sk-lead-finder-lead-review (ubuntu 22.04) - Trivy Report - 2026-11-08 04:03:11.351343456 +0100 CET m=+0.041670242

ubuntu
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
apt	CVE-2026-109518	HIGH	2.4.13	2.4.15ubuntu0.1	http://www.openwall.com/lists/oss-security/2026/11/04/12 https://access.redhat.com/security/cve/CVE-2026-109518 https://lists.debian.org/debian-lts-announce/2026/11/msg00004.html https://lists.debian.org/debian-security-announce/2026/msg00526.html https://nvd.nist.gov/vuln/detail/CVE-2026-109518 https://ubuntu.com/blog/apt-vulnerability-fixes-available https://ubuntu.com/security/notices/USN-8996-1 https://www.cve.org/CVERecord?id=CVE-2026-109518
git	CVE-2025-48384	HIGH	1:2.34.1-1ubuntu1.11	1:2.34.1-1ubuntu1.13	http://seclists.org/fulldisclosure/2025/Sep/60 http://www.openwall.com/lists/oss-security/2025/07/08/4 https://access.redhat.com/errata/RHSA-2025:11462 https://access.redhat.com/security/cve/CVE-2025-48384 https://bugzilla.redhat.com/2337824 https://bugzilla.redhat.com/2337956 https://bugzilla.redhat.com/2378806 https://bugzilla.redhat.com/2378808 https://bugzilla.redhat.com/2379124 https://bugzilla.redhat.com/2379125 https://bugzilla.redhat.com/2379326 https://bugzilla.redhat.com/show_bug.cgi?id=2337824 https://bugzilla.redhat.com/show_bug.cgi?id=2337956 https://bugzilla.redhat.com/show_bug.cgi?id=2378806 https://bugzilla.redhat.com/show_bug.cgi?id=2378808 https://bugzilla.redhat.com/show_bug.cgi?id=2379124 https://bugzilla.redhat.com/show_bug.cgi?id=2379125 https://bugzilla.redhat.com/show_bug.cgi?id=2379326 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50349 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52006 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46835 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48384 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48385 https://dgl.cx/2025/07/git-clone-submodule-cve-2025-48384 https://errata.almalinux.org/9/ALSA-2025-11462.html https://errata.rockylinux.org/RLSA-2025:11462 https://github.com/git/git/commit/05e9cd64ee23bbadcea6bcffd6660ed02b8eab89 https://github.com/git/git/security/advisories/GHSA-vwqx-4fm8-6qc9 https://linux.oracle.com/cve/CVE-2025-48384.html https://linux.oracle.com/errata/ELSA-2025-11688.html https://lists.debian.org/debian-lts-announce/2025/10/msg00003.html https://nvd.nist.gov/vuln/detail/CVE-2025-48384 https://ubuntu.com/security/notices/USN-7626-1 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-48384 https://www.cve.org/CVERecord?id=CVE-2025-48384 https://www.openwall.com/lists/oss-security/2025/07/08/4
git-man	CVE-2025-48384	HIGH	1:2.34.1-1ubuntu1.11	1:2.34.1-1ubuntu1.13	http://seclists.org/fulldisclosure/2025/Sep/60 http://www.openwall.com/lists/oss-security/2025/07/08/4 https://access.redhat.com/errata/RHSA-2025:11462 https://access.redhat.com/security/cve/CVE-2025-48384 https://bugzilla.redhat.com/2337824 https://bugzilla.redhat.com/2337956 https://bugzilla.redhat.com/2378806 https://bugzilla.redhat.com/2378808 https://bugzilla.redhat.com/2379124 https://bugzilla.redhat.com/2379125 https://bugzilla.redhat.com/2379326 https://bugzilla.redhat.com/show_bug.cgi?id=2337824 https://bugzilla.redhat.com/show_bug.cgi?id=2337956 https://bugzilla.redhat.com/show_bug.cgi?id=2378806 https://bugzilla.redhat.com/show_bug.cgi?id=2378808 https://bugzilla.redhat.com/show_bug.cgi?id=2379124 https://bugzilla.redhat.com/show_bug.cgi?id=2379125 https://bugzilla.redhat.com/show_bug.cgi?id=2379326 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50349 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52006 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46835 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48384 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48385 https://dgl.cx/2025/07/git-clone-submodule-cve-2025-48384 https://errata.almalinux.org/9/ALSA-2025-11462.html https://errata.rockylinux.org/RLSA-2025:11462 https://github.com/git/git/commit/05e9cd64ee23bbadcea6bcffd6660ed02b8eab89 https://github.com/git/git/security/advisories/GHSA-vwqx-4fm8-6qc9 https://linux.oracle.com/cve/CVE-2025-48384.html https://linux.oracle.com/errata/ELSA-2025-11688.html https://lists.debian.org/debian-lts-announce/2025/10/msg00003.html https://nvd.nist.gov/vuln/detail/CVE-2025-48384 https://ubuntu.com/security/notices/USN-7626-1 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-48384 https://www.cve.org/CVERecord?id=CVE-2025-48384 https://www.openwall.com/lists/oss-security/2025/07/08/4
gpg	CVE-2025-68973	HIGH	2.2.27-3ubuntu2.1	2.2.27-3ubuntu2.5	http://www.openwall.com/lists/oss-security/2025/12/29/11 https://access.redhat.com/errata/RHSA-2026:0719 https://access.redhat.com/security/cve/CVE-2025-68973 https://bugzilla.redhat.com/2425966 https://bugzilla.redhat.com/show_bug.cgi?id=2425966 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68973 https://dev.gnupg.org/T7906 https://dev.gnupg.org/T8001 https://errata.almalinux.org/9/ALSA-2026-0719.html https://errata.rockylinux.org/RLSA-2026:0719 https://github.com/advisories/GHSA-pj23-86ww-f72p https://github.com/gpg/gnupg/blob/ff30683418695f5d2cc9e6cf8c9418e09378ebe4/g10/armor.c#L1305-L1306 https://github.com/gpg/gnupg/commit/115d138ba599328005c5321c0ef9f00355838ca9 https://github.com/gpg/gnupg/commit/115d138ba599328005c5321c0ef9f00355838ca9%20%28gnupg-2.5.14%29 https://github.com/gpg/gnupg/commit/1e929abd20fa2e4be3797a137caca63a971d5372%20%28gnupg-2.2.51%29 https://github.com/gpg/gnupg/commit/4ecc5122f20e10c17172ed72f4fa46c784b5fb48%20%28gnupg-2.4.9%29 https://github.com/gpg/gnupg/compare/gnupg-2.2.50...gnupg-2.2.51 https://gpg.fail/memcpy https://linux.oracle.com/cve/CVE-2025-68973.html https://linux.oracle.com/errata/ELSA-2026-1677.html https://lists.debian.org/debian-lts-announce/2026/01/msg00008.html https://media.ccc.de/v/39c3-to-sign-or-not-to-sign-practical-vulnerabilities-i https://news.ycombinator.com/item?id=46403200 https://nvd.nist.gov/vuln/detail/CVE-2025-68973 https://ubuntu.com/security/notices/USN-7946-1 https://ubuntu.com/security/notices/USN-7946-2 https://www.cve.org/CVERecord?id=CVE-2025-68973 https://www.openwall.com/lists/oss-security/2025/12/28/5
gpgconf	CVE-2025-68973	HIGH	2.2.27-3ubuntu2.1	2.2.27-3ubuntu2.5	http://www.openwall.com/lists/oss-security/2025/12/29/11 https://access.redhat.com/errata/RHSA-2026:0719 https://access.redhat.com/security/cve/CVE-2025-68973 https://bugzilla.redhat.com/2425966 https://bugzilla.redhat.com/show_bug.cgi?id=2425966 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68973 https://dev.gnupg.org/T7906 https://dev.gnupg.org/T8001 https://errata.almalinux.org/9/ALSA-2026-0719.html https://errata.rockylinux.org/RLSA-2026:0719 https://github.com/advisories/GHSA-pj23-86ww-f72p https://github.com/gpg/gnupg/blob/ff30683418695f5d2cc9e6cf8c9418e09378ebe4/g10/armor.c#L1305-L1306 https://github.com/gpg/gnupg/commit/115d138ba599328005c5321c0ef9f00355838ca9 https://github.com/gpg/gnupg/commit/115d138ba599328005c5321c0ef9f00355838ca9%20%28gnupg-2.5.14%29 https://github.com/gpg/gnupg/commit/1e929abd20fa2e4be3797a137caca63a971d5372%20%28gnupg-2.2.51%29 https://github.com/gpg/gnupg/commit/4ecc5122f20e10c17172ed72f4fa46c784b5fb48%20%28gnupg-2.4.9%29 https://github.com/gpg/gnupg/compare/gnupg-2.2.50...gnupg-2.2.51 https://gpg.fail/memcpy https://linux.oracle.com/cve/CVE-2025-68973.html https://linux.oracle.com/errata/ELSA-2026-1677.html https://lists.debian.org/debian-lts-announce/2026/01/msg00008.html https://media.ccc.de/v/39c3-to-sign-or-not-to-sign-practical-vulnerabilities-i https://news.ycombinator.com/item?id=46403200 https://nvd.nist.gov/vuln/detail/CVE-2025-68973 https://ubuntu.com/security/notices/USN-7946-1 https://ubuntu.com/security/notices/USN-7946-2 https://www.cve.org/CVERecord?id=CVE-2025-68973 https://www.openwall.com/lists/oss-security/2025/12/28/5
gpgv	CVE-2025-68973	HIGH	2.2.27-3ubuntu2.1	2.2.27-3ubuntu2.5	http://www.openwall.com/lists/oss-security/2025/12/29/11 https://access.redhat.com/errata/RHSA-2026:0719 https://access.redhat.com/security/cve/CVE-2025-68973 https://bugzilla.redhat.com/2425966 https://bugzilla.redhat.com/show_bug.cgi?id=2425966 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68973 https://dev.gnupg.org/T7906 https://dev.gnupg.org/T8001 https://errata.almalinux.org/9/ALSA-2026-0719.html https://errata.rockylinux.org/RLSA-2026:0719 https://github.com/advisories/GHSA-pj23-86ww-f72p https://github.com/gpg/gnupg/blob/ff30683418695f5d2cc9e6cf8c9418e09378ebe4/g10/armor.c#L1305-L1306 https://github.com/gpg/gnupg/commit/115d138ba599328005c5321c0ef9f00355838ca9 https://github.com/gpg/gnupg/commit/115d138ba599328005c5321c0ef9f00355838ca9%20%28gnupg-2.5.14%29 https://github.com/gpg/gnupg/commit/1e929abd20fa2e4be3797a137caca63a971d5372%20%28gnupg-2.2.51%29 https://github.com/gpg/gnupg/commit/4ecc5122f20e10c17172ed72f4fa46c784b5fb48%20%28gnupg-2.4.9%29 https://github.com/gpg/gnupg/compare/gnupg-2.2.50...gnupg-2.2.51 https://gpg.fail/memcpy https://linux.oracle.com/cve/CVE-2025-68973.html https://linux.oracle.com/errata/ELSA-2026-1677.html https://lists.debian.org/debian-lts-announce/2026/01/msg00008.html https://media.ccc.de/v/39c3-to-sign-or-not-to-sign-practical-vulnerabilities-i https://news.ycombinator.com/item?id=46403200 https://nvd.nist.gov/vuln/detail/CVE-2025-68973 https://ubuntu.com/security/notices/USN-7946-1 https://ubuntu.com/security/notices/USN-7946-2 https://www.cve.org/CVERecord?id=CVE-2025-68973 https://www.openwall.com/lists/oss-security/2025/12/28/5
gstreamer1.0-plugins-bad	CVE-2025-3887	HIGH	1.20.3-0ubuntu1.1		https://access.redhat.com/errata/RHSA-2025:8183 https://access.redhat.com/security/cve/CVE-2025-3887 https://bugzilla.redhat.com/2367919 https://bugzilla.redhat.com/show_bug.cgi?id=2367919 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3887 https://errata.almalinux.org/9/ALSA-2025-8183.html https://errata.rockylinux.org/RLSA-2025:8183 https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/5463f0e09768ca90aa8c58357c1f4c645db580db%20%281.26.1%29 https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/b33ba2f264c8e39c7794e7452b7b57d48fab3f13%20%28main%29 https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/bcaab3609805ea10fb3d9ac0c9d947b4c3563948%20%281.26.1%29 https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/d0e18d6353e4e448ccf3b06a967b394e664dd0b5%20%28main%29 https://gstreamer.freedesktop.org/security/sa-2025-0001.html https://linux.oracle.com/cve/CVE-2025-3887.html https://linux.oracle.com/errata/ELSA-2025-8201.html https://lists.debian.org/debian-lts-announce/2025/06/msg00017.html https://nvd.nist.gov/vuln/detail/CVE-2025-3887 https://ubuntu.com/security/notices/USN-7558-1 https://ubuntu.com/security/notices/USN-8205-1 https://www.cve.org/CVERecord?id=CVE-2025-3887 https://www.zerodayinitiative.com/advisories/ZDI-25-267/
libapt-pkg6.0	CVE-2026-109518	HIGH	2.4.13	2.4.15ubuntu0.1	http://www.openwall.com/lists/oss-security/2026/11/04/12 https://access.redhat.com/security/cve/CVE-2026-109518 https://lists.debian.org/debian-lts-announce/2026/11/msg00004.html https://lists.debian.org/debian-security-announce/2026/msg00526.html https://nvd.nist.gov/vuln/detail/CVE-2026-109518 https://ubuntu.com/blog/apt-vulnerability-fixes-available https://ubuntu.com/security/notices/USN-8996-1 https://www.cve.org/CVERecord?id=CVE-2026-109518
libbrotli1	CVE-2026-111497	HIGH	1.0.9-2build6	1.0.9-2ubuntu0.1	http://www.openwall.com/lists/oss-security/2026/10/23/25 http://www.openwall.com/lists/oss-security/2026/10/24/6 http://www.openwall.com/lists/oss-security/2026/10/26/12 http://www.openwall.com/lists/oss-security/2026/10/26/13 http://www.openwall.com/lists/oss-security/2026/10/26/16 http://www.openwall.com/lists/oss-security/2026/11/03/2 https://access.redhat.com/errata/RHSA-2026:90495 https://access.redhat.com/errata/RHSA-2026:92492 https://access.redhat.com/security/cve/CVE-2026-111497 https://advisory.echohq.com/cve/CVE-2026-111497 https://broccoli2shell.com https://bugzilla.redhat.com/2558973 https://bugzilla.redhat.com/2562054 https://bugzilla.redhat.com/show_bug.cgi?id=2558973 https://cert-portal.siemens.com/productcert/html/ssa-045512.html https://cert-portal.siemens.com/productcert/html/ssa-443410.html https://cert-portal.siemens.com/productcert/html/ssa-898633.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111497 https://devblogs.microsoft.com/dotnet/dotnet-october-2026-oob-security-updates https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds/ https://errata.almalinux.org/9/ALSA-2026-92492.html https://errata.rockylinux.org/RLSA-2026:90495 https://github.com/advisories/GHSA-9v8h-qqgm-4m35 https://github.com/andybalholm/brotli/releases/tag/v1.2.7 https://github.com/dotnet/announcements/issues/494 https://github.com/google/brotli https://github.com/google/brotli/commit/0ed4268a4401abcb4472096340477cf4af7d1a2b https://github.com/google/brotli/commit/50a9b70a4d5e1443fc40927952276b68fffa83a0 https://github.com/google/brotli/commit/b418fa81c48262a86a95332b0bc6d62c30aa78b6 https://github.com/google/brotli/commit/da9806362874b9bd4b552a3af360b5d6347beb12 https://github.com/google/brotli/releases/tag/v1.0.10 https://github.com/google/brotli/releases/tag/v1.1.1 https://github.com/google/brotli/releases/tag/v1.2.1 https://github.com/pypa/advisory-database/tree/main/vulns/brotli/PYSEC-2026-4322.yaml https://github.com/pypa/advisory-database/tree/main/vulns/brotlicffi/PYSEC-2026-4323.yaml https://linux.oracle.com/cve/CVE-2026-111497.html https://linux.oracle.com/errata/ELSA-2026-92492.html https://lists.debian.org/debian-lts-announce/2026/10/msg00049.html https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114148 https://nodejs.org/en/blog/vulnerability/october-2026-security-releases https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high https://nvd.nist.gov/vuln/detail/CVE-2026-111497 https://opensourcemalware.com/blog/node2shell-affects-python https://patchtheplanet.org/brotli https://pypi.org/project/Brotli https://pypi.org/project/brotlicffi https://ubuntu.com/security/notices/USN-8956-1 https://ubuntu.com/security/notices/USN-8956-2 https://ubuntu.com/security/notices/USN-8958-1 https://www.aikido.dev/blog/node2shell-nodejs-brotli-rce-cve-2026-111497 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111497 https://www.cve.org/CVERecord?id=CVE-2026-111497
