The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-2898:01 advisory.

    python-psutil: Double free because of refcount mishandling (CVE-2019-18874)         python-jinja2: ReDoS vulnerability in the urlize filter (CVE-2020-28493)         python: Information disclosure via pydoc (CVE-2021-3426)         python-babel: Relative path traversal allows attacker to load arbitrary     locale files and execute arbitrary code (CVE-2021-20095, CVE-2021-42771)         python: Web cache poisoning via urllib.parse.parse_qsl and     urllib.parse.parse_qs by using a semicolon in query parameters (CVE-2021-23336)         python-lxml: Missing input sanitization for formaction HTML5 attributes may     lead to XSS (CVE-2021-28957)         python-ipaddress: Improper input validation of octal strings     (CVE-2021-29921)         python-urllib3: ReDoS in the parsing of authority part of URL     (CVE-2021-33503)         python-pip: Incorrect handling of unicode separators in git references     (CVE-2021-3572)     Bug Fix(es):
        - CVE-2019-18874 python-psutil: Double free because of refcount mishandling
        - CVE-2020-28493 python-jinja2: ReDoS vulnerability in the urlize filter
        - CVE-2021-23336 python: Web cache poisoning via urllib.parse.parse_qsl and     urllib.parse.parse_qs by using a semicolon in query parameters
        - CVE-2021-3426 python: Information disclosure via pydoc
        - CVE-2021-28957 python-lxml: Missing input sanitization for formaction     HTML5 attributes may lead to XSS
        - CVE-2021-20095 CVE-2021-42771 python-babel: Relative path traversal allows     attacker to load arbitrary locale files and execute arbitrary code
        - CVE-2021-29921 python-ipaddress: Improper input validation of octal     strings
        - CVE-2021-3572 python-pip: Incorrect handling of unicode separators in git     references
        - CVE-2021-33503 python-urllib3: ReDoS in the parsing of authority part of     URL     CVE(s):
    CVE-2019-18874     psutil (aka python-psutil) through 5.6.5 can have a double free. This occurs because of refcount     mishandling within a while or for loop that converts system data into a Python object.
    CVE-2020-28493     This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is mainly due to the     `_punctuation_re regex` operator and its use of multiple wildcards. The last wildcard is the most     exploitable as it searches for trailing punctuation. This issue can be mitigated by Markdown to format     user content instead of the urlize filter, or by implementing request timeouts and limiting process     memory.
    CVE-2021-20095
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by     its CNA. Notes: none.
    CVE-2021-23336     The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before     3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and     urllib.parse.parse_qs by using a vector called parameter cloaking. When the attacker can separate query     parameters using a semicolon (;), they can cause a difference in the interpretation of the request between     the proxy (running with default configuration) and the server. This can result in malicious requests being     cached as completely safe ones, as the proxy would usually not see the semicolon as a separator, and     therefore would not include it in a cache key of an unkeyed parameter.
    CVE-2021-28957     An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling     the safe_attrs_only and forms arguments, the Cleaner class does not remove the formaction attribute     allowing for JS to bypass the sanitizer. A remote attacker could exploit this flaw to run arbitrary JS     code on users who interact with incorrectly sanitized HTML. This issue is patched in lxml 4.6.3.
    CVE-2021-29921     In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP     address string. This (in some situations) allows attackers to bypass access control that is based on IP     addresses.
    CVE-2021-33503     An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in     the authority component, the authority regular expression exhibits catastrophic backtracking, causing a     denial of service if a URL were passed as a parameter or redirected to via an HTTP redirect.
    CVE-2021-3426     There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince     another local or adjacent user to start a pydoc server could access the server and use it to disclose     sensitive information belonging to the other user that they would not normally be able to access. The     highest risk of this flaw is to data confidentiality. This flaw affects Python versions before 3.8.9,     Python versions before 3.9.3 and Python versions before 3.10.0a7.
    CVE-2021-3572     A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote     attacker could possibly use this issue to install a different revision on a repository. The highest threat     from this vulnerability is to data integrity. This is fixed in python-pip version 21.1.
    CVE-2021-42771     Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing     serialized Python objects) via directory traversal, leading to code execution.
    Modularity name: python38     Stream name: 3.8

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2383:01 advisory.

    * python-cryptography: Bleichenbacher timing oracle attack against RSA decryption (CVE-2020-25659)
      * python: Unsafe use of eval() on data retrieved via HTTP in the test suite (CVE-2020-27619)
      * python-lxml: mXSS due to the use of improper parser (CVE-2020-27783)
      * python-jinja2: ReDoS vulnerability due to the sub-pattern (CVE-2020-28493)
      * python-cryptography: Large inputs for symmetric encryption can trigger integer overflow leading to     buffer overflow (CVE-2020-36242)
      * python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c (CVE-2021-3177)
      * python: Information disclosure via pydoc (CVE-2021-3426)
      * python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute     arbitrary code (CVE-2021-20095)
      * python: Web cache poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon     in query parameters (CVE-2021-23336)
      * python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS     (CVE-2021-28957)
      * python-ipaddress: Improper input validation of octal strings (CVE-2021-29921)
      * python-urllib3: ReDoS in the parsing of authority part of URL (CVE-2021-33503)
      * python-pip: Incorrect handling of unicode separators in git references (CVE-2021-3572)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2021:4161 advisory.

