Oracle Linux 9 : python-tornado (ELSA-2026-82040)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-82040 advisory. 6.5.10-1.1 - Update to 6.5.10 Resolves: RHEL-274870 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Not...

CVE-2026-108382: Improper Control of Generation of Code

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, EnumRepresentation.rendersymbols concatenates each schema-controlled enum symbol between double quotes in a...

CVE-2026-108381: Improper Control of Generation of Code

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.44.0 through 0.70.5, the Pydantic and AvroDantic model generators insert a schema field's pydantic-class value after pydantic. in a...

PT-2026-112824

Improper privilege management in Python allows an authorized attacker to elevate privileges locally...

PT-2026-111737

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, FieldRepresentation.get field default inserts schema-controlled string, UUID, bytes, and fixed field defaults...

CVE-2026-55376: Improper Neutralization of Special Elements used in an OS Command

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to 0.0.40, an authenticated user who can create or edit a workflow with an Agent custom Python tool can bypass the blacklist-based sandbox in backend/app/services/pythontoolexecutor.py becau...

MiracleLinux 9 : python3.12-3.12.15-1.el9_8 (AXSA:2026-2025:25)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2025:25 advisory. python: python: Certificate verification bypass via missing serverhostname validation in SSLContext.wrapbio CVE-2026-19553 python: Use-after-free of...

Important: python-tornado security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

CVE-2026-108379: Improper Control of Generation of Code

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parsefixed inserts a fixed type's namespace value between quotes inside a generated types.confix...

CVE-2026-108375: Improper Control of Generation of Code

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, FieldRepresentation.getfielddefault inserts schema-controlled string, UUID, bytes, and fixed field defaults in...

CVE-2026-89111: Server-Side Request Forgery (SSRF)

The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenantsubdomain parameter can redirect OAuth2 token requests to an attacker-controlled server, causing client credentials to be exfiltrated...

PT-2026-111138

Name of the Vulnerable Software and Affected Versions sap-cloud-sdk versions prior to 0.45.2 Description The SAP Cloud SDK for Python contains a Server-Side Request Forgery SSRF issue affecting multi-tenant SAP Business Technology Platform BTP applications. An attacker who controls the tenant...

PT-2026-111794

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parse enum and EnumRepresentation.render symbols use each schema-controlled enum symbol as a...

Microsoft Windows: CVE-2026-85864: Python Elevation of Privilege Vulnerability

Improper privilege management in Python allows an authorized attacker to elevate privileges locally...

PT-2026-111786

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.62.3 through 0.70.5, ClassRepresentation.render metaclass inserts a schema-controlled Avro record name into the quoted Meta.schema...

ALSA-2026:82040 Important: python-tornado security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

ALSA-2026:82041 Important: python-tornado security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

python-tornado security update

6.5.10-1.1 - Update to 6.5.10 Resolves: RHEL-274866...

SUSE SLES15 Security Update : python-Django (SUSE-SU-2026:4626-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4626-1 advisory. - CVE-2026-77050: potential denial-of-service in getsupportedlanguagevariant when processing many distinct, very long language codes bsc1284481...

python313-mysql-connector-python-9.7.0-1.2 on GA media (moderate)

python313-mysql-connector-python-9.7.0-1.2 on GA media Announcement ID: openSUSE-SU-2026:12019-1 Rating: moderate Cross-References: CVE-2016-5598 CVE-2019-2435 CVE-2024-21272 CVSS scores: CVE-2019-2435 SUSE : 8.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N Affected Products: openSUSE Tumbleweed ...