libgstreamer-plugins-bad1.0-0	CVE-2025-3887	HIGH	1.20.3-0ubuntu1.1		https://access.redhat.com/errata/RHSA-2025:8183 https://access.redhat.com/security/cve/CVE-2025-3887 https://bugzilla.redhat.com/2367919 https://bugzilla.redhat.com/show_bug.cgi?id=2367919 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3887 https://errata.almalinux.org/9/ALSA-2025-8183.html https://errata.rockylinux.org/RLSA-2025:8183 https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/5463f0e09768ca90aa8c58357c1f4c645db580db%20%281.26.1%29 https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/b33ba2f264c8e39c7794e7452b7b57d48fab3f13%20%28main%29 https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/bcaab3609805ea10fb3d9ac0c9d947b4c3563948%20%281.26.1%29 https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/d0e18d6353e4e448ccf3b06a967b394e664dd0b5%20%28main%29 https://gstreamer.freedesktop.org/security/sa-2025-0001.html https://linux.oracle.com/cve/CVE-2025-3887.html https://linux.oracle.com/errata/ELSA-2025-8201.html https://lists.debian.org/debian-lts-announce/2025/06/msg00017.html https://nvd.nist.gov/vuln/detail/CVE-2025-3887 https://ubuntu.com/security/notices/USN-7558-1 https://ubuntu.com/security/notices/USN-8205-1 https://www.cve.org/CVERecord?id=CVE-2025-3887 https://www.zerodayinitiative.com/advisories/ZDI-25-267/
libssl3	CVE-2026-45447	HIGH	3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.25	https://access.redhat.com/errata/RHSA-2026:25237 https://access.redhat.com/errata/RHSA-2026:25239 https://access.redhat.com/errata/RHSA-2026:26275 https://access.redhat.com/errata/RHSA-2026:26319 https://access.redhat.com/errata/RHSA-2026:29197 https://access.redhat.com/errata/RHSA-2026:34102 https://access.redhat.com/errata/RHSA-2026:35869 https://access.redhat.com/errata/RHSA-2026:36215 https://access.redhat.com/errata/RHSA-2026:36217 https://access.redhat.com/errata/RHSA-2026:39009 https://access.redhat.com/errata/RHSA-2026:39012 https://access.redhat.com/errata/RHSA-2026:39981 https://access.redhat.com/errata/RHSA-2026:44438 https://access.redhat.com/errata/RHSA-2026:47735 https://access.redhat.com/errata/RHSA-2026:47737 https://access.redhat.com/errata/RHSA-2026:58563 https://access.redhat.com/errata/RHSA-2026:58981 https://access.redhat.com/errata/RHSA-2026:59831 https://access.redhat.com/errata/RHSA-2026:66524 https://access.redhat.com/security/cve/CVE-2026-45447 https://bugzilla.redhat.com/2481898 https://bugzilla.redhat.com/show_bug.cgi?id=2481879 https://bugzilla.redhat.com/show_bug.cgi?id=2481880 https://bugzilla.redhat.com/show_bug.cgi?id=2481881 https://bugzilla.redhat.com/show_bug.cgi?id=2481882 https://bugzilla.redhat.com/show_bug.cgi?id=2481884 https://bugzilla.redhat.com/show_bug.cgi?id=2481885 https://bugzilla.redhat.com/show_bug.cgi?id=2481887 https://bugzilla.redhat.com/show_bug.cgi?id=2481890 https://bugzilla.redhat.com/show_bug.cgi?id=2481891 https://bugzilla.redhat.com/show_bug.cgi?id=2481892 https://bugzilla.redhat.com/show_bug.cgi?id=2481893 https://bugzilla.redhat.com/show_bug.cgi?id=2481894 https://bugzilla.redhat.com/show_bug.cgi?id=2481896 https://bugzilla.redhat.com/show_bug.cgi?id=2481897 https://bugzilla.redhat.com/show_bug.cgi?id=2481898 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34180 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34181 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34182 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34183 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42764 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42766 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42767 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42768 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42769 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42770 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45445 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45446 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45447 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7383 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9076 https://errata.almalinux.org/9/ALSA-2026-44438.html https://errata.rockylinux.org/RLSA-2026:25239 https://github.com/advisories/GHSA-f684-cpcq-j565 https://github.com/openssl/openssl/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c https://github.com/openssl/openssl/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8 https://github.com/openssl/openssl/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54 https://github.com/openssl/openssl/commit/a541ae8bfe849a30cc885e8780715c0f488e496c https://github.com/openssl/openssl/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e https://github.com/openssl/security/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c https://github.com/openssl/security/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8 https://github.com/openssl/security/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54 https://github.com/openssl/security/commit/a541ae8bfe849a30cc885e8780715c0f488e496c https://github.com/openssl/security/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e https://linux.oracle.com/cve/CVE-2026-45447.html https://linux.oracle.com/errata/ELSA-2026-50379.html https://nvd.nist.gov/vuln/detail/CVE-2026-45447 https://openssl-library.org/news/secadv/20260609.txt https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45447.json https://ubuntu.com/security/notices/USN-8414-1 https://ubuntu.com/security/notices/USN-8414-2 https://www.cve.org/CVERecord?id=CVE-2026-45447
libssl3	CVE-2026-84782	HIGH	3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.30	https://access.redhat.com/errata/RHSA-2026:77396 https://access.redhat.com/errata/RHSA-2026:80514 https://access.redhat.com/security/cve/CVE-2026-84782 https://bugzilla.redhat.com/2517560 https://bugzilla.redhat.com/2537080 https://bugzilla.redhat.com/show_bug.cgi?id=2537080 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-84782 https://errata.almalinux.org/9/ALSA-2026-80514.html https://errata.rockylinux.org/RLSA-2026:77396 https://github.com/openssl/openssl/commit/906cf0ef1c85ca40ce69163e9086d6d3fe292943 https://github.com/openssl/openssl/commit/9f6b34422af7eb5dac61322e33dac1ae989fa628 https://github.com/openssl/openssl/commit/a383dafdd754eb5b22bf45e37e1bff9d07277a58 https://github.com/openssl/openssl/commit/d951e02ede8f6a6ff8150546db44b34f0518192c https://linux.oracle.com/cve/CVE-2026-84782.html https://linux.oracle.com/errata/ELSA-2026-85968.html https://nvd.nist.gov/vuln/detail/CVE-2026-84782 https://openssl-library.org/news/secadv/20260929.txt https://openssl-library.org/news/vulnerabilities/#CVE-2026-84782 https://ubuntu.com/security/notices/USN-8847-1 https://ubuntu.com/security/notices/USN-8847-2 https://www.cve.org/CVERecord?id=CVE-2026-84782
libtiff5	CVE-2025-9900	HIGH	4.3.0-6ubuntu0.10	4.3.0-6ubuntu0.12	http://www.openwall.com/lists/oss-security/2025/09/26/3 https://access.redhat.com/errata/RHSA-2025:17651 https://access.redhat.com/errata/RHSA-2025:17675 https://access.redhat.com/errata/RHSA-2025:17710 https://access.redhat.com/errata/RHSA-2025:17738 https://access.redhat.com/errata/RHSA-2025:17739 https://access.redhat.com/errata/RHSA-2025:17740 https://access.redhat.com/errata/RHSA-2025:19113 https://access.redhat.com/errata/RHSA-2025:19156 https://access.redhat.com/errata/RHSA-2025:19276 https://access.redhat.com/errata/RHSA-2025:19906 https://access.redhat.com/errata/RHSA-2025:19947 https://access.redhat.com/errata/RHSA-2025:20956 https://access.redhat.com/errata/RHSA-2025:20998 https://access.redhat.com/errata/RHSA-2025:21060 https://access.redhat.com/errata/RHSA-2025:21061 https://access.redhat.com/errata/RHSA-2025:21062 https://access.redhat.com/errata/RHSA-2025:21407 https://access.redhat.com/errata/RHSA-2025:21506 https://access.redhat.com/errata/RHSA-2025:21507 https://access.redhat.com/errata/RHSA-2025:21508 https://access.redhat.com/errata/RHSA-2025:21994 https://access.redhat.com/errata/RHSA-2025:23078 https://access.redhat.com/errata/RHSA-2025:23079 https://access.redhat.com/errata/RHSA-2025:23080 https://access.redhat.com/errata/RHSA-2026:0001 https://access.redhat.com/errata/RHSA-2026:0076 https://access.redhat.com/errata/RHSA-2026:0077 https://access.redhat.com/errata/RHSA-2026:0078 https://access.redhat.com/errata/RHSA-2026:3461 https://access.redhat.com/errata/RHSA-2026:3462 https://access.redhat.com/errata/RHSA-2026:7504 https://access.redhat.com/security/cve/CVE-2025-9900 https://bugzilla.redhat.com/2383598 https://bugzilla.redhat.com/2392784 https://bugzilla.redhat.com/show_bug.cgi?id=2383598 https://bugzilla.redhat.com/show_bug.cgi?id=2392784 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8176 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9900 https://errata.almalinux.org/9/ALSA-2025-20956.html https://errata.rockylinux.org/RLSA-2025:20956 https://github.com/SexyShoelessGodofWar/LibTiff-4.7.0-Write-What-Where?tab=readme-ov-file https://gitlab.com/libtiff/libtiff/-/commit/3e0dcf0ec651638b2bd849b2e6f3124b36890d99%20%28v4.7.1rc1%29 https://gitlab.com/libtiff/libtiff/-/issues/704 https://gitlab.com/libtiff/libtiff/-/merge_requests/732 https://libtiff.gitlab.io/libtiff/releases/v4.7.1.html https://linux.oracle.com/cve/CVE-2025-9900.html https://linux.oracle.com/errata/ELSA-2025-21407.html https://lists.debian.org/debian-lts-announce/2025/09/msg00031.html https://nvd.nist.gov/vuln/detail/CVE-2025-9900 https://ubuntu.com/security/notices/USN-7783-1 https://ubuntu.com/security/notices/USN-8345-1 https://ubuntu.com/security/notices/USN-8346-1 https://ubuntu.com/security/notices/USN-8347-1 https://www.cve.org/CVERecord?id=CVE-2025-9900
openssl	CVE-2026-45447	HIGH	3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.25	https://access.redhat.com/errata/RHSA-2026:25237 https://access.redhat.com/errata/RHSA-2026:25239 https://access.redhat.com/errata/RHSA-2026:26275 https://access.redhat.com/errata/RHSA-2026:26319 https://access.redhat.com/errata/RHSA-2026:29197 https://access.redhat.com/errata/RHSA-2026:34102 https://access.redhat.com/errata/RHSA-2026:35869 https://access.redhat.com/errata/RHSA-2026:36215 https://access.redhat.com/errata/RHSA-2026:36217 https://access.redhat.com/errata/RHSA-2026:39009 https://access.redhat.com/errata/RHSA-2026:39012 https://access.redhat.com/errata/RHSA-2026:39981 https://access.redhat.com/errata/RHSA-2026:44438 https://access.redhat.com/errata/RHSA-2026:47735 https://access.redhat.com/errata/RHSA-2026:47737 https://access.redhat.com/errata/RHSA-2026:58563 https://access.redhat.com/errata/RHSA-2026:58981 https://access.redhat.com/errata/RHSA-2026:59831 https://access.redhat.com/errata/RHSA-2026:66524 https://access.redhat.com/security/cve/CVE-2026-45447 https://bugzilla.redhat.com/2481898 https://bugzilla.redhat.com/show_bug.cgi?id=2481879 https://bugzilla.redhat.com/show_bug.cgi?id=2481880 https://bugzilla.redhat.com/show_bug.cgi?id=2481881 https://bugzilla.redhat.com/show_bug.cgi?id=2481882 https://bugzilla.redhat.com/show_bug.cgi?id=2481884 https://bugzilla.redhat.com/show_bug.cgi?id=2481885 https://bugzilla.redhat.com/show_bug.cgi?id=2481887 https://bugzilla.redhat.com/show_bug.cgi?id=2481890 https://bugzilla.redhat.com/show_bug.cgi?id=2481891 https://bugzilla.redhat.com/show_bug.cgi?id=2481892 https://bugzilla.redhat.com/show_bug.cgi?id=2481893 https://bugzilla.redhat.com/show_bug.cgi?id=2481894 https://bugzilla.redhat.com/show_bug.cgi?id=2481896 https://bugzilla.redhat.com/show_bug.cgi?id=2481897 https://bugzilla.redhat.com/show_bug.cgi?id=2481898 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34180 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34181 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34182 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34183 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42764 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42766 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42767 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42768 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42769 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42770 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45445 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45446 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45447 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7383 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9076 https://errata.almalinux.org/9/ALSA-2026-44438.html https://errata.rockylinux.org/RLSA-2026:25239 https://github.com/advisories/GHSA-f684-cpcq-j565 https://github.com/openssl/openssl/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c https://github.com/openssl/openssl/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8 https://github.com/openssl/openssl/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54 https://github.com/openssl/openssl/commit/a541ae8bfe849a30cc885e8780715c0f488e496c https://github.com/openssl/openssl/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e https://github.com/openssl/security/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c https://github.com/openssl/security/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8 https://github.com/openssl/security/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54 https://github.com/openssl/security/commit/a541ae8bfe849a30cc885e8780715c0f488e496c https://github.com/openssl/security/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e https://linux.oracle.com/cve/CVE-2026-45447.html https://linux.oracle.com/errata/ELSA-2026-50379.html https://nvd.nist.gov/vuln/detail/CVE-2026-45447 https://openssl-library.org/news/secadv/20260609.txt https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45447.json https://ubuntu.com/security/notices/USN-8414-1 https://ubuntu.com/security/notices/USN-8414-2 https://www.cve.org/CVERecord?id=CVE-2026-45447
