The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0895-1 advisory.

  - An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not     remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as     demonstrated by j a v a s c r i p t: in Internet Explorer. This is a similar issue to CVE-2014-3146.
    (CVE-2018-19787)

  - A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly     imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote     attacker could exploit this flaw to run arbitrary HTML/JS code. (CVE-2020-27783)

  - An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling     the safe_attrs_only and forms arguments, the Cleaner class does not remove the formaction attribute     allowing for JS to bypass the sanitizer. A remote attacker could exploit this flaw to run arbitrary JS     code on users who interact with incorrectly sanitized HTML. This issue is patched in lxml 4.6.3.
    (CVE-2021-28957)

  - lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML     Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG     files embedded using data URIs. Users that employ the HTML cleaner in a security relevant context should     upgrade to lxml 4.6.5 to receive a patch. There are no known workarounds available. (CVE-2021-43818)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4151 advisory.

  - In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content     retrieved via HTTP. (CVE-2020-27619)

  - The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before     3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and     urllib.parse.parse_qs by using a vector called parameter cloaking. When the attacker can separate query     parameters using a semicolon (;), they can cause a difference in the interpretation of the request between     the proxy (running with default configuration) and the server. This can result in malicious requests being     cached as completely safe ones, as the proxy would usually not see the semicolon as a separator, and     therefore would not include it in a cache key of an unkeyed parameter. (CVE-2021-23336)

  - Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing     serialized Python objects) via directory traversal, leading to code execution. (CVE-2021-42771)

  - An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when     performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only     contains the exception keyword. (CVE-2021-20270)

  - In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular     expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are     vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service.
    (CVE-2021-27291)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2829:01 advisory.

    * python: Unsafe use of eval() on data retrieved via HTTP in the test suite (CVE-2020-27619)
      * python-jinja2: ReDoS vulnerability in the urlize filter (CVE-2020-28493)
      * python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute     arbitrary code (CVE-2021-20095, CVE-2021-42771)
      * python-pygments: Infinite loop in SML lexer may lead to DoS (CVE-2021-20270)
      * python: Web cache poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon     in query parameters (CVE-2021-23336)
      * python-pygments: ReDoS in multiple lexers (CVE-2021-27291)
      * python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS     (CVE-2021-28957)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4162 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python-psutil: Double free because of refcount mishandling (CVE-2019-18874)

    * python-jinja2: ReDoS vulnerability in the urlize filter (CVE-2020-28493)

    * python: Information disclosure via pydoc (CVE-2021-3426)

    * python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute     arbitrary code (CVE-2021-20095, CVE-2021-42771)

    * python: Web cache poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in     query parameters (CVE-2021-23336)

    * python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS (CVE-2021-28957)

    * python-ipaddress: Improper input validation of octal strings (CVE-2021-29921)

    * python-urllib3: ReDoS in the parsing of authority part of URL (CVE-2021-33503)

    * python-pip: Incorrect handling of unicode separators in git references (CVE-2021-3572)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2021_4162 advisory.

    * python-psutil: Double free because of refcount mishandling (CVE-2019-18874)

    * python-jinja2: ReDoS vulnerability in the urlize filter (CVE-2020-28493)

    * python: Information disclosure via pydoc (CVE-2021-3426)

    * python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute     arbitrary code (CVE-2021-20095, CVE-2021-42771)

    * python: Web cache poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in     query parameters (CVE-2021-23336)

    * python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS (CVE-2021-28957)

    * python-ipaddress: Improper input validation of octal strings (CVE-2021-29921)

    * python-urllib3: ReDoS in the parsing of authority part of URL (CVE-2021-33503)

    * python-pip: Incorrect handling of unicode separators in git references (CVE-2021-3572)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-2905:01 advisory.

    python: Information disclosure via pydoc (CVE-2021-3426)         python: urllib: Regular expression DoS in AbstractBasicAuthHandler     (CVE-2021-3733)         python-lxml: Missing input sanitization for formaction HTML5 attributes may     lead to XSS (CVE-2021-28957)         python-ipaddress: Improper input validation of octal strings     (CVE-2021-29921)         python-urllib3: ReDoS in the parsing of authority part of URL     (CVE-2021-33503)         python-pip: Incorrect handling of unicode separators in git references     (CVE-2021-3572)         python: urllib: HTTP client possible infinite loop on a 100 Continue     response (CVE-2021-3737)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:4160 advisory.

  - An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling     the safe_attrs_only and forms arguments, the Cleaner class does not remove the formaction attribute     allowing