The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:2391 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service     (CVE-2025-12084)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-dd37d41d7f advisory.

    Security fix for CVE-2025-12084


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-12084 advisory.

  - When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency     on _clear_id_cache() the algorithm is quadratic. Availability can be impacted when building excessively     nested documents. (CVE-2025-12084)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-43e2b1e209 advisory.

    Security fix for CVE-2025-12084

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9860efdad7 advisory.

    Security fix for CVE-2025-13836

    ----

    Security fix for CVE-2025-12084

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-1408 advisory.

    - Security fix for CVE-2025-13836     Resolves: RHEL-141026

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of python3 installed on the remote host is prior to 3.7.16-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3103 advisory.

    When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency     on _clear_id_cache() the algorithm is quadratic. Availability can be impacted when building excessively     nested documents. (CVE-2025-12084)

    When loading a plist file, the plistlib module reads data in size specified by the file itself, meaning a     malicious file can cause OOM and DoS issues (CVE-2025-13837)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-7ec743931c advisory.

    This is the eleventh maintenance release of Python 3.13




Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8018-1 advisory.

    Denis Ledoux discovered that Python incorrectly parsed email message headers. An attacker could possibly     use this issue to inject arbitrary headers into email messages. This issue only affected python3.6,     python3.7, python3.8, python3.9, python3.10, python3.11, python3.12, python3.13, and python3.14 packages.
    (CVE-2025-11468)

    Jacob Walls, Shai Berger, and Natalia Bidart discovered that Python inefficiently parsed XML input with     quadratic complexity. An attacker could possibly use this issue to cause a denial of service.
    (CVE-2025-12084)

    It was discovered that Python incorrectly parsed malicious plist files. An attacker could possibly use     this issue to cause Python to use excessive resources, leading to a denial of service. This issue only     affected python3.5, python3.6, python3.7, python3.8, python3.9, python3.10, python3.11, python3.12,     python3.13, and python3.14 packages. (CVE-2025-13837)

    Omar Hasan discovered that Python incorrectly parsed URL mediatypes. An attacker could possibly use this     issue to inject arbitrary HTTP headers. (CVE-2025-15282)

    Omar Hasan discovered that Python incorrectly parsed malicious IMAP inputs. An attacker could possibly use     this issue to inject arbitrary IMAP commands. (CVE-2025-15366)

    Omar Hasan discovered that Python incorrectly parsed malicious POP3 inputs. An attacker could possibly use     this issue to inject arbitrary POP3 commands. (CVE-2025-15367)

    Omar Hasan discovered that Python incorrectly parsed malicious HTTP cookie headers. An attacker could     possibly use this issue to inject arbitrary HTTP headers. (CVE-2026-0672)

    Omar Hasan discovered that Python incorrectly parsed malicious HTTP header names and values. An attacker     could possibly use this issue to inject arbitrary HTTP headers. (CVE-2026-0865)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4455 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4455-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                       Andrej Shadura     January 25, 2026                              https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : python3.9     Version        : 3.9.2-1+deb11u5     CVE ID         : CVE-2025-11468 CVE-2025-12084 CVE-2025-15282 CVE-2025-15366                      CVE-2025-15367 CVE-2026-0672 CVE-2026-0865 CVE-2026-1299

    This upload fixes a regression introduced in 3.9.2-1+deb11u4 (DLA 4445-1),     and also fixes multiple security issues in cPython 3.9.

    CVE-2025-12084

        When building nested elements using xml.dom.minidom methods such         as appendChild() that have a dependency on _clear_id_cache() the         algorithm was quadratic. Availability could be impacted when building         excessively nested documents.

        The fix for this CVE in the previous upload resulted in a regression         in software relying on ownerDocument attribute being always present         in Element instances. This regression has now been fixed.

    CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2025-15366, CVE-2025-15367

        These are all similar vulnerabilities in the following modules:
        http.cookies, wsgiref.headers, imaplib, poplib, urllib. In each of         these control characters were handled incorrectly, allowing injection         of additional cookiers, headers or commands. Control characters are         now rejected in these contexts.

    CVE-2025-11468

        An issue similar to the above. Comments consisting of a very long         sequence of non-foldable characters could trigger a forced line wrap         that omitted the required leading space on the continuation line,         causing the remainder of the comment to be interpreted as a new         header field.

    CVE-2026-1299

        Another header injection issue: email module allowed header injection in the         BytesGenerator class. BytesGenerator will now refuse to serialize headers         that are unsafely folded or delimited.

    For Debian 11 bullseye, these problems have been fixed in version     3.9.2-1+deb11u5.

    We recommend that you upgrade your python3.9 packages.

    For the detailed security status of python3.9 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/python3.9

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1349-1 advisory.