openssl	CVE-2026-84782	HIGH	3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.30	https://access.redhat.com/errata/RHSA-2026:77396 https://access.redhat.com/errata/RHSA-2026:80514 https://access.redhat.com/security/cve/CVE-2026-84782 https://bugzilla.redhat.com/2517560 https://bugzilla.redhat.com/2537080 https://bugzilla.redhat.com/show_bug.cgi?id=2537080 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-84782 https://errata.almalinux.org/9/ALSA-2026-80514.html https://errata.rockylinux.org/RLSA-2026:77396 https://github.com/openssl/openssl/commit/906cf0ef1c85ca40ce69163e9086d6d3fe292943 https://github.com/openssl/openssl/commit/9f6b34422af7eb5dac61322e33dac1ae989fa628 https://github.com/openssl/openssl/commit/a383dafdd754eb5b22bf45e37e1bff9d07277a58 https://github.com/openssl/openssl/commit/d951e02ede8f6a6ff8150546db44b34f0518192c https://linux.oracle.com/cve/CVE-2026-84782.html https://linux.oracle.com/errata/ELSA-2026-85968.html https://nvd.nist.gov/vuln/detail/CVE-2026-84782 https://openssl-library.org/news/secadv/20260929.txt https://openssl-library.org/news/vulnerabilities/#CVE-2026-84782 https://ubuntu.com/security/notices/USN-8847-1 https://ubuntu.com/security/notices/USN-8847-2 https://www.cve.org/CVERecord?id=CVE-2026-84782
No Misconfigurations found
node-pkg
No Vulnerabilities found
No Misconfigurations found
python-pkg
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
anyio	CVE-2026-63374	CRITICAL	4.13.0	4.14.2	https://access.redhat.com/security/cve/CVE-2026-63374 https://advisory.echohq.com/cve/CVE-2026-63374 https://github.com/advisories/GHSA-82r6-8w77-94w6 https://github.com/agronholm/anyio https://github.com/agronholm/anyio/commit/68f58915f82d9be8109ebbbd8f5d70577d43f2ce https://github.com/agronholm/anyio/pull/1208 https://github.com/agronholm/anyio/releases/tag/4.14.2 https://github.com/agronholm/anyio/security/advisories/GHSA-82r6-8w77-94w6 https://nvd.nist.gov/vuln/detail/CVE-2026-63374 https://www.cve.org/CVERecord?id=CVE-2026-63374
certifi	GHSA-6q48-6c7w-9gw2	CRITICAL	2026.2.25	2026.10.18	https://advisory.echohq.com/cve/GHSA-6q48-6c7w-9gw2 https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576 https://emudhra.we-have-a-problem.com https://github.com/advisories/GHSA-6q48-6c7w-9gw2 https://github.com/certifi/python-certifi https://github.com/certifi/python-certifi/security/advisories/GHSA-6q48-6c7w-9gw2
cryptography	CVE-2026-69247	HIGH	46.0.7	50.0.0	https://access.redhat.com/security/cve/CVE-2026-69247 https://advisory.echohq.com/cve/CVE-2026-69247 https://github.com/pyca/cryptography https://github.com/pyca/cryptography/commit/53fccd93413a8d7f07d6d8999681f27b75cffa3f https://github.com/pyca/cryptography/pull/15369 https://github.com/pyca/cryptography/security/advisories/GHSA-g6cj-pr64-35w5 https://nvd.nist.gov/vuln/detail/CVE-2026-69247 https://ubuntu.com/security/notices/USN-8776-1 https://www.cve.org/CVERecord?id=CVE-2026-69247
cryptography	CVE-2026-69249	HIGH	46.0.7	49.0.0	https://access.redhat.com/errata/RHSA-2026:64774 https://access.redhat.com/security/cve/CVE-2026-69249 https://advisory.echohq.com/cve/CVE-2026-69249 https://bugzilla.redhat.com/2510815 https://bugzilla.redhat.com/2510830 https://bugzilla.redhat.com/show_bug.cgi?id=2510815 https://bugzilla.redhat.com/show_bug.cgi?id=2510830 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69248 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69249 https://errata.almalinux.org/9/ALSA-2026-64774.html https://errata.rockylinux.org/RLSA-2026:64774 https://github.com/pyca/cryptography https://github.com/pyca/cryptography/commit/3763aa79b https://github.com/pyca/cryptography/commit/4a12cf49675a184e47f912b00b04f3a629283582 https://github.com/pyca/cryptography/pull/14960 https://github.com/pyca/cryptography/security/advisories/GHSA-jwv3-5hgf-82ww https://github.com/pypa/advisory-database/tree/main/vulns/cryptography/PYSEC-2026-3553.yaml https://linux.oracle.com/cve/CVE-2026-69249.html https://linux.oracle.com/errata/ELSA-2026-71658.html https://nvd.nist.gov/vuln/detail/CVE-2026-69249 https://ubuntu.com/security/notices/USN-8776-1 https://www.cve.org/CVERecord?id=CVE-2026-69249
cryptography	GHSA-537c-gmf6-5ccf	HIGH	46.0.7	48.0.1	https://advisory.echohq.com/cve/GHSA-537c-gmf6-5ccf https://github.com/advisories/GHSA-537c-gmf6-5ccf https://github.com/pyca/cryptography https://github.com/pyca/cryptography/security/advisories/GHSA-537c-gmf6-5ccf https://openssl-library.org/news/secadv/20260609.txt
httplib2	CVE-2026-59939	HIGH	0.31.2	0.32.0	https://access.redhat.com/errata/RHSA-2026:50317 https://access.redhat.com/security/cve/CVE-2026-59939 https://advisory.echohq.com/cve/CVE-2026-59939 https://bugzilla.redhat.com/2498212 https://bugzilla.redhat.com/show_bug.cgi?id=2498212 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59939 https://errata.almalinux.org/9/ALSA-2026-50317.html https://errata.rockylinux.org/RLSA-2026:50317 https://github.com/httplib2/httplib2 https://github.com/httplib2/httplib2/commit/87581ad6cf752fe3da2090c59058261d2d00a427 https://github.com/httplib2/httplib2/releases/tag/v0.32.0 https://github.com/httplib2/httplib2/security/advisories/GHSA-j5g9-f88f-gfj3 https://github.com/pypa/advisory-database/tree/main/vulns/httplib2/PYSEC-2026-3444.yaml https://linux.oracle.com/cve/CVE-2026-59939.html https://linux.oracle.com/errata/ELSA-2026-50317-0.html https://lists.debian.org/debian-lts-announce/2026/08/msg00039.html https://nvd.nist.gov/vuln/detail/CVE-2026-59939 https://ubuntu.com/security/notices/USN-8537-1 https://www.cve.org/CVERecord?id=CVE-2026-59939
jaraco.context	CVE-2026-23949	HIGH	5.3.0	6.1.0	https://access.redhat.com/security/cve/CVE-2026-23949 https://advisory.echohq.com/cve/CVE-2026-23949 https://github.com/jaraco/jaraco.context https://github.com/jaraco/jaraco.context/blob/main/jaraco/context/__init__.py#L74-L91 https://github.com/jaraco/jaraco.context/commit/7b26a42b525735e4085d2e994e13802ea339d5f9 https://github.com/jaraco/jaraco.context/security/advisories/GHSA-58pv-8j8x-9vj2 https://github.com/pypa/setuptools/blob/main/setuptools/_vendor/jaraco/context.py#L55-L76 https://nvd.nist.gov/vuln/detail/CVE-2026-23949 https://ubuntu.com/security/notices/USN-7979-1 https://www.cve.org/CVERecord?id=CVE-2026-23949
jaraco.context	CVE-2026-23949	HIGH	5.3.0	6.1.0	https://access.redhat.com/security/cve/CVE-2026-23949 https://advisory.echohq.com/cve/CVE-2026-23949 https://github.com/jaraco/jaraco.context https://github.com/jaraco/jaraco.context/blob/main/jaraco/context/__init__.py#L74-L91 https://github.com/jaraco/jaraco.context/commit/7b26a42b525735e4085d2e994e13802ea339d5f9 https://github.com/jaraco/jaraco.context/security/advisories/GHSA-58pv-8j8x-9vj2 https://github.com/pypa/setuptools/blob/main/setuptools/_vendor/jaraco/context.py#L55-L76 https://nvd.nist.gov/vuln/detail/CVE-2026-23949 https://ubuntu.com/security/notices/USN-7979-1 https://www.cve.org/CVERecord?id=CVE-2026-23949
lxml	CVE-2026-41066	HIGH	6.0.4	6.1.0	https://access.redhat.com/security/cve/CVE-2026-41066 https://advisory.echohq.com/cve/CVE-2026-41066 https://bugs.launchpad.net/lxml/+bug/2146291 https://github.com/lxml/lxml https://github.com/lxml/lxml/releases/tag/lxml-6.1.0 https://github.com/lxml/lxml/security/advisories/GHSA-vfmq-68hx-4jfw https://github.com/pypa/advisory-database/tree/main/vulns/lxml/PYSEC-2026-87.yaml https://nvd.nist.gov/vuln/detail/CVE-2026-41066 https://ubuntu.com/security/notices/USN-8897-1 https://www.cve.org/CVERecord?id=CVE-2026-41066
pyasn1	CVE-2026-119194	HIGH	0.6.3	0.6.5	https://access.redhat.com/security/cve/CVE-2026-119194 https://advisory.echohq.com/cve/CVE-2026-119194 https://github.com/pyasn1/pyasn1 https://github.com/pyasn1/pyasn1/commit/a36e3a3d067148d26197a6b7221fd0e2cde9cc86 https://github.com/pyasn1/pyasn1/pull/132 https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5 https://github.com/pyasn1/pyasn1/security/advisories/GHSA-fm9c-5rcf-2q5p https://nvd.nist.gov/vuln/detail/CVE-2026-119194 https://www.cve.org/CVERecord?id=CVE-2026-119194
pyasn1	CVE-2026-119195	HIGH	0.6.3	0.6.5	https://access.redhat.com/security/cve/CVE-2026-119195 https://advisory.echohq.com/cve/CVE-2026-119195 https://github.com/pyasn1/pyasn1 https://github.com/pyasn1/pyasn1/commit/4ce00797c594b59c1fd6b86d9ebc3ba87b7ec9f9 https://github.com/pyasn1/pyasn1/pull/132 https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5 https://github.com/pyasn1/pyasn1/security/advisories/GHSA-9m75-vc3g-4x39 https://nvd.nist.gov/vuln/detail/CVE-2026-119195 https://www.cve.org/CVERecord?id=CVE-2026-119195
pyasn1	CVE-2026-119196	HIGH	0.6.3	0.6.5	https://access.redhat.com/security/cve/CVE-2026-119196 https://advisory.echohq.com/cve/CVE-2026-119196 https://github.com/pyasn1/pyasn1 https://github.com/pyasn1/pyasn1/commit/73ba7b043cc7e92cb37f16f2c955bff93b0e6f6c https://github.com/pyasn1/pyasn1/pull/132 https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5 https://github.com/pyasn1/pyasn1/security/advisories/GHSA-2qm8-x737-gmw5 https://nvd.nist.gov/vuln/detail/CVE-2026-119196 https://www.cve.org/CVERecord?id=CVE-2026-119196
pyasn1	CVE-2026-119197	HIGH	0.6.3	0.6.5	https://access.redhat.com/security/cve/CVE-2026-119197 https://advisory.echohq.com/cve/CVE-2026-119197 https://github.com/pyasn1/pyasn1 https://github.com/pyasn1/pyasn1/commit/ce3ec3390784780a530047e0e77be5ff457636a4 https://github.com/pyasn1/pyasn1/pull/132 https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5 https://github.com/pyasn1/pyasn1/security/advisories/GHSA-mm57-4v3p-rchx https://nvd.nist.gov/vuln/detail/CVE-2026-119197 https://www.cve.org/CVERecord?id=CVE-2026-119197
pyasn1	CVE-2026-59884	HIGH	0.6.3	0.6.4	https://access.redhat.com/security/cve/CVE-2026-59884 https://advisory.echohq.com/cve/CVE-2026-59884 https://github.com/pyasn1/pyasn1 https://github.com/pyasn1/pyasn1/commit/628e36ecbb5277a3f01572ce418ef54271b165a5 https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4 https://github.com/pyasn1/pyasn1/security/advisories/GHSA-m4p7-r5rc-7g4j https://github.com/pypa/advisory-database/tree/main/vulns/pyasn1/PYSEC-2026-3455.yaml https://nvd.nist.gov/vuln/detail/CVE-2026-59884 https://ubuntu.com/security/notices/USN-8712-1 https://www.cve.org/CVERecord?id=CVE-2026-59884
pyasn1	CVE-2026-59885	HIGH	0.6.3	0.6.4	https://access.redhat.com/security/cve/CVE-2026-59885 https://advisory.echohq.com/cve/CVE-2026-59885 https://github.com/pyasn1/pyasn1 https://github.com/pyasn1/pyasn1/commit/45bdb19eb7df4b3780fe9c912c63e99bffc39dd9 https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4 https://github.com/pyasn1/pyasn1/security/advisories/GHSA-8ppf-4f7h-5ppj https://nvd.nist.gov/vuln/detail/CVE-2026-59885 https://ubuntu.com/security/notices/USN-8712-1 https://www.cve.org/CVERecord?id=CVE-2026-59885
pyasn1	CVE-2026-59886	HIGH	0.6.3	0.6.4	https://access.redhat.com/errata/RHSA-2026:59242 https://access.redhat.com/security/cve/CVE-2026-59886 https://advisory.echohq.com/cve/CVE-2026-59886 https://bugzilla.redhat.com/2500041 https://bugzilla.redhat.com/show_bug.cgi?id=2500041 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59886 https://errata.almalinux.org/9/ALSA-2026-59242.html https://errata.rockylinux.org/RLSA-2026:59242 https://github.com/pyasn1/pyasn1 https://github.com/pyasn1/pyasn1/commit/e60c691cb91addb8fcefa2f537e85ede6fb1e886 https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4 https://github.com/pyasn1/pyasn1/security/advisories/GHSA-hm4w-wwcw-mr6r https://linux.oracle.com/cve/CVE-2026-59886.html https://linux.oracle.com/errata/ELSA-2026-59243.html https://nvd.nist.gov/vuln/detail/CVE-2026-59886 https://ubuntu.com/security/notices/USN-8712-1 https://www.cve.org/CVERecord?id=CVE-2026-59886