  - This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is mainly due to the     `_punctuation_re regex` operator and its use of multiple wildcards. The last wildcard is the most     exploitable as it searches for trailing punctuation. This issue can be mitigated by Markdown to format     user content instead of the urlize filter, or by implementing request timeouts and limiting process     memory. (CVE-2020-28493)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of nodejs / python-jinja2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-28493 advisory.

  - This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is mainly due to the     `_punctuation_re regex` operator and its use of multiple wildcards. The last wildcard is the most     exploitable as it searches for trailing punctuation. This issue can be mitigated by Markdown to format     user content instead of the urlize filter, or by implementing request timeouts and limiting process     memory. (CVE-2020-28493)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:4161 advisory.

    The python-jinja2 package contains Jinja2, a template engine written in pure Python. Jinja2 provides a     Django inspired non-XML syntax but supports inline expressions and an optional sandboxed environment.

    Security Fix(es):

    * python-jinja2: ReDoS vulnerability due to the sub-pattern (CVE-2020-28493)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2021-2728:01 advisory.

    * python-jinja2: ReDoS vulnerability due to the sub-pattern (CVE-2020-28493)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3252 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: Unsafe use of eval() on data retrieved via HTTP in the test suite (CVE-2020-27619)

    * python-jinja2: ReDoS vulnerability due to the sub-pattern (CVE-2020-28493)

    * python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c (CVE-2021-3177)

    * python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute     arbitrary code (CVE-2021-20095)

    * python-pygments: Infinite loop in SML lexer may lead to DoS (CVE-2021-20270)

    * python: Web cache poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in     query parameters (CVE-2021-23336)

    * python-pygments: ReDoS via crafted malicious input (CVE-2021-27291)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional information

    * Changes in the default separator for the Python urllib parsing functions

    To mitigate the Web Cache Poisoning CVE-2021-23336 in the Python urllib library, the default separator for     the urllib.parse.parse_qsl and urllib.parse.parse_qs functions is being changed from both ampersand (&)     and semicolon (;) to only an ampersand.

    The change of the default separator is potentially backwards incompatible, therefore Red Hat provides a     way to configure the behavior in Python packages where the default separator has been changed. In     addition, the affected urllib parsing functions issue a warning if they detect that a customers     application has been affected by the change.

    For more information, see the Knowledgebase article Mitigation of Web Cache Poisoning in the Python     urllib library (CVE-2021-23336) linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:4151 advisory.

  - In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content     retrieved via HTTP. (CVE-2020-27619)

  - This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is mainly due to the     `_punctuation_re regex` operator and its use of multiple wildcards. The last wildcard is the most     exploitable as it searches for trailing punctuation. This issue can be mitigated by Markdown to format     user content instead of the urlize filter, or by implementing request timeouts and limiting process     memory. (CVE-2020-28493)

  - An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when     performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only     contains the exception keyword. (CVE-2021-20270)

  - The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before     3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and     urllib.parse.parse_qs by using a vector called parameter cloaking. When the attacker can separate query     parameters using a semicolon (;), they can cause a difference in the interpretation of the request between     the proxy (running with default configuration) and the server. This can result in malicious requests being     cached as completely safe ones, as the proxy would usually not see the semicolon as a separator, and     therefore would not include it in a cache key of an unkeyed parameter. (CVE-2021-23336)

  - In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular     expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are     vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service.
    (CVE-2021-27291)

  - An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling     the safe_attrs_only and forms arguments, the Cleaner class does not remove the formaction attribute     allowing for JS to bypass the sanitizer. A remote attacker could exploit this flaw to run arbitrary JS     code on users who interact with incorrectly sanitized HTML. This issue is patched in lxml 4.6.3.
    (CVE-2021-28957)

  - Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing     serialized Python objects) via directory traversal, leading to code execution. (CVE-2021-42771)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:4161 advisory.

  - python-jinja2: ReDoS vulnerability in the urlize filter (CVE-2020-28493)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017474 advisory.

    This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is mainly due to the     `_punctuation_re regex` operator and its use of multiple wildcards. The last wildcard is the most     exploitable as it searches for trailing punctuation. This issue can be mitigated by Markdown to format     user content instead of the urlize filter, or by implementing request timeouts and limiting process     memory.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of IBM Spectrum Protect Plus Web UI installed on the remote host is prior to 10.1.17.1 IBM Spectrum Protect Plus. It is, therefore, affected by multiple vulnerabilities as referenced in the 7237702 advisory.

  - Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed     environment interacts with the |attr filter allows an attacker that controls the content of a template to     execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the content of a     template. Whether that is the case depends on the type of application using Jinja. This vulnerability     impacts users of applications which execute untrusted templates. Jinja's sandbox does catch calls to     str.format and ensures they don't escape the sandbox. However, it's possible to use the |attr filter to     get a reference to a string's plain format method, bypassing the sandbox. After the fix, the |attr filter     no longer bypasses the environment's attribute lookup. This vulnerability is fixed in 3.1.6.
    (CVE-2025-27516)

  - This affects the package node-notifier before 9.0.0. It allows an attacker to run arbitrary commands on     Linux machines due to the options params not being sanitised when being passed an array. (CVE-2020-7789)

  - Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authorization headers to     destination servers when redirected to an HTTPS endpoint. This is a product of how we use     `rebuild_proxies` to reattach the `Proxy-Authorization` header to requests. For HTTP connections sent     through the tunnel, the proxy will identify the header in the request itself and remove it prior to     forwarding to the destination server. However when sent over HTTPS, the `Proxy-Authorization` header must     be sent in the CONNECT request as the proxy has no visibility into the tunneled request. This results in     Requests forwarding proxy credentials to the destination server unintentionally, allowing a malicious     actor to potentially exfiltrate sensitive information. This issue has been patched in version 2.31.0.
    (CVE-2023-32681)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4151 advisory.

  - python: Unsafe use of eval() on data retrieved via HTTP in the test suite (CVE-2020-27619)

  - python-jinja2: ReDoS vulnerability in the urlize filter (CVE-2020-28493)

  - python-pygments: Infinite loop in SML lexer may lead to DoS (CVE-2021-20270)

  - python: Web cache poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in     query parameters (CVE-2021-23336)

  - python-pygments: ReDoS in multiple lexers (CVE-2021-27291)

  - python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS (CVE-2021-28957)

  - python-babel: Relative path traversal allows attacker to load arbitrary locale files and     execute arbitrary code (CVE-2021-42771)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4162 advisory.

  - python-psutil: Double free because of refcount mishandling (CVE-2019-18874)

  - python: Unsafe use of eval() on data retrieved via HTTP in the test suite (CVE-2020-27619)

  - python-jinja2: ReDoS vulnerability in the urlize filter (CVE-2020-28493)

  - python: Web cache poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in     query parameters (CVE-2021-23336)

  - python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS (CVE-2021-28957)

  - python-ipaddress: Improper input validation of octal strings (CVE-2021-29921)

  - python-urllib3: ReDoS in the parsing of authority part of URL (CVE-2021-33503)

  - python: Information disclosure via pydoc (CVE-2021-3426)

  - python-pip: Incorrect handling of unicode separators in git references (CVE-2021-3572)

  - python-babel: Relative path traversal allows attacker to load arbitrary locale files and     execute arbitrary code (CVE-2021-42771)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
294407	MiracleLinux 8 : python38:3.8 and python38-devel:3.8 (AXSA:2022-2898:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
294617	MiracleLinux 7 : rh-python38 (AXSA:2021-2383:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
157638	AlmaLinux 8 : python-jinja2 (ALSA-2021:4161)	Nessus	Alma Linux Local Security Checks	2022/2/9	2023/11/10	medium
234641	Azure Linux 3.0 Security Update: nodejs / python-jinja2 (CVE-2020-28493)	Nessus	Azure Linux Local Security Checks	2025/4/20	2025/9/15	medium
155194	RHEL 8 : python-jinja2 (RHSA-2021:4161)	Nessus	Red Hat Local Security Checks	2021/11/11	2024/11/8	critical
291714	MiracleLinux 8 : python-jinja2-2.10.1-3.el8 (AXSA:2021-2728:01)	Nessus	Miracle Linux Local Security Checks	2026/1/19	2026/1/19	medium
152778	RHEL 7 : python27 (RHSA-2021:3252)	Nessus	Red Hat Local Security Checks	2021/8/24	2025/9/10	high
185065	Rocky Linux 8 : python27:2.7 (RLSA-2021:4151)	Nessus	Rocky Linux Local Security Checks	2023/11/7	2024/1/16	critical
155037	CentOS 8 : python-jinja2 (CESA-2021:4161)	Nessus	CentOS Local Security Checks	2021/11/11	2023/11/24	medium
313762	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-jinja2 (UTSA-2026-017474)	Nessus	Unity Linux Local Security Checks	2026/5/11	2026/5/11	medium
240343	IBM Spectrum Protect Plus Web UI 10.1.0 < 10.1.17.1 (7237702)	Nessus	Misc.	2025/6/25	2026/3/11	medium
155049	CentOS 8 : python27:2.7 (CESA-2021:4151)	Nessus	CentOS Local Security Checks	2021/11/11	2024/1/16	critical
155064	CentOS 8 : python38:3.8 and python38-devel:3.8 (CESA-2021:4162)	Nessus	CentOS Local Security Checks	2021/11/11	2024/1/16	critical

检测

插件搜索

high

high

medium

medium

critical

medium

high

critical

medium

medium

medium

critical

critical