Detections
Analytics
SCA: security update for pylint (GHSA-22qq-2fwx-7p67)
medium Tenable Self-Hosted Container Security Plugin ID 477633
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- Pylint is a static code analyser for Python. From 0.15.2 until 4.0.9, Pylint stores module statistics in
predictable files under PYLINT_HOME and loads those files with pickle.load on a later run. An attacker who
can write to a shared, group-writable, or otherwise untrusted cache directory can replace a stats cache
with crafted serialized data, causing arbitrary code to execute with the privileges of the user who next
runs Pylint. The default per-user cache is not normally writable by another user. This issue is fixed in
version 4.0.9. (CVE-2026-114608)
Solution
Update the pylint library and its related packages to version 4.0.9 or later.See Also
Plugin Details
Severity: Medium
ID: 477633
Version: Revision 1.1
Type: Local
Family: SCA Checks
Published: 10/27/2026
Updated: 10/27/2026
Risk Information
VPR
Risk Factor: Medium
Score: 6.9
Percentile: 96.41
Vendor
Vendor Severity: Medium
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 5.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS Score Source: CVE-2026-114608
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 8.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
CVSS v4
Risk Factor: Medium
Base Score: 5.4
Threat Score: 2
Threat Vector: CVSS:4.0/E:U
Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 10/27/2026
Vulnerability Publication Date: 10/22/2026
Reference Information
CVE: CVE-2026-114608
cwe: CWE-502