setuptools	CVE-2025-47273	HIGH	75.2.0	78.1.1	https://access.redhat.com/errata/RHSA-2025:10407 https://access.redhat.com/errata/RHSA-2025:13578 https://access.redhat.com/security/cve/CVE-2025-47273 https://advisory.echohq.com/cve/CVE-2025-47273 https://bugzilla.redhat.com/2366982 https://bugzilla.redhat.com/show_bug.cgi?id=2366982 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47273 https://errata.almalinux.org/9/ALSA-2025-13578.html https://errata.rockylinux.org/RLSA-2025:10407 https://github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2025-49.yaml https://github.com/pypa/setuptools https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88 https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b https://github.com/pypa/setuptools/issues/4946 https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf https://linux.oracle.com/cve/CVE-2025-47273.html https://linux.oracle.com/errata/ELSA-2025-9940.html https://lists.debian.org/debian-lts-announce/2025/05/msg00035.html https://nvd.nist.gov/vuln/detail/CVE-2025-47273 https://ubuntu.com/security/notices/USN-7544-1 https://ubuntu.com/security/notices/USN-8010-1 https://www.cve.org/CVERecord?id=CVE-2025-47273
setuptools	CVE-2025-47273	HIGH	75.2.0	78.1.1	https://access.redhat.com/errata/RHSA-2025:10407 https://access.redhat.com/errata/RHSA-2025:13578 https://access.redhat.com/security/cve/CVE-2025-47273 https://advisory.echohq.com/cve/CVE-2025-47273 https://bugzilla.redhat.com/2366982 https://bugzilla.redhat.com/show_bug.cgi?id=2366982 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47273 https://errata.almalinux.org/9/ALSA-2025-13578.html https://errata.rockylinux.org/RLSA-2025:10407 https://github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2025-49.yaml https://github.com/pypa/setuptools https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88 https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b https://github.com/pypa/setuptools/issues/4946 https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf https://linux.oracle.com/cve/CVE-2025-47273.html https://linux.oracle.com/errata/ELSA-2025-9940.html https://lists.debian.org/debian-lts-announce/2025/05/msg00035.html https://nvd.nist.gov/vuln/detail/CVE-2025-47273 https://ubuntu.com/security/notices/USN-7544-1 https://ubuntu.com/security/notices/USN-8010-1 https://www.cve.org/CVERecord?id=CVE-2025-47273
urllib3	CVE-2026-44431	HIGH	2.6.3	2.7.0	https://access.redhat.com/errata/RHSA-2026:28158 https://access.redhat.com/errata/RHSA-2026:28159 https://access.redhat.com/security/cve/CVE-2026-44431 https://advisory.echohq.com/cve/CVE-2026-44431 https://bugzilla.redhat.com/2477154 https://bugzilla.redhat.com/2477167 https://bugzilla.redhat.com/show_bug.cgi?id=2477154 https://bugzilla.redhat.com/show_bug.cgi?id=2477167 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-44431 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-44432 https://errata.almalinux.org/9/ALSA-2026-28159.html https://errata.rockylinux.org/RLSA-2026:28158 https://github.com/urllib3/urllib3 https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc https://linux.oracle.com/cve/CVE-2026-44431.html https://linux.oracle.com/errata/ELSA-2026-49927.html https://lists.debian.org/debian-lts-announce/2026/06/msg00040.html https://nvd.nist.gov/vuln/detail/CVE-2026-44431 https://ubuntu.com/security/notices/USN-8379-1 https://ubuntu.com/security/notices/USN-8811-1 https://www.cve.org/CVERecord?id=CVE-2026-44431
urllib3	CVE-2026-44432	HIGH	2.6.3	2.7.0	https://access.redhat.com/errata/RHSA-2026:15862 https://access.redhat.com/errata/RHSA-2026:20338 https://access.redhat.com/errata/RHSA-2026:22934 https://access.redhat.com/errata/RHSA-2026:24000 https://access.redhat.com/errata/RHSA-2026:24009 https://access.redhat.com/errata/RHSA-2026:24014 https://access.redhat.com/errata/RHSA-2026:24069 https://access.redhat.com/errata/RHSA-2026:24374 https://access.redhat.com/errata/RHSA-2026:24476 https://access.redhat.com/errata/RHSA-2026:24483 https://access.redhat.com/errata/RHSA-2026:24540 https://access.redhat.com/errata/RHSA-2026:24541 https://access.redhat.com/errata/RHSA-2026:24542 https://access.redhat.com/errata/RHSA-2026:24544 https://access.redhat.com/errata/RHSA-2026:25039 https://access.redhat.com/errata/RHSA-2026:25143 https://access.redhat.com/errata/RHSA-2026:25928 https://access.redhat.com/errata/RHSA-2026:26212 https://access.redhat.com/errata/RHSA-2026:26304 https://access.redhat.com/errata/RHSA-2026:27929 https://access.redhat.com/errata/RHSA-2026:28000 https://access.redhat.com/errata/RHSA-2026:28157 https://access.redhat.com/errata/RHSA-2026:28158 https://access.redhat.com/errata/RHSA-2026:28159 https://access.redhat.com/errata/RHSA-2026:28571 https://access.redhat.com/errata/RHSA-2026:30076 https://access.redhat.com/errata/RHSA-2026:30078 https://access.redhat.com/errata/RHSA-2026:30087 https://access.redhat.com/errata/RHSA-2026:30088 https://access.redhat.com/errata/RHSA-2026:30089 https://access.redhat.com/errata/RHSA-2026:32992 https://access.redhat.com/errata/RHSA-2026:33313 https://access.redhat.com/errata/RHSA-2026:33683 https://access.redhat.com/errata/RHSA-2026:34160 https://access.redhat.com/errata/RHSA-2026:34374 https://access.redhat.com/errata/RHSA-2026:34526 https://access.redhat.com/errata/RHSA-2026:34531 https://access.redhat.com/errata/RHSA-2026:34533 https://access.redhat.com/errata/RHSA-2026:34607 https://access.redhat.com/errata/RHSA-2026:36350 https://access.redhat.com/errata/RHSA-2026:37275 https://access.redhat.com/errata/RHSA-2026:41066 https://access.redhat.com/errata/RHSA-2026:42078 https://access.redhat.com/errata/RHSA-2026:42079 https://access.redhat.com/errata/RHSA-2026:42132 https://access.redhat.com/errata/RHSA-2026:42144 https://access.redhat.com/errata/RHSA-2026:42644 https://access.redhat.com/errata/RHSA-2026:42796 https://access.redhat.com/errata/RHSA-2026:43038 https://access.redhat.com/errata/RHSA-2026:44481 https://access.redhat.com/errata/RHSA-2026:51206 https://access.redhat.com/errata/RHSA-2026:56347 https://access.redhat.com/errata/RHSA-2026:58981 https://access.redhat.com/errata/RHSA-2026:59409 https://access.redhat.com/errata/RHSA-2026:60362 https://access.redhat.com/errata/RHSA-2026:60371 https://access.redhat.com/errata/RHSA-2026:7625 https://access.redhat.com/errata/RHSA-2026:7634 https://access.redhat.com/security/cve/CVE-2026-44432 https://advisory.echohq.com/cve/CVE-2026-44432 https://bugzilla.redhat.com/2477154 https://bugzilla.redhat.com/2477167 https://bugzilla.redhat.com/show_bug.cgi?id=2477154 https://bugzilla.redhat.com/show_bug.cgi?id=2477167 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-44431 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-44432 https://errata.almalinux.org/9/ALSA-2026-28159.html https://errata.rockylinux.org/RLSA-2026:28158 https://github.com/pypa/advisory-database/tree/main/vulns/urllib3/PYSEC-2026-142.yaml https://github.com/urllib3/urllib3 https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j https://linux.oracle.com/cve/CVE-2026-44432.html https://linux.oracle.com/errata/ELSA-2026-32992.html https://nvd.nist.gov/vuln/detail/CVE-2026-44432 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44432.json https://ubuntu.com/security/notices/USN-8379-1 https://www.cve.org/CVERecord?id=CVE-2026-44432
urllib3	CVE-2026-97687	HIGH	2.6.3	2.8.0	https://access.redhat.com/errata/RHSA-2026:90494 https://access.redhat.com/security/cve/CVE-2026-97687 https://advisory.echohq.com/cve/CVE-2026-97687 https://bugzilla.redhat.com/2543245 https://bugzilla.redhat.com/2543255 https://bugzilla.redhat.com/show_bug.cgi?id=2543245 https://bugzilla.redhat.com/show_bug.cgi?id=2543255 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97687 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97689 https://errata.almalinux.org/9/ALSA-2026-90494.html https://errata.rockylinux.org/RLSA-2026:90494 https://github.com/urllib3/urllib3 https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465 https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3 https://github.com/urllib3/urllib3/pull/5093 https://github.com/urllib3/urllib3/releases/tag/2.8.0 https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77 https://linux.oracle.com/cve/CVE-2026-97687.html https://linux.oracle.com/errata/ELSA-2026-92474.html https://nvd.nist.gov/vuln/detail/CVE-2026-97687 https://ubuntu.com/security/notices/USN-8926-1 https://www.cve.org/CVERecord?id=CVE-2026-97687
urllib3	CVE-2026-97689	HIGH	2.6.3	2.8.0	https://access.redhat.com/errata/RHSA-2026:90494 https://access.redhat.com/security/cve/CVE-2026-97689 https://advisory.echohq.com/cve/CVE-2026-97689 https://bugzilla.redhat.com/2543245 https://bugzilla.redhat.com/2543255 https://bugzilla.redhat.com/show_bug.cgi?id=2543245 https://bugzilla.redhat.com/show_bug.cgi?id=2543255 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97687 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97689 https://errata.almalinux.org/9/ALSA-2026-90494.html https://errata.rockylinux.org/RLSA-2026:90494 https://github.com/urllib3/urllib3 https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed https://github.com/urllib3/urllib3/releases/tag/2.8.0 https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw https://linux.oracle.com/cve/CVE-2026-97689.html https://linux.oracle.com/errata/ELSA-2026-92474.html https://nvd.nist.gov/vuln/detail/CVE-2026-97689 https://ubuntu.com/security/notices/USN-8926-1 https://www.cve.org/CVERecord?id=CVE-2026-97689
virtualenv	CVE-2026-102925	HIGH	20.27.0	21.7.13	https://access.redhat.com/security/cve/CVE-2026-102925 https://advisory.echohq.com/cve/CVE-2026-102925 https://github.com/pypa/advisory-database/tree/main/vulns/virtualenv/PYSEC-2026-4013.yaml https://github.com/pypa/virtualenv https://github.com/pypa/virtualenv/commit/4d5a105ec2a2723b8c7f4571bb68f4f71d01e3f6 https://github.com/pypa/virtualenv/pull/3252 https://github.com/pypa/virtualenv/releases/tag/21.7.13 https://github.com/pypa/virtualenv/security/advisories/GHSA-p58f-9548-mpm2 https://nvd.nist.gov/vuln/detail/CVE-2026-102925 https://pypi.org/project/virtualenv https://www.cve.org/CVERecord?id=CVE-2026-102925
virtualenv	CVE-2026-102930	HIGH	20.27.0	21.7.12	https://access.redhat.com/security/cve/CVE-2026-102930 https://advisory.echohq.com/cve/CVE-2026-102930 https://github.com/pypa/advisory-database/tree/main/vulns/virtualenv/PYSEC-2026-4011.yaml https://github.com/pypa/virtualenv https://github.com/pypa/virtualenv/commit/a01ed3e2f239d6ab1fce62c5c7664ccf268fff6d https://github.com/pypa/virtualenv/pull/3251 https://github.com/pypa/virtualenv/releases/tag/21.7.12 https://github.com/pypa/virtualenv/security/advisories/GHSA-94p9-xgh2-xp45 https://nvd.nist.gov/vuln/detail/CVE-2026-102930 https://pypi.org/project/virtualenv https://www.cve.org/CVERecord?id=CVE-2026-102930
virtualenv	CVE-2026-102937	HIGH	20.27.0	21.7.12	https://access.redhat.com/security/cve/CVE-2026-102937 https://advisory.echohq.com/cve/CVE-2026-102937 https://github.com/pypa/advisory-database/tree/main/vulns/virtualenv/PYSEC-2026-4014.yaml https://github.com/pypa/virtualenv https://github.com/pypa/virtualenv/commit/d721ff140ce4afdc2a9b76751e4584e25d9fbea6 https://github.com/pypa/virtualenv/pull/3250 https://github.com/pypa/virtualenv/releases/tag/21.7.12 https://github.com/pypa/virtualenv/security/advisories/GHSA-x78j-v8h9-3j2q https://nvd.nist.gov/vuln/detail/CVE-2026-102937 https://pypi.org/project/virtualenv https://www.cve.org/CVERecord?id=CVE-2026-102937
virtualenv	CVE-2026-113718	HIGH	20.27.0	21.14.9	https://access.redhat.com/security/cve/CVE-2026-113718 https://advisory.echohq.com/cve/CVE-2026-113718 https://github.com/pypa/virtualenv https://github.com/pypa/virtualenv/commit/e5fc2e6e189a877ff559af288919e3525d13e5e0 https://github.com/pypa/virtualenv/pull/3432 https://github.com/pypa/virtualenv/releases/tag/21.14.9 https://github.com/pypa/virtualenv/security/advisories/GHSA-394h-qwmc-48pf https://nvd.nist.gov/vuln/detail/CVE-2026-113718 https://www.cve.org/CVERecord?id=CVE-2026-113718
virtualenv	CVE-2026-113722	HIGH	20.27.0	21.14.9	https://access.redhat.com/security/cve/CVE-2026-113722 https://advisory.echohq.com/cve/CVE-2026-113722 https://github.com/pypa/virtualenv https://github.com/pypa/virtualenv/commit/2519941bed33ee0d3ac99277f67913e439e476a9 https://github.com/pypa/virtualenv/pull/3417 https://github.com/pypa/virtualenv/releases/tag/21.14.9 https://github.com/pypa/virtualenv/security/advisories/GHSA-c978-59m8-c77v https://nvd.nist.gov/vuln/detail/CVE-2026-113722 https://www.cve.org/CVERecord?id=CVE-2026-113722
virtualenv	CVE-2026-113723	HIGH	20.27.0	21.14.9	https://access.redhat.com/security/cve/CVE-2026-113723 https://advisory.echohq.com/cve/CVE-2026-113723 https://github.com/pypa/virtualenv https://github.com/pypa/virtualenv/commit/5f48d711731311428aebfae61d46957762155b22 https://github.com/pypa/virtualenv/pull/3418 https://github.com/pypa/virtualenv/releases/tag/21.14.9 https://github.com/pypa/virtualenv/security/advisories/GHSA-6w3r-xr62-4xcp https://nvd.nist.gov/vuln/detail/CVE-2026-113723 https://www.cve.org/CVERecord?id=CVE-2026-113723
virtualenv	CVE-2026-113725	HIGH	20.27.0	21.14.7	https://access.redhat.com/security/cve/CVE-2026-113725 https://advisory.echohq.com/cve/CVE-2026-113725 https://github.com/pypa/virtualenv https://github.com/pypa/virtualenv/commit/c3104e02474b652832a9bbaae79f6e1696296932 https://github.com/pypa/virtualenv/releases/tag/21.14.7 https://github.com/pypa/virtualenv/security/advisories/GHSA-vxj4-q4g9-crj7 https://nvd.nist.gov/vuln/detail/CVE-2026-113725 https://www.cve.org/CVERecord?id=CVE-2026-113725
virtualenv	CVE-2026-113726	HIGH	20.27.0	21.14.4	https://access.redhat.com/security/cve/CVE-2026-113726 https://advisory.echohq.com/cve/CVE-2026-113726 https://github.com/pypa/virtualenv https://github.com/pypa/virtualenv/commit/5b915367da82bd024b2a0d28d2f98007034b4aa2 https://github.com/pypa/virtualenv/releases/tag/21.14.4 https://github.com/pypa/virtualenv/security/advisories/GHSA-5vjq-rrrf-7h2q https://nvd.nist.gov/vuln/detail/CVE-2026-113726 https://www.cve.org/CVERecord?id=CVE-2026-113726