    - Updated to Python 3.11.15
    - CVE-2025-6075: If the value passed to os.path.expandvars() is user-controlled a performance degradation     is possible when expanding environment variables (bsc#1252974).
    - CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively     unfoldable characters (bsc#1257029).
    - CVE-2025-12084: cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of     service (bsc#1254997).
    - CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined     (bsc#1259611).
    - CVE-2025-13836: When reading an HTTP response from a server, if no read amount is specified, the default     behavior will be to use Content-Length (bsc#1254400).
    - CVE-2025-13837: When loading a plist file, the plistlib module reads data in size specified by the file     itself, meaning a malicious file can cause OOM and DoS issues (bsc#1254401).
    - CVE-2025-15282: user-controlled data URLs parsed may allow injecting headers (bsc#1257046).
    - CVE-2026-0672: HTTP header injection via user-controlled cookie values and parameters when using     http.cookies.Morsel (bsc#1257031).
    - CVE-2026-0865: user-controlled header containing newlines can allow injecting HTTP headers     (bsc#1257042).
    - CVE-2026-1299: header injection when an email is serialized due to improper newline quoting in     `BytesGenerator` (bsc#1257181).
    - CVE-2026-2297: cpython: incorrectly handled hook in FileLoader can lead to validation bypass     (bsc#1259240).
    - CVE-2026-3479: python: improper resource argument validation can allow path traversal (bsc#1259989).
    - CVE-2026-3644: incomplete control character validation in http.cookies (bsc#1259734).
    - CVE-2026-4224: C stack overflow when parsing XML with deeply nested DTD content models (bsc#1259735).
    - CVE-2026-4519: leading dashes in URLs are accepted by the `webbrowser.open()` API and allow for web     browser command line option injection (bsc#1260026).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4445 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4445-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                       Andrej Shadura     January 20, 2026                              https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : python3.9     Version        : 3.9.2-1+deb11u4     CVE ID         : CVE-2022-37454 CVE-2025-4516 CVE-2025-6069 CVE-2025-6075                      CVE-2025-8194 CVE-2025-8291 CVE-2025-12084 CVE-2025-13836                      CVE-2025-13837

    Multiple security fixes in cPython 3.9.

    CVE-2022-37454

        The Keccak XKCP SHA-3 implementation had an integer overflow         and a buffer overflow in the sponge function interface. This         allowed attackers to execute arbitrary code or eliminate expected         cryptographic properties.

    CVE-2025-4516

        An issue in bytes.decode(unicode_escape, error=ignore|replace)         could result in a crash.

    CVE-2025-6069

        The html.parser.HTMLParser class had worse-case quadratic complexity         when processing certain crafted malformed inputs potentially leading         to amplified denial-of-service.

    CVE-2025-6075

        If the value passed to os.path.expandvars() is user-controlled         a performance degradation was possible when expanding environment         variables.

    CVE-2025-8194

        The tar implementation would process tar archives with negative         offsets without error, resulting in an infinite loop and deadlock         during the parsing of maliciously crafted tar archives.

    CVE-2025-8291

        The 'zipfile' module would not check the validity of the ZIP64 End         of Central Directory (EOCD) Locator record offset value would not be         used to locate the ZIP64 EOCD record, instead the ZIP64 EOCD record         would be assumed to be the previous record in the ZIP archive. This         could be abused to create ZIP archives that are handled differently         by the 'zipfile' module compared to other ZIP implementations.

    CVE-2025-12084

        When building nested elements using xml.dom.minidom methods such         as appendChild() that have a dependency on _clear_id_cache() the         algorithm was quadratic. Availability could be impacted when building         excessively nested documents.

    CVE-2025-13836

        When reading an HTTP response from a server, if no read amount was         specified, the default behavior was to use Content-Length. This         allowed a malicious server to cause the client to read large amounts         of data into memory, potentially causing OOM or other DoS.

    CVE-2025-13837

        When loading a plist file, the plistlib module would read data in         size specified by the file itself, meaning a malicious file could         cause OOM and DoS issues.

    For Debian 11 bullseye, these problems have been fixed in version     3.9.2-1+deb11u4.

    We recommend that you upgrade your python3.9 packages.

    For the detailed security status of python3.9 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/python3.9

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
298490	RHEL 8 : python3 (RHSA-2026:2391)	Nessus	Red Hat Local Security Checks	2026/2/10	2026/2/10	medium
302492	Fedora 42 : python3.6 (2026-dd37d41d7f)	Nessus	Fedora Local Security Checks	2026/3/16	2026/3/16	medium
295022	Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2025-12084)	Nessus	Azure Linux Local Security Checks	2026/1/22	2026/1/22	medium
296465	Fedora 42 : python3.9 (2026-43e2b1e209)	Nessus	Fedora Local Security Checks	2026/1/24	2026/1/24	medium
296515	Fedora 42 : python3.11 (2026-9860efdad7)	Nessus	Fedora Local Security Checks	2026/1/25	2026/4/30	medium
296988	Oracle Linux 9 : python3.12 (ELSA-2026-1408)	Nessus	Oracle Linux Local Security Checks	2026/1/28	2026/4/30	medium
281788	Amazon Linux 2 : python3, --advisory ALAS2-2025-3103 (ALAS-2025-3103)	Nessus	Amazon Linux Local Security Checks	2026/1/5	2026/4/30	medium
279349	Fedora 42 : python3-docs / python3.13 (2025-7ec743931c)	Nessus	Fedora Local Security Checks	2025/12/19	2026/2/23	medium
298266	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 : Python vulnerabilities (USN-8018-1)	Nessus	Ubuntu Local Security Checks	2026/2/6	2026/4/30	medium
296553	Debian dla-4455 : idle-python3.9 - security update	Nessus	Debian Local Security Checks	2026/1/25	2026/4/30	medium
306693	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python311 (SUSE-SU-2026:1349-1)	Nessus	SuSE Local Security Checks	2026/4/16	2026/4/16	high
294786	Debian dla-4445 : idle-python3.9 - security update	Nessus	Debian Local Security Checks	2026/1/20	2026/4/30	medium
296562	openSUSE 16 Security Update : python313 (openSUSE-SU-2026:20081-1)	Nessus	SuSE Local Security Checks	2026/1/26	2026/4/30	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

high

medium

medium