-theme-0.19.0-2.1 package on the GA media of openSUSE Tumbleweed...

PYSEC-2026-580 Malicious code in coolbox (PyPI)

Part of the "Hades" wave of the Shai-Hulud supply-chain campaign. On 2026-06-08, malicious phantom releases of coolbox were published to PyPI using stolen credentials. The package executes a bundled JavaScript payload via the Bun runtime on import that harvests and exfiltrates credentials and...

PYSEC-2026-579 Malicious code in cmd2func (PyPI)

Part of the "Hades" wave of the Shai-Hulud supply-chain campaign. On 2026-06-08, malicious phantom releases of cmd2func were published to PyPI using stolen credentials. The package executes a bundled JavaScript payload via the Bun runtime on import that harvests and exfiltrates credentials and...

PYSEC-2026-578 Malicious code in bramin (PyPI)

Part of the "Hades" wave of the Shai-Hulud supply-chain campaign. On 2026-06-08, malicious phantom releases of bramin were published to PyPI using stolen credentials. The package executes a bundled JavaScript payload via the Bun runtime on import that harvests and exfiltrates credentials and...

PYSEC-2026-586 Malicious code in tlask (PyPI)

Part of the "Hades" wave of the Shai-Hulud supply-chain campaign. On 2026-06-08, malicious phantom releases of tlask were published to PyPI using stolen credentials. The package executes a bundled JavaScript payload via the Bun runtime on import that harvests and exfiltrates credentials and...

OPENSUSE-SU-2026:21173-1 Security update for python-pydata-sphinx-theme

This update for python-pydata-sphinx-theme fixes the following issues: Changes in python-pydata-sphinx-theme: - Refresh js dependencies: ws to 7.5.11 bsc1268957, CVE-2026-48779 - Refresh vendored tarball CVE-2026-6321, bsc1264374...