virtualenv	CVE-2026-113732	HIGH	20.27.0	21.14.2	https://access.redhat.com/security/cve/CVE-2026-113732 https://advisory.echohq.com/cve/CVE-2026-113732 https://github.com/pypa/virtualenv https://github.com/pypa/virtualenv/commit/3bddeaf8d02c3ee7f576503efb082f8f494cfcab https://github.com/pypa/virtualenv/releases/tag/21.14.2 https://github.com/pypa/virtualenv/security/advisories/GHSA-c947-3pg5-gm8q https://nvd.nist.gov/vuln/detail/CVE-2026-113732 https://www.cve.org/CVERecord?id=CVE-2026-113732
virtualenv	CVE-2026-113776	HIGH	20.27.0	21.14.2	https://access.redhat.com/security/cve/CVE-2026-113776 https://advisory.echohq.com/cve/CVE-2026-113776 https://github.com/pypa/virtualenv https://github.com/pypa/virtualenv/commit/602b26623a724827ff171bf11fef4ad186d01f74 https://github.com/pypa/virtualenv/releases/tag/21.14.2 https://github.com/pypa/virtualenv/security/advisories/GHSA-8rjx-v5ww-45pp https://nvd.nist.gov/vuln/detail/CVE-2026-113776 https://www.cve.org/CVERecord?id=CVE-2026-113776
wheel	CVE-2026-24049	HIGH	0.43.0	0.46.2	https://access.redhat.com/errata/RHSA-2026:10184 https://access.redhat.com/errata/RHSA-2026:13545 https://access.redhat.com/errata/RHSA-2026:14020 https://access.redhat.com/errata/RHSA-2026:1504 https://access.redhat.com/errata/RHSA-2026:17599 https://access.redhat.com/errata/RHSA-2026:1902 https://access.redhat.com/errata/RHSA-2026:1939 https://access.redhat.com/errata/RHSA-2026:1942 https://access.redhat.com/errata/RHSA-2026:19712 https://access.redhat.com/errata/RHSA-2026:20089 https://access.redhat.com/errata/RHSA-2026:2090 https://access.redhat.com/errata/RHSA-2026:2106 https://access.redhat.com/errata/RHSA-2026:2139 https://access.redhat.com/errata/RHSA-2026:2675 https://access.redhat.com/errata/RHSA-2026:2681 https://access.redhat.com/errata/RHSA-2026:2694 https://access.redhat.com/errata/RHSA-2026:2695 https://access.redhat.com/errata/RHSA-2026:2710 https://access.redhat.com/errata/RHSA-2026:2754 https://access.redhat.com/errata/RHSA-2026:2762 https://access.redhat.com/errata/RHSA-2026:2823 https://access.redhat.com/errata/RHSA-2026:2865 https://access.redhat.com/errata/RHSA-2026:2866 https://access.redhat.com/errata/RHSA-2026:2900 https://access.redhat.com/errata/RHSA-2026:2925 https://access.redhat.com/errata/RHSA-2026:3461 https://access.redhat.com/errata/RHSA-2026:3462 https://access.redhat.com/errata/RHSA-2026:3713 https://access.redhat.com/errata/RHSA-2026:3782 https://access.redhat.com/errata/RHSA-2026:3958 https://access.redhat.com/errata/RHSA-2026:3959 https://access.redhat.com/errata/RHSA-2026:3960 https://access.redhat.com/errata/RHSA-2026:4185 https://access.redhat.com/errata/RHSA-2026:4215 https://access.redhat.com/errata/RHSA-2026:4271 https://access.redhat.com/errata/RHSA-2026:4942 https://access.redhat.com/errata/RHSA-2026:5119 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:6192 https://access.redhat.com/errata/RHSA-2026:62115 https://access.redhat.com/errata/RHSA-2026:6555 https://access.redhat.com/errata/RHSA-2026:6562 https://access.redhat.com/errata/RHSA-2026:6565 https://access.redhat.com/errata/RHSA-2026:7250 https://access.redhat.com/security/cve/CVE-2026-24049 https://advisory.echohq.com/cve/CVE-2026-24049 https://bugzilla.redhat.com/2431959 https://bugzilla.redhat.com/show_bug.cgi?id=2431959 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24049 https://errata.almalinux.org/9/ALSA-2026-1939.html https://errata.rockylinux.org/RLSA-2026:1939 https://github.com/pypa/wheel https://github.com/pypa/wheel/commit/7a7d2de96b22a9adf9208afcc9547e1001569fef https://github.com/pypa/wheel/commit/934fe177ff912c8e03d5ae951d3805e1fd90ba5e https://github.com/pypa/wheel/releases/tag/0.46.2 https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx https://linux.oracle.com/cve/CVE-2026-24049.html https://linux.oracle.com/errata/ELSA-2026-2090.html https://nvd.nist.gov/vuln/detail/CVE-2026-24049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24049.json https://ubuntu.com/security/notices/USN-8221-1 https://www.cve.org/CVERecord?id=CVE-2026-24049
wheel	CVE-2026-24049	HIGH	0.43.0	0.46.2	https://access.redhat.com/errata/RHSA-2026:10184 https://access.redhat.com/errata/RHSA-2026:13545 https://access.redhat.com/errata/RHSA-2026:14020 https://access.redhat.com/errata/RHSA-2026:1504 https://access.redhat.com/errata/RHSA-2026:17599 https://access.redhat.com/errata/RHSA-2026:1902 https://access.redhat.com/errata/RHSA-2026:1939 https://access.redhat.com/errata/RHSA-2026:1942 https://access.redhat.com/errata/RHSA-2026:19712 https://access.redhat.com/errata/RHSA-2026:20089 https://access.redhat.com/errata/RHSA-2026:2090 https://access.redhat.com/errata/RHSA-2026:2106 https://access.redhat.com/errata/RHSA-2026:2139 https://access.redhat.com/errata/RHSA-2026:2675 https://access.redhat.com/errata/RHSA-2026:2681 https://access.redhat.com/errata/RHSA-2026:2694 https://access.redhat.com/errata/RHSA-2026:2695 https://access.redhat.com/errata/RHSA-2026:2710 https://access.redhat.com/errata/RHSA-2026:2754 https://access.redhat.com/errata/RHSA-2026:2762 https://access.redhat.com/errata/RHSA-2026:2823 https://access.redhat.com/errata/RHSA-2026:2865 https://access.redhat.com/errata/RHSA-2026:2866 https://access.redhat.com/errata/RHSA-2026:2900 https://access.redhat.com/errata/RHSA-2026:2925 https://access.redhat.com/errata/RHSA-2026:3461 https://access.redhat.com/errata/RHSA-2026:3462 https://access.redhat.com/errata/RHSA-2026:3713 https://access.redhat.com/errata/RHSA-2026:3782 https://access.redhat.com/errata/RHSA-2026:3958 https://access.redhat.com/errata/RHSA-2026:3959 https://access.redhat.com/errata/RHSA-2026:3960 https://access.redhat.com/errata/RHSA-2026:4185 https://access.redhat.com/errata/RHSA-2026:4215 https://access.redhat.com/errata/RHSA-2026:4271 https://access.redhat.com/errata/RHSA-2026:4942 https://access.redhat.com/errata/RHSA-2026:5119 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:6192 https://access.redhat.com/errata/RHSA-2026:62115 https://access.redhat.com/errata/RHSA-2026:6555 https://access.redhat.com/errata/RHSA-2026:6562 https://access.redhat.com/errata/RHSA-2026:6565 https://access.redhat.com/errata/RHSA-2026:7250 https://access.redhat.com/security/cve/CVE-2026-24049 https://advisory.echohq.com/cve/CVE-2026-24049 https://bugzilla.redhat.com/2431959 https://bugzilla.redhat.com/show_bug.cgi?id=2431959 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24049 https://errata.almalinux.org/9/ALSA-2026-1939.html https://errata.rockylinux.org/RLSA-2026:1939 https://github.com/pypa/wheel https://github.com/pypa/wheel/commit/7a7d2de96b22a9adf9208afcc9547e1001569fef https://github.com/pypa/wheel/commit/934fe177ff912c8e03d5ae951d3805e1fd90ba5e https://github.com/pypa/wheel/releases/tag/0.46.2 https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx https://linux.oracle.com/cve/CVE-2026-24049.html https://linux.oracle.com/errata/ELSA-2026-2090.html https://nvd.nist.gov/vuln/detail/CVE-2026-24049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24049.json https://ubuntu.com/security/notices/USN-8221-1 https://www.cve.org/CVERecord?id=CVE-2026-24049
wheel	CVE-2026-24049	HIGH	0.44.0	0.46.2	https://access.redhat.com/errata/RHSA-2026:10184 https://access.redhat.com/errata/RHSA-2026:13545 https://access.redhat.com/errata/RHSA-2026:14020 https://access.redhat.com/errata/RHSA-2026:1504 https://access.redhat.com/errata/RHSA-2026:17599 https://access.redhat.com/errata/RHSA-2026:1902 https://access.redhat.com/errata/RHSA-2026:1939 https://access.redhat.com/errata/RHSA-2026:1942 https://access.redhat.com/errata/RHSA-2026:19712 https://access.redhat.com/errata/RHSA-2026:20089 https://access.redhat.com/errata/RHSA-2026:2090 https://access.redhat.com/errata/RHSA-2026:2106 https://access.redhat.com/errata/RHSA-2026:2139 https://access.redhat.com/errata/RHSA-2026:2675 https://access.redhat.com/errata/RHSA-2026:2681 https://access.redhat.com/errata/RHSA-2026:2694 https://access.redhat.com/errata/RHSA-2026:2695 https://access.redhat.com/errata/RHSA-2026:2710 https://access.redhat.com/errata/RHSA-2026:2754 https://access.redhat.com/errata/RHSA-2026:2762 https://access.redhat.com/errata/RHSA-2026:2823 https://access.redhat.com/errata/RHSA-2026:2865 https://access.redhat.com/errata/RHSA-2026:2866 https://access.redhat.com/errata/RHSA-2026:2900 https://access.redhat.com/errata/RHSA-2026:2925 https://access.redhat.com/errata/RHSA-2026:3461 https://access.redhat.com/errata/RHSA-2026:3462 https://access.redhat.com/errata/RHSA-2026:3713 https://access.redhat.com/errata/RHSA-2026:3782 https://access.redhat.com/errata/RHSA-2026:3958 https://access.redhat.com/errata/RHSA-2026:3959 https://access.redhat.com/errata/RHSA-2026:3960 https://access.redhat.com/errata/RHSA-2026:4185 https://access.redhat.com/errata/RHSA-2026:4215 https://access.redhat.com/errata/RHSA-2026:4271 https://access.redhat.com/errata/RHSA-2026:4942 https://access.redhat.com/errata/RHSA-2026:5119 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:6192 https://access.redhat.com/errata/RHSA-2026:62115 https://access.redhat.com/errata/RHSA-2026:6555 https://access.redhat.com/errata/RHSA-2026:6562 https://access.redhat.com/errata/RHSA-2026:6565 https://access.redhat.com/errata/RHSA-2026:7250 https://access.redhat.com/security/cve/CVE-2026-24049 https://advisory.echohq.com/cve/CVE-2026-24049 https://bugzilla.redhat.com/2431959 https://bugzilla.redhat.com/show_bug.cgi?id=2431959 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24049 https://errata.almalinux.org/9/ALSA-2026-1939.html https://errata.rockylinux.org/RLSA-2026:1939 https://github.com/pypa/wheel https://github.com/pypa/wheel/commit/7a7d2de96b22a9adf9208afcc9547e1001569fef https://github.com/pypa/wheel/commit/934fe177ff912c8e03d5ae951d3805e1fd90ba5e https://github.com/pypa/wheel/releases/tag/0.46.2 https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx https://linux.oracle.com/cve/CVE-2026-24049.html https://linux.oracle.com/errata/ELSA-2026-2090.html https://nvd.nist.gov/vuln/detail/CVE-2026-24049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24049.json https://ubuntu.com/security/notices/USN-8221-1 https://www.cve.org/CVERecord?id=CVE-2026-24049
wheel	CVE-2026-24049	HIGH	0.44.0	0.46.2	https://access.redhat.com/errata/RHSA-2026:10184 https://access.redhat.com/errata/RHSA-2026:13545 https://access.redhat.com/errata/RHSA-2026:14020 https://access.redhat.com/errata/RHSA-2026:1504 https://access.redhat.com/errata/RHSA-2026:17599 https://access.redhat.com/errata/RHSA-2026:1902 https://access.redhat.com/errata/RHSA-2026:1939 https://access.redhat.com/errata/RHSA-2026:1942 https://access.redhat.com/errata/RHSA-2026:19712 https://access.redhat.com/errata/RHSA-2026:20089 https://access.redhat.com/errata/RHSA-2026:2090 https://access.redhat.com/errata/RHSA-2026:2106 https://access.redhat.com/errata/RHSA-2026:2139 https://access.redhat.com/errata/RHSA-2026:2675 https://access.redhat.com/errata/RHSA-2026:2681 https://access.redhat.com/errata/RHSA-2026:2694 https://access.redhat.com/errata/RHSA-2026:2695 https://access.redhat.com/errata/RHSA-2026:2710 https://access.redhat.com/errata/RHSA-2026:2754 https://access.redhat.com/errata/RHSA-2026:2762 https://access.redhat.com/errata/RHSA-2026:2823 https://access.redhat.com/errata/RHSA-2026:2865 https://access.redhat.com/errata/RHSA-2026:2866 https://access.redhat.com/errata/RHSA-2026:2900 https://access.redhat.com/errata/RHSA-2026:2925 https://access.redhat.com/errata/RHSA-2026:3461 https://access.redhat.com/errata/RHSA-2026:3462 https://access.redhat.com/errata/RHSA-2026:3713 https://access.redhat.com/errata/RHSA-2026:3782 https://access.redhat.com/errata/RHSA-2026:3958 https://access.redhat.com/errata/RHSA-2026:3959 https://access.redhat.com/errata/RHSA-2026:3960 https://access.redhat.com/errata/RHSA-2026:4185 https://access.redhat.com/errata/RHSA-2026:4215 https://access.redhat.com/errata/RHSA-2026:4271 https://access.redhat.com/errata/RHSA-2026:4942 https://access.redhat.com/errata/RHSA-2026:5119 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:6192 https://access.redhat.com/errata/RHSA-2026:62115 https://access.redhat.com/errata/RHSA-2026:6555 https://access.redhat.com/errata/RHSA-2026:6562 https://access.redhat.com/errata/RHSA-2026:6565 https://access.redhat.com/errata/RHSA-2026:7250 https://access.redhat.com/security/cve/CVE-2026-24049 https://advisory.echohq.com/cve/CVE-2026-24049 https://bugzilla.redhat.com/2431959 https://bugzilla.redhat.com/show_bug.cgi?id=2431959 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24049 https://errata.almalinux.org/9/ALSA-2026-1939.html https://errata.rockylinux.org/RLSA-2026:1939 https://github.com/pypa/wheel https://github.com/pypa/wheel/commit/7a7d2de96b22a9adf9208afcc9547e1001569fef https://github.com/pypa/wheel/commit/934fe177ff912c8e03d5ae951d3805e1fd90ba5e https://github.com/pypa/wheel/releases/tag/0.46.2 https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx https://linux.oracle.com/cve/CVE-2026-24049.html https://linux.oracle.com/errata/ELSA-2026-2090.html https://nvd.nist.gov/vuln/detail/CVE-2026-24049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24049.json https://ubuntu.com/security/notices/USN-8221-1 https://www.cve.org/CVERecord?id=CVE-2026-24049
No Misconfigurations found

