The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - DISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.get_data() has     the same security model as open(). The documentation has been updated to clarify this point. There is no     vulnerability in the function if following the intended security model. pkgutil.get_data() did not     validate the resource argument as documented, allowing path traversals. (CVE-2026-3479)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-3479

medium Nessus Plugin ID 303113

Version 1.6