CVE-2026-33625: Uncontrolled Resource Consumption

LMDeploy is a toolkit for compressing, deploying, and serving large language models. Versions 012.1 through 0.12.2 contain a code injection vulnerability in lmdeploy/pytorch/config.py line 620 that allows an attacker to execute arbitrary Python code by publishing a malicious HuggingFace model wit...

PT-2026-101960

Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details...

EulerOS Virtualization 2.11.1 : python-jinja2 (EulerOS-SA-2026-3460)

According to the versions of the python-jinja2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Jinja is an extensible templating engine. Prior to 3.1.5, An oversight in how the Jinja sandboxed environment detects calls t...

MiracleLinux 8 : python-lxml-4.2.3-5.el8_10 (AXSA:2026-1874:02)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1874:02 advisory. lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href CVE-2026-49825 Tenable has extracted the preceding description block...

EulerOS Virtualization 2.11.1 : python-ldap (EulerOS-SA-2026-3461)

According to the versions of the python-ldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : python-ldap is a lightweight directory access protocol LDAP client API for Python. In versions prior to 3.4.5,...

EulerOS Virtualization 2.11.0 : python-ply (EulerOS-SA-2026-3552)

According to the versions of the python-ply packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An undocumented and unsafe feature in the PLY Python Lex-Yacc library 3.11 allows Remote Code Execution RCE via the picklefile...

Fedora 43 : python-django5 (2026-6b28b4e483)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6b28b4e483 advisory. Update python-django5 to the latest 5.x release 5.2.17 - Fixes CVE-2026-15307 high: Server-side file-write and request forgery via spatial lookups -...

EulerOS Virtualization 2.11.0 : python-requests (EulerOS-SA-2026-3554)

According to the versions of the python-requests packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An unclaimed Amazon S3 bucket, 'codeconf', is referenced in an audio file link within the .rst documentation file. This...

EulerOS Virtualization 2.12.1 : python-pyasn1 (EulerOS-SA-2026-3613)

According to the versions of the python-pyasn1 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the pyasn1 library is vulnerable to a Denial of Service DoS...

EulerOS Virtualization 2.12.0 : python-pyasn1 (EulerOS-SA-2026-3667)

According to the versions of the python-pyasn1 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the pyasn1 library is vulnerable to a Denial of Service DoS...

EulerOS 2.0 SP10 : python-requests (EulerOS-SA-2026-3764)

According to the versions of the python-requests packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with...

EulerOS Virtualization 2.11.1 : python-pyasn1 (EulerOS-SA-2026-3466)

According to the versions of the python-pyasn1 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory...

EulerOS Virtualization 2.11.1 : python-idna (EulerOS-SA-2026-3459)

According to the versions of the python-idna package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Internationalized Domain Names in Applications IDNA for Python provides support for Internationalized Domain Names in...

EulerOS Virtualization 2.11.0 : python-pyasn1 (EulerOS-SA-2026-3553)

According to the versions of the python-pyasn1 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory...

EulerOS Virtualization 2.11.0 : python-jinja2 (EulerOS-SA-2026-3547)

According to the versions of the python-jinja2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Jinja is an extensible templating engine. Prior to 3.1.5, An oversight in how the Jinja sandboxed environment detects calls t...

EulerOS 2.0 SP10 : python-pip (EulerOS-SA-2026-3763)

According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pip would treat consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to the installation...

PT-2026-95545

Name of the Vulnerable Software and Affected Versions LMDeploy versions 0.12.1 through 0.12.2 Description Code injection is possible when loading a malicious HuggingFace model. The issue occurs because the quant dtype value from the model's quantization config is passed to the eval function in...

PT-2026-102140

Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95580

Name of the Vulnerable Software and Affected Versions SysReptor Professional versions prior to 2026.61 Description Authenticated users can upload image files that trigger Ghostscript during processing, allowing embedded PostScript to operate within the shared temporary directory. By combining thi...

EulerOS Virtualization 2.11.0 : python-idna (EulerOS-SA-2026-3546)

According to the versions of the python-idna package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Internationalized Domain Names in Applications IDNA for Python provides support for Internationalized Domain Names in...