apt

CVE-2026-109518

HIGH

2.4.13

2.4.15ubuntu0.1

http://www.openwall.com/lists/oss-security/2026/11/04/12 https://access.redhat.com/security/cve/CVE-2026-109518 https://lists.debian.org/debian-lts-announce/2026/11/msg00004.html https://lists.debian.org/debian-security-announce/2026/msg00526.html https://nvd.nist.gov/vuln/detail/CVE-2026-109518 https://ubuntu.com/blog/apt-vulnerability-fixes-available https://ubuntu.com/security/notices/USN-8996-1 https://www.cve.org/CVERecord?id=CVE-2026-109518

git

CVE-2025-48384

HIGH

1:2.34.1-1ubuntu1.11

1:2.34.1-1ubuntu1.13

git-man

CVE-2025-48384

HIGH

1:2.34.1-1ubuntu1.11

1:2.34.1-1ubuntu1.13

gpg

CVE-2025-68973

HIGH

2.2.27-3ubuntu2.1

2.2.27-3ubuntu2.5

http://www.openwall.com/lists/oss-security/2025/12/29/11 https://access.redhat.com/errata/RHSA-2026:0719 https://access.redhat.com/security/cve/CVE-2025-68973 https://bugzilla.redhat.com/2425966 https://bugzilla.redhat.com/show_bug.cgi?id=2425966 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68973 https://dev.gnupg.org/T7906 https://dev.gnupg.org/T8001 https://errata.almalinux.org/9/ALSA-2026-0719.html https://errata.rockylinux.org/RLSA-2026:0719 https://github.com/advisories/GHSA-pj23-86ww-f72p https://github.com/gpg/gnupg/blob/ff30683418695f5d2cc9e6cf8c9418e09378ebe4/g10/armor.c#L1305-L1306 https://github.com/gpg/gnupg/commit/115d138ba599328005c5321c0ef9f00355838ca9 https://github.com/gpg/gnupg/commit/115d138ba599328005c5321c0ef9f00355838ca9%20%28gnupg-2.5.14%29 https://github.com/gpg/gnupg/commit/1e929abd20fa2e4be3797a137caca63a971d5372%20%28gnupg-2.2.51%29 https://github.com/gpg/gnupg/commit/4ecc5122f20e10c17172ed72f4fa46c784b5fb48%20%28gnupg-2.4.9%29 https://github.com/gpg/gnupg/compare/gnupg-2.2.50...gnupg-2.2.51 https://gpg.fail/memcpy https://linux.oracle.com/cve/CVE-2025-68973.html https://linux.oracle.com/errata/ELSA-2026-1677.html https://lists.debian.org/debian-lts-announce/2026/01/msg00008.html https://media.ccc.de/v/39c3-to-sign-or-not-to-sign-practical-vulnerabilities-i https://news.ycombinator.com/item?id=46403200 https://nvd.nist.gov/vuln/detail/CVE-2025-68973 https://ubuntu.com/security/notices/USN-7946-1 https://ubuntu.com/security/notices/USN-7946-2 https://www.cve.org/CVERecord?id=CVE-2025-68973 https://www.openwall.com/lists/oss-security/2025/12/28/5

gpgconf

CVE-2025-68973

HIGH

2.2.27-3ubuntu2.1

2.2.27-3ubuntu2.5

http://www.openwall.com/lists/oss-security/2025/12/29/11 https://access.redhat.com/errata/RHSA-2026:0719 https://access.redhat.com/security/cve/CVE-2025-68973 https://bugzilla.redhat.com/2425966 https://bugzilla.redhat.com/show_bug.cgi?id=2425966 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68973 https://dev.gnupg.org/T7906 https://dev.gnupg.org/T8001 https://errata.almalinux.org/9/ALSA-2026-0719.html https://errata.rockylinux.org/RLSA-2026:0719 https://github.com/advisories/GHSA-pj23-86ww-f72p https://github.com/gpg/gnupg/blob/ff30683418695f5d2cc9e6cf8c9418e09378ebe4/g10/armor.c#L1305-L1306 https://github.com/gpg/gnupg/commit/115d138ba599328005c5321c0ef9f00355838ca9 https://github.com/gpg/gnupg/commit/115d138ba599328005c5321c0ef9f00355838ca9%20%28gnupg-2.5.14%29 https://github.com/gpg/gnupg/commit/1e929abd20fa2e4be3797a137caca63a971d5372%20%28gnupg-2.2.51%29 https://github.com/gpg/gnupg/commit/4ecc5122f20e10c17172ed72f4fa46c784b5fb48%20%28gnupg-2.4.9%29 https://github.com/gpg/gnupg/compare/gnupg-2.2.50...gnupg-2.2.51 https://gpg.fail/memcpy https://linux.oracle.com/cve/CVE-2025-68973.html https://linux.oracle.com/errata/ELSA-2026-1677.html https://lists.debian.org/debian-lts-announce/2026/01/msg00008.html https://media.ccc.de/v/39c3-to-sign-or-not-to-sign-practical-vulnerabilities-i https://news.ycombinator.com/item?id=46403200 https://nvd.nist.gov/vuln/detail/CVE-2025-68973 https://ubuntu.com/security/notices/USN-7946-1 https://ubuntu.com/security/notices/USN-7946-2 https://www.cve.org/CVERecord?id=CVE-2025-68973 https://www.openwall.com/lists/oss-security/2025/12/28/5

gpgv

CVE-2025-68973

HIGH

2.2.27-3ubuntu2.1

2.2.27-3ubuntu2.5

http://www.openwall.com/lists/oss-security/2025/12/29/11 https://access.redhat.com/errata/RHSA-2026:0719 https://access.redhat.com/security/cve/CVE-2025-68973 https://bugzilla.redhat.com/2425966 https://bugzilla.redhat.com/show_bug.cgi?id=2425966 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68973 https://dev.gnupg.org/T7906 https://dev.gnupg.org/T8001 https://errata.almalinux.org/9/ALSA-2026-0719.html https://errata.rockylinux.org/RLSA-2026:0719 https://github.com/advisories/GHSA-pj23-86ww-f72p https://github.com/gpg/gnupg/blob/ff30683418695f5d2cc9e6cf8c9418e09378ebe4/g10/armor.c#L1305-L1306 https://github.com/gpg/gnupg/commit/115d138ba599328005c5321c0ef9f00355838ca9 https://github.com/gpg/gnupg/commit/115d138ba599328005c5321c0ef9f00355838ca9%20%28gnupg-2.5.14%29 https://github.com/gpg/gnupg/commit/1e929abd20fa2e4be3797a137caca63a971d5372%20%28gnupg-2.2.51%29 https://github.com/gpg/gnupg/commit/4ecc5122f20e10c17172ed72f4fa46c784b5fb48%20%28gnupg-2.4.9%29 https://github.com/gpg/gnupg/compare/gnupg-2.2.50...gnupg-2.2.51 https://gpg.fail/memcpy https://linux.oracle.com/cve/CVE-2025-68973.html https://linux.oracle.com/errata/ELSA-2026-1677.html https://lists.debian.org/debian-lts-announce/2026/01/msg00008.html https://media.ccc.de/v/39c3-to-sign-or-not-to-sign-practical-vulnerabilities-i https://news.ycombinator.com/item?id=46403200 https://nvd.nist.gov/vuln/detail/CVE-2025-68973 https://ubuntu.com/security/notices/USN-7946-1 https://ubuntu.com/security/notices/USN-7946-2 https://www.cve.org/CVERecord?id=CVE-2025-68973 https://www.openwall.com/lists/oss-security/2025/12/28/5

gstreamer1.0-plugins-bad

CVE-2025-3887

HIGH

1.20.3-0ubuntu1.1

https://access.redhat.com/errata/RHSA-2025:8183 https://access.redhat.com/security/cve/CVE-2025-3887 https://bugzilla.redhat.com/2367919 https://bugzilla.redhat.com/show_bug.cgi?id=2367919 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3887 https://errata.almalinux.org/9/ALSA-2025-8183.html https://errata.rockylinux.org/RLSA-2025:8183 https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/5463f0e09768ca90aa8c58357c1f4c645db580db%20%281.26.1%29 https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/b33ba2f264c8e39c7794e7452b7b57d48fab3f13%20%28main%29 https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/bcaab3609805ea10fb3d9ac0c9d947b4c3563948%20%281.26.1%29 https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/d0e18d6353e4e448ccf3b06a967b394e664dd0b5%20%28main%29 https://gstreamer.freedesktop.org/security/sa-2025-0001.html https://linux.oracle.com/cve/CVE-2025-3887.html https://linux.oracle.com/errata/ELSA-2025-8201.html https://lists.debian.org/debian-lts-announce/2025/06/msg00017.html https://nvd.nist.gov/vuln/detail/CVE-2025-3887 https://ubuntu.com/security/notices/USN-7558-1 https://ubuntu.com/security/notices/USN-8205-1 https://www.cve.org/CVERecord?id=CVE-2025-3887 https://www.zerodayinitiative.com/advisories/ZDI-25-267/

libapt-pkg6.0

CVE-2026-109518

HIGH

2.4.13

2.4.15ubuntu0.1

http://www.openwall.com/lists/oss-security/2026/11/04/12 https://access.redhat.com/security/cve/CVE-2026-109518 https://lists.debian.org/debian-lts-announce/2026/11/msg00004.html https://lists.debian.org/debian-security-announce/2026/msg00526.html https://nvd.nist.gov/vuln/detail/CVE-2026-109518 https://ubuntu.com/blog/apt-vulnerability-fixes-available https://ubuntu.com/security/notices/USN-8996-1 https://www.cve.org/CVERecord?id=CVE-2026-109518

libbrotli1

CVE-2026-111497

HIGH

1.0.9-2build6

1.0.9-2ubuntu0.1

http://www.openwall.com/lists/oss-security/2026/10/23/25 http://www.openwall.com/lists/oss-security/2026/10/24/6 http://www.openwall.com/lists/oss-security/2026/10/26/12 http://www.openwall.com/lists/oss-security/2026/10/26/13 http://www.openwall.com/lists/oss-security/2026/10/26/16 http://www.openwall.com/lists/oss-security/2026/11/03/2 https://access.redhat.com/errata/RHSA-2026:90495 https://access.redhat.com/errata/RHSA-2026:92492 https://access.redhat.com/security/cve/CVE-2026-111497 https://advisory.echohq.com/cve/CVE-2026-111497 https://broccoli2shell.com https://bugzilla.redhat.com/2558973 https://bugzilla.redhat.com/2562054 https://bugzilla.redhat.com/show_bug.cgi?id=2558973 https://cert-portal.siemens.com/productcert/html/ssa-045512.html https://cert-portal.siemens.com/productcert/html/ssa-443410.html https://cert-portal.siemens.com/productcert/html/ssa-898633.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111497 https://devblogs.microsoft.com/dotnet/dotnet-october-2026-oob-security-updates https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds/ https://errata.almalinux.org/9/ALSA-2026-92492.html https://errata.rockylinux.org/RLSA-2026:90495 https://github.com/advisories/GHSA-9v8h-qqgm-4m35 https://github.com/andybalholm/brotli/releases/tag/v1.2.7 https://github.com/dotnet/announcements/issues/494 https://github.com/google/brotli https://github.com/google/brotli/commit/0ed4268a4401abcb4472096340477cf4af7d1a2b https://github.com/google/brotli/commit/50a9b70a4d5e1443fc40927952276b68fffa83a0 https://github.com/google/brotli/commit/b418fa81c48262a86a95332b0bc6d62c30aa78b6 https://github.com/google/brotli/commit/da9806362874b9bd4b552a3af360b5d6347beb12 https://github.com/google/brotli/releases/tag/v1.0.10 https://github.com/google/brotli/releases/tag/v1.1.1 https://github.com/google/brotli/releases/tag/v1.2.1 https://github.com/pypa/advisory-database/tree/main/vulns/brotli/PYSEC-2026-4322.yaml https://github.com/pypa/advisory-database/tree/main/vulns/brotlicffi/PYSEC-2026-4323.yaml https://linux.oracle.com/cve/CVE-2026-111497.html https://linux.oracle.com/errata/ELSA-2026-92492.html https://lists.debian.org/debian-lts-announce/2026/10/msg00049.html https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114148 https://nodejs.org/en/blog/vulnerability/october-2026-security-releases https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high https://nvd.nist.gov/vuln/detail/CVE-2026-111497 https://opensourcemalware.com/blog/node2shell-affects-python https://patchtheplanet.org/brotli https://pypi.org/project/Brotli https://pypi.org/project/brotlicffi https://ubuntu.com/security/notices/USN-8956-1 https://ubuntu.com/security/notices/USN-8956-2 https://ubuntu.com/security/notices/USN-8958-1 https://www.aikido.dev/blog/node2shell-nodejs-brotli-rce-cve-2026-111497 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111497 https://www.cve.org/CVERecord?id=CVE-2026-111497

libgstreamer-plugins-bad1.0-0

CVE-2025-3887

HIGH

1.20.3-0ubuntu1.1

https://access.redhat.com/errata/RHSA-2025:8183 https://access.redhat.com/security/cve/CVE-2025-3887 https://bugzilla.redhat.com/2367919 https://bugzilla.redhat.com/show_bug.cgi?id=2367919 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3887 https://errata.almalinux.org/9/ALSA-2025-8183.html https://errata.rockylinux.org/RLSA-2025:8183 https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/5463f0e09768ca90aa8c58357c1f4c645db580db%20%281.26.1%29 https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/b33ba2f264c8e39c7794e7452b7b57d48fab3f13%20%28main%29 https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/bcaab3609805ea10fb3d9ac0c9d947b4c3563948%20%281.26.1%29 https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/d0e18d6353e4e448ccf3b06a967b394e664dd0b5%20%28main%29 https://gstreamer.freedesktop.org/security/sa-2025-0001.html https://linux.oracle.com/cve/CVE-2025-3887.html https://linux.oracle.com/errata/ELSA-2025-8201.html https://lists.debian.org/debian-lts-announce/2025/06/msg00017.html https://nvd.nist.gov/vuln/detail/CVE-2025-3887 https://ubuntu.com/security/notices/USN-7558-1 https://ubuntu.com/security/notices/USN-8205-1 https://www.cve.org/CVERecord?id=CVE-2025-3887 https://www.zerodayinitiative.com/advisories/ZDI-25-267/

libssl3

CVE-2026-45447

HIGH

3.0.2-0ubuntu1.18

3.0.2-0ubuntu1.25

libssl3

CVE-2026-84782

HIGH

3.0.2-0ubuntu1.18

3.0.2-0ubuntu1.30

https://access.redhat.com/errata/RHSA-2026:77396 https://access.redhat.com/errata/RHSA-2026:80514 https://access.redhat.com/security/cve/CVE-2026-84782 https://bugzilla.redhat.com/2517560 https://bugzilla.redhat.com/2537080 https://bugzilla.redhat.com/show_bug.cgi?id=2537080 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-84782 https://errata.almalinux.org/9/ALSA-2026-80514.html https://errata.rockylinux.org/RLSA-2026:77396 https://github.com/openssl/openssl/commit/906cf0ef1c85ca40ce69163e9086d6d3fe292943 https://github.com/openssl/openssl/commit/9f6b34422af7eb5dac61322e33dac1ae989fa628 https://github.com/openssl/openssl/commit/a383dafdd754eb5b22bf45e37e1bff9d07277a58 https://github.com/openssl/openssl/commit/d951e02ede8f6a6ff8150546db44b34f0518192c https://linux.oracle.com/cve/CVE-2026-84782.html https://linux.oracle.com/errata/ELSA-2026-85968.html https://nvd.nist.gov/vuln/detail/CVE-2026-84782 https://openssl-library.org/news/secadv/20260929.txt https://openssl-library.org/news/vulnerabilities/#CVE-2026-84782 https://ubuntu.com/security/notices/USN-8847-1 https://ubuntu.com/security/notices/USN-8847-2 https://www.cve.org/CVERecord?id=CVE-2026-84782

libtiff5

CVE-2025-9900

HIGH

4.3.0-6ubuntu0.10

4.3.0-6ubuntu0.12

openssl

CVE-2026-45447

HIGH

3.0.2-0ubuntu1.18

3.0.2-0ubuntu1.25

openssl

CVE-2026-84782

HIGH

3.0.2-0ubuntu1.18

3.0.2-0ubuntu1.30

https://access.redhat.com/errata/RHSA-2026:77396 https://access.redhat.com/errata/RHSA-2026:80514 https://access.redhat.com/security/cve/CVE-2026-84782 https://bugzilla.redhat.com/2517560 https://bugzilla.redhat.com/2537080 https://bugzilla.redhat.com/show_bug.cgi?id=2537080 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-84782 https://errata.almalinux.org/9/ALSA-2026-80514.html https://errata.rockylinux.org/RLSA-2026:77396 https://github.com/openssl/openssl/commit/906cf0ef1c85ca40ce69163e9086d6d3fe292943 https://github.com/openssl/openssl/commit/9f6b34422af7eb5dac61322e33dac1ae989fa628 https://github.com/openssl/openssl/commit/a383dafdd754eb5b22bf45e37e1bff9d07277a58 https://github.com/openssl/openssl/commit/d951e02ede8f6a6ff8150546db44b34f0518192c https://linux.oracle.com/cve/CVE-2026-84782.html https://linux.oracle.com/errata/ELSA-2026-85968.html https://nvd.nist.gov/vuln/detail/CVE-2026-84782 https://openssl-library.org/news/secadv/20260929.txt https://openssl-library.org/news/vulnerabilities/#CVE-2026-84782 https://ubuntu.com/security/notices/USN-8847-1 https://ubuntu.com/security/notices/USN-8847-2 https://www.cve.org/CVERecord?id=CVE-2026-84782

cryptography

CVE-2026-69247

HIGH

46.0.7

50.0.0

https://access.redhat.com/security/cve/CVE-2026-69247 https://advisory.echohq.com/cve/CVE-2026-69247 https://github.com/pyca/cryptography https://github.com/pyca/cryptography/commit/53fccd93413a8d7f07d6d8999681f27b75cffa3f https://github.com/pyca/cryptography/pull/15369 https://github.com/pyca/cryptography/security/advisories/GHSA-g6cj-pr64-35w5 https://nvd.nist.gov/vuln/detail/CVE-2026-69247 https://ubuntu.com/security/notices/USN-8776-1 https://www.cve.org/CVERecord?id=CVE-2026-69247

cryptography

CVE-2026-69249

HIGH

46.0.7

49.0.0

https://access.redhat.com/errata/RHSA-2026:64774 https://access.redhat.com/security/cve/CVE-2026-69249 https://advisory.echohq.com/cve/CVE-2026-69249 https://bugzilla.redhat.com/2510815 https://bugzilla.redhat.com/2510830 https://bugzilla.redhat.com/show_bug.cgi?id=2510815 https://bugzilla.redhat.com/show_bug.cgi?id=2510830 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69248 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69249 https://errata.almalinux.org/9/ALSA-2026-64774.html https://errata.rockylinux.org/RLSA-2026:64774 https://github.com/pyca/cryptography https://github.com/pyca/cryptography/commit/3763aa79b https://github.com/pyca/cryptography/commit/4a12cf49675a184e47f912b00b04f3a629283582 https://github.com/pyca/cryptography/pull/14960 https://github.com/pyca/cryptography/security/advisories/GHSA-jwv3-5hgf-82ww https://github.com/pypa/advisory-database/tree/main/vulns/cryptography/PYSEC-2026-3553.yaml https://linux.oracle.com/cve/CVE-2026-69249.html https://linux.oracle.com/errata/ELSA-2026-71658.html https://nvd.nist.gov/vuln/detail/CVE-2026-69249 https://ubuntu.com/security/notices/USN-8776-1 https://www.cve.org/CVERecord?id=CVE-2026-69249

cryptography

GHSA-537c-gmf6-5ccf

HIGH

46.0.7

48.0.1

https://advisory.echohq.com/cve/GHSA-537c-gmf6-5ccf https://github.com/advisories/GHSA-537c-gmf6-5ccf https://github.com/pyca/cryptography https://github.com/pyca/cryptography/security/advisories/GHSA-537c-gmf6-5ccf https://openssl-library.org/news/secadv/20260609.txt

httplib2

CVE-2026-59939

HIGH

0.31.2

0.32.0

https://access.redhat.com/errata/RHSA-2026:50317 https://access.redhat.com/security/cve/CVE-2026-59939 https://advisory.echohq.com/cve/CVE-2026-59939 https://bugzilla.redhat.com/2498212 https://bugzilla.redhat.com/show_bug.cgi?id=2498212 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59939 https://errata.almalinux.org/9/ALSA-2026-50317.html https://errata.rockylinux.org/RLSA-2026:50317 https://github.com/httplib2/httplib2 https://github.com/httplib2/httplib2/commit/87581ad6cf752fe3da2090c59058261d2d00a427 https://github.com/httplib2/httplib2/releases/tag/v0.32.0 https://github.com/httplib2/httplib2/security/advisories/GHSA-j5g9-f88f-gfj3 https://github.com/pypa/advisory-database/tree/main/vulns/httplib2/PYSEC-2026-3444.yaml https://linux.oracle.com/cve/CVE-2026-59939.html https://linux.oracle.com/errata/ELSA-2026-50317-0.html https://lists.debian.org/debian-lts-announce/2026/08/msg00039.html https://nvd.nist.gov/vuln/detail/CVE-2026-59939 https://ubuntu.com/security/notices/USN-8537-1 https://www.cve.org/CVERecord?id=CVE-2026-59939

jaraco.context

CVE-2026-23949

HIGH

5.3.0

6.1.0

https://access.redhat.com/security/cve/CVE-2026-23949 https://advisory.echohq.com/cve/CVE-2026-23949 https://github.com/jaraco/jaraco.context https://github.com/jaraco/jaraco.context/blob/main/jaraco/context/__init__.py#L74-L91 https://github.com/jaraco/jaraco.context/commit/7b26a42b525735e4085d2e994e13802ea339d5f9 https://github.com/jaraco/jaraco.context/security/advisories/GHSA-58pv-8j8x-9vj2 https://github.com/pypa/setuptools/blob/main/setuptools/_vendor/jaraco/context.py#L55-L76 https://nvd.nist.gov/vuln/detail/CVE-2026-23949 https://ubuntu.com/security/notices/USN-7979-1 https://www.cve.org/CVERecord?id=CVE-2026-23949

jaraco.context

CVE-2026-23949

HIGH

5.3.0

6.1.0

https://access.redhat.com/security/cve/CVE-2026-23949 https://advisory.echohq.com/cve/CVE-2026-23949 https://github.com/jaraco/jaraco.context https://github.com/jaraco/jaraco.context/blob/main/jaraco/context/__init__.py#L74-L91 https://github.com/jaraco/jaraco.context/commit/7b26a42b525735e4085d2e994e13802ea339d5f9 https://github.com/jaraco/jaraco.context/security/advisories/GHSA-58pv-8j8x-9vj2 https://github.com/pypa/setuptools/blob/main/setuptools/_vendor/jaraco/context.py#L55-L76 https://nvd.nist.gov/vuln/detail/CVE-2026-23949 https://ubuntu.com/security/notices/USN-7979-1 https://www.cve.org/CVERecord?id=CVE-2026-23949

lxml

CVE-2026-41066

HIGH

6.0.4

6.1.0

https://access.redhat.com/security/cve/CVE-2026-41066 https://advisory.echohq.com/cve/CVE-2026-41066 https://bugs.launchpad.net/lxml/+bug/2146291 https://github.com/lxml/lxml https://github.com/lxml/lxml/releases/tag/lxml-6.1.0 https://github.com/lxml/lxml/security/advisories/GHSA-vfmq-68hx-4jfw https://github.com/pypa/advisory-database/tree/main/vulns/lxml/PYSEC-2026-87.yaml https://nvd.nist.gov/vuln/detail/CVE-2026-41066 https://ubuntu.com/security/notices/USN-8897-1 https://www.cve.org/CVERecord?id=CVE-2026-41066

pyasn1

CVE-2026-119194

HIGH

0.6.3

0.6.5

https://access.redhat.com/security/cve/CVE-2026-119194 https://advisory.echohq.com/cve/CVE-2026-119194 https://github.com/pyasn1/pyasn1 https://github.com/pyasn1/pyasn1/commit/a36e3a3d067148d26197a6b7221fd0e2cde9cc86 https://github.com/pyasn1/pyasn1/pull/132 https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5 https://github.com/pyasn1/pyasn1/security/advisories/GHSA-fm9c-5rcf-2q5p https://nvd.nist.gov/vuln/detail/CVE-2026-119194 https://www.cve.org/CVERecord?id=CVE-2026-119194

pyasn1

CVE-2026-119195

HIGH

0.6.3

0.6.5

https://access.redhat.com/security/cve/CVE-2026-119195 https://advisory.echohq.com/cve/CVE-2026-119195 https://github.com/pyasn1/pyasn1 https://github.com/pyasn1/pyasn1/commit/4ce00797c594b59c1fd6b86d9ebc3ba87b7ec9f9 https://github.com/pyasn1/pyasn1/pull/132 https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5 https://github.com/pyasn1/pyasn1/security/advisories/GHSA-9m75-vc3g-4x39 https://nvd.nist.gov/vuln/detail/CVE-2026-119195 https://www.cve.org/CVERecord?id=CVE-2026-119195

pyasn1

CVE-2026-119196

HIGH

0.6.3

0.6.5

https://access.redhat.com/security/cve/CVE-2026-119196 https://advisory.echohq.com/cve/CVE-2026-119196 https://github.com/pyasn1/pyasn1 https://github.com/pyasn1/pyasn1/commit/73ba7b043cc7e92cb37f16f2c955bff93b0e6f6c https://github.com/pyasn1/pyasn1/pull/132 https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5 https://github.com/pyasn1/pyasn1/security/advisories/GHSA-2qm8-x737-gmw5 https://nvd.nist.gov/vuln/detail/CVE-2026-119196 https://www.cve.org/CVERecord?id=CVE-2026-119196

pyasn1

CVE-2026-119197

HIGH

0.6.3

0.6.5

https://access.redhat.com/security/cve/CVE-2026-119197 https://advisory.echohq.com/cve/CVE-2026-119197 https://github.com/pyasn1/pyasn1 https://github.com/pyasn1/pyasn1/commit/ce3ec3390784780a530047e0e77be5ff457636a4 https://github.com/pyasn1/pyasn1/pull/132 https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5 https://github.com/pyasn1/pyasn1/security/advisories/GHSA-mm57-4v3p-rchx https://nvd.nist.gov/vuln/detail/CVE-2026-119197 https://www.cve.org/CVERecord?id=CVE-2026-119197

pyasn1

CVE-2026-59884

HIGH

0.6.3

0.6.4

https://access.redhat.com/security/cve/CVE-2026-59884 https://advisory.echohq.com/cve/CVE-2026-59884 https://github.com/pyasn1/pyasn1 https://github.com/pyasn1/pyasn1/commit/628e36ecbb5277a3f01572ce418ef54271b165a5 https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4 https://github.com/pyasn1/pyasn1/security/advisories/GHSA-m4p7-r5rc-7g4j https://github.com/pypa/advisory-database/tree/main/vulns/pyasn1/PYSEC-2026-3455.yaml https://nvd.nist.gov/vuln/detail/CVE-2026-59884 https://ubuntu.com/security/notices/USN-8712-1 https://www.cve.org/CVERecord?id=CVE-2026-59884

pyasn1

CVE-2026-59885

HIGH

0.6.3

0.6.4

https://access.redhat.com/security/cve/CVE-2026-59885 https://advisory.echohq.com/cve/CVE-2026-59885 https://github.com/pyasn1/pyasn1 https://github.com/pyasn1/pyasn1/commit/45bdb19eb7df4b3780fe9c912c63e99bffc39dd9 https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4 https://github.com/pyasn1/pyasn1/security/advisories/GHSA-8ppf-4f7h-5ppj https://nvd.nist.gov/vuln/detail/CVE-2026-59885 https://ubuntu.com/security/notices/USN-8712-1 https://www.cve.org/CVERecord?id=CVE-2026-59885

pyasn1

CVE-2026-59886

HIGH

0.6.3

0.6.4

https://access.redhat.com/errata/RHSA-2026:59242 https://access.redhat.com/security/cve/CVE-2026-59886 https://advisory.echohq.com/cve/CVE-2026-59886 https://bugzilla.redhat.com/2500041 https://bugzilla.redhat.com/show_bug.cgi?id=2500041 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59886 https://errata.almalinux.org/9/ALSA-2026-59242.html https://errata.rockylinux.org/RLSA-2026:59242 https://github.com/pyasn1/pyasn1 https://github.com/pyasn1/pyasn1/commit/e60c691cb91addb8fcefa2f537e85ede6fb1e886 https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4 https://github.com/pyasn1/pyasn1/security/advisories/GHSA-hm4w-wwcw-mr6r https://linux.oracle.com/cve/CVE-2026-59886.html https://linux.oracle.com/errata/ELSA-2026-59243.html https://nvd.nist.gov/vuln/detail/CVE-2026-59886 https://ubuntu.com/security/notices/USN-8712-1 https://www.cve.org/CVERecord?id=CVE-2026-59886

setuptools

CVE-2025-47273

HIGH

75.2.0

78.1.1

https://access.redhat.com/errata/RHSA-2025:10407 https://access.redhat.com/errata/RHSA-2025:13578 https://access.redhat.com/security/cve/CVE-2025-47273 https://advisory.echohq.com/cve/CVE-2025-47273 https://bugzilla.redhat.com/2366982 https://bugzilla.redhat.com/show_bug.cgi?id=2366982 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47273 https://errata.almalinux.org/9/ALSA-2025-13578.html https://errata.rockylinux.org/RLSA-2025:10407 https://github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2025-49.yaml https://github.com/pypa/setuptools https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88 https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b https://github.com/pypa/setuptools/issues/4946 https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf https://linux.oracle.com/cve/CVE-2025-47273.html https://linux.oracle.com/errata/ELSA-2025-9940.html https://lists.debian.org/debian-lts-announce/2025/05/msg00035.html https://nvd.nist.gov/vuln/detail/CVE-2025-47273 https://ubuntu.com/security/notices/USN-7544-1 https://ubuntu.com/security/notices/USN-8010-1 https://www.cve.org/CVERecord?id=CVE-2025-47273

setuptools

CVE-2025-47273

HIGH

75.2.0

78.1.1

https://access.redhat.com/errata/RHSA-2025:10407 https://access.redhat.com/errata/RHSA-2025:13578 https://access.redhat.com/security/cve/CVE-2025-47273 https://advisory.echohq.com/cve/CVE-2025-47273 https://bugzilla.redhat.com/2366982 https://bugzilla.redhat.com/show_bug.cgi?id=2366982 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47273 https://errata.almalinux.org/9/ALSA-2025-13578.html https://errata.rockylinux.org/RLSA-2025:10407 https://github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2025-49.yaml https://github.com/pypa/setuptools https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88 https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b https://github.com/pypa/setuptools/issues/4946 https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf https://linux.oracle.com/cve/CVE-2025-47273.html https://linux.oracle.com/errata/ELSA-2025-9940.html https://lists.debian.org/debian-lts-announce/2025/05/msg00035.html https://nvd.nist.gov/vuln/detail/CVE-2025-47273 https://ubuntu.com/security/notices/USN-7544-1 https://ubuntu.com/security/notices/USN-8010-1 https://www.cve.org/CVERecord?id=CVE-2025-47273

urllib3

CVE-2026-44431

HIGH

2.6.3

2.7.0

https://access.redhat.com/errata/RHSA-2026:28158 https://access.redhat.com/errata/RHSA-2026:28159 https://access.redhat.com/security/cve/CVE-2026-44431 https://advisory.echohq.com/cve/CVE-2026-44431 https://bugzilla.redhat.com/2477154 https://bugzilla.redhat.com/2477167 https://bugzilla.redhat.com/show_bug.cgi?id=2477154 https://bugzilla.redhat.com/show_bug.cgi?id=2477167 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-44431 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-44432 https://errata.almalinux.org/9/ALSA-2026-28159.html https://errata.rockylinux.org/RLSA-2026:28158 https://github.com/urllib3/urllib3 https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc https://linux.oracle.com/cve/CVE-2026-44431.html https://linux.oracle.com/errata/ELSA-2026-49927.html https://lists.debian.org/debian-lts-announce/2026/06/msg00040.html https://nvd.nist.gov/vuln/detail/CVE-2026-44431 https://ubuntu.com/security/notices/USN-8379-1 https://ubuntu.com/security/notices/USN-8811-1 https://www.cve.org/CVERecord?id=CVE-2026-44431

urllib3

CVE-2026-44432

HIGH

2.6.3

2.7.0

urllib3

CVE-2026-97687

HIGH

2.6.3

2.8.0

https://access.redhat.com/errata/RHSA-2026:90494 https://access.redhat.com/security/cve/CVE-2026-97687 https://advisory.echohq.com/cve/CVE-2026-97687 https://bugzilla.redhat.com/2543245 https://bugzilla.redhat.com/2543255 https://bugzilla.redhat.com/show_bug.cgi?id=2543245 https://bugzilla.redhat.com/show_bug.cgi?id=2543255 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97687 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97689 https://errata.almalinux.org/9/ALSA-2026-90494.html https://errata.rockylinux.org/RLSA-2026:90494 https://github.com/urllib3/urllib3 https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465 https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3 https://github.com/urllib3/urllib3/pull/5093 https://github.com/urllib3/urllib3/releases/tag/2.8.0 https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77 https://linux.oracle.com/cve/CVE-2026-97687.html https://linux.oracle.com/errata/ELSA-2026-92474.html https://nvd.nist.gov/vuln/detail/CVE-2026-97687 https://ubuntu.com/security/notices/USN-8926-1 https://www.cve.org/CVERecord?id=CVE-2026-97687

urllib3

CVE-2026-97689

HIGH

2.6.3

2.8.0

https://access.redhat.com/errata/RHSA-2026:90494 https://access.redhat.com/security/cve/CVE-2026-97689 https://advisory.echohq.com/cve/CVE-2026-97689 https://bugzilla.redhat.com/2543245 https://bugzilla.redhat.com/2543255 https://bugzilla.redhat.com/show_bug.cgi?id=2543245 https://bugzilla.redhat.com/show_bug.cgi?id=2543255 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97687 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97689 https://errata.almalinux.org/9/ALSA-2026-90494.html https://errata.rockylinux.org/RLSA-2026:90494 https://github.com/urllib3/urllib3 https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed https://github.com/urllib3/urllib3/releases/tag/2.8.0 https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw https://linux.oracle.com/cve/CVE-2026-97689.html https://linux.oracle.com/errata/ELSA-2026-92474.html https://nvd.nist.gov/vuln/detail/CVE-2026-97689 https://ubuntu.com/security/notices/USN-8926-1 https://www.cve.org/CVERecord?id=CVE-2026-97689

virtualenv

CVE-2026-102925

HIGH

20.27.0

21.7.13

https://access.redhat.com/security/cve/CVE-2026-102925 https://advisory.echohq.com/cve/CVE-2026-102925 https://github.com/pypa/advisory-database/tree/main/vulns/virtualenv/PYSEC-2026-4013.yaml https://github.com/pypa/virtualenv https://github.com/pypa/virtualenv/commit/4d5a105ec2a2723b8c7f4571bb68f4f71d01e3f6 https://github.com/pypa/virtualenv/pull/3252 https://github.com/pypa/virtualenv/releases/tag/21.7.13 https://github.com/pypa/virtualenv/security/advisories/GHSA-p58f-9548-mpm2 https://nvd.nist.gov/vuln/detail/CVE-2026-102925 https://pypi.org/project/virtualenv https://www.cve.org/CVERecord?id=CVE-2026-102925

virtualenv

CVE-2026-102930

HIGH

20.27.0

21.7.12

https://access.redhat.com/security/cve/CVE-2026-102930 https://advisory.echohq.com/cve/CVE-2026-102930 https://github.com/pypa/advisory-database/tree/main/vulns/virtualenv/PYSEC-2026-4011.yaml https://github.com/pypa/virtualenv https://github.com/pypa/virtualenv/commit/a01ed3e2f239d6ab1fce62c5c7664ccf268fff6d https://github.com/pypa/virtualenv/pull/3251 https://github.com/pypa/virtualenv/releases/tag/21.7.12 https://github.com/pypa/virtualenv/security/advisories/GHSA-94p9-xgh2-xp45 https://nvd.nist.gov/vuln/detail/CVE-2026-102930 https://pypi.org/project/virtualenv https://www.cve.org/CVERecord?id=CVE-2026-102930

virtualenv

CVE-2026-102937

HIGH

20.27.0

21.7.12

https://access.redhat.com/security/cve/CVE-2026-102937 https://advisory.echohq.com/cve/CVE-2026-102937 https://github.com/pypa/advisory-database/tree/main/vulns/virtualenv/PYSEC-2026-4014.yaml https://github.com/pypa/virtualenv https://github.com/pypa/virtualenv/commit/d721ff140ce4afdc2a9b76751e4584e25d9fbea6 https://github.com/pypa/virtualenv/pull/3250 https://github.com/pypa/virtualenv/releases/tag/21.7.12 https://github.com/pypa/virtualenv/security/advisories/GHSA-x78j-v8h9-3j2q https://nvd.nist.gov/vuln/detail/CVE-2026-102937 https://pypi.org/project/virtualenv https://www.cve.org/CVERecord?id=CVE-2026-102937

virtualenv

CVE-2026-113718

HIGH

20.27.0

21.14.9

https://access.redhat.com/security/cve/CVE-2026-113718 https://advisory.echohq.com/cve/CVE-2026-113718 https://github.com/pypa/virtualenv https://github.com/pypa/virtualenv/commit/e5fc2e6e189a877ff559af288919e3525d13e5e0 https://github.com/pypa/virtualenv/pull/3432 https://github.com/pypa/virtualenv/releases/tag/21.14.9 https://github.com/pypa/virtualenv/security/advisories/GHSA-394h-qwmc-48pf https://nvd.nist.gov/vuln/detail/CVE-2026-113718 https://www.cve.org/CVERecord?id=CVE-2026-113718

virtualenv

CVE-2026-113722

HIGH

20.27.0

21.14.9

https://access.redhat.com/security/cve/CVE-2026-113722 https://advisory.echohq.com/cve/CVE-2026-113722 https://github.com/pypa/virtualenv https://github.com/pypa/virtualenv/commit/2519941bed33ee0d3ac99277f67913e439e476a9 https://github.com/pypa/virtualenv/pull/3417 https://github.com/pypa/virtualenv/releases/tag/21.14.9 https://github.com/pypa/virtualenv/security/advisories/GHSA-c978-59m8-c77v https://nvd.nist.gov/vuln/detail/CVE-2026-113722 https://www.cve.org/CVERecord?id=CVE-2026-113722

virtualenv

CVE-2026-113723

HIGH

20.27.0

21.14.9

https://access.redhat.com/security/cve/CVE-2026-113723 https://advisory.echohq.com/cve/CVE-2026-113723 https://github.com/pypa/virtualenv https://github.com/pypa/virtualenv/commit/5f48d711731311428aebfae61d46957762155b22 https://github.com/pypa/virtualenv/pull/3418 https://github.com/pypa/virtualenv/releases/tag/21.14.9 https://github.com/pypa/virtualenv/security/advisories/GHSA-6w3r-xr62-4xcp https://nvd.nist.gov/vuln/detail/CVE-2026-113723 https://www.cve.org/CVERecord?id=CVE-2026-113723

virtualenv

CVE-2026-113725

HIGH

20.27.0

21.14.7

https://access.redhat.com/security/cve/CVE-2026-113725 https://advisory.echohq.com/cve/CVE-2026-113725 https://github.com/pypa/virtualenv https://github.com/pypa/virtualenv/commit/c3104e02474b652832a9bbaae79f6e1696296932 https://github.com/pypa/virtualenv/releases/tag/21.14.7 https://github.com/pypa/virtualenv/security/advisories/GHSA-vxj4-q4g9-crj7 https://nvd.nist.gov/vuln/detail/CVE-2026-113725 https://www.cve.org/CVERecord?id=CVE-2026-113725

virtualenv

CVE-2026-113726

HIGH

20.27.0

21.14.4

https://access.redhat.com/security/cve/CVE-2026-113726 https://advisory.echohq.com/cve/CVE-2026-113726 https://github.com/pypa/virtualenv https://github.com/pypa/virtualenv/commit/5b915367da82bd024b2a0d28d2f98007034b4aa2 https://github.com/pypa/virtualenv/releases/tag/21.14.4 https://github.com/pypa/virtualenv/security/advisories/GHSA-5vjq-rrrf-7h2q https://nvd.nist.gov/vuln/detail/CVE-2026-113726 https://www.cve.org/CVERecord?id=CVE-2026-113726

virtualenv

CVE-2026-113732

HIGH

20.27.0

21.14.2

https://access.redhat.com/security/cve/CVE-2026-113732 https://advisory.echohq.com/cve/CVE-2026-113732 https://github.com/pypa/virtualenv https://github.com/pypa/virtualenv/commit/3bddeaf8d02c3ee7f576503efb082f8f494cfcab https://github.com/pypa/virtualenv/releases/tag/21.14.2 https://github.com/pypa/virtualenv/security/advisories/GHSA-c947-3pg5-gm8q https://nvd.nist.gov/vuln/detail/CVE-2026-113732 https://www.cve.org/CVERecord?id=CVE-2026-113732

virtualenv

CVE-2026-113776

HIGH

20.27.0

21.14.2

https://access.redhat.com/security/cve/CVE-2026-113776 https://advisory.echohq.com/cve/CVE-2026-113776 https://github.com/pypa/virtualenv https://github.com/pypa/virtualenv/commit/602b26623a724827ff171bf11fef4ad186d01f74 https://github.com/pypa/virtualenv/releases/tag/21.14.2 https://github.com/pypa/virtualenv/security/advisories/GHSA-8rjx-v5ww-45pp https://nvd.nist.gov/vuln/detail/CVE-2026-113776 https://www.cve.org/CVERecord?id=CVE-2026-113776

wheel

CVE-2026-24049

HIGH

0.43.0

0.46.2

wheel

CVE-2026-24049

HIGH

0.43.0

0.46.2

wheel

CVE-2026-24049

HIGH

0.44.0

0.46.2

wheel

CVE-2026-24049

HIGH

0.44.0

0.46.2

sk-lead-finder-lead-review (ubuntu 22.04) - Trivy Report - 2026-11-08 04:03:11.351357654 +0100 CET m=+0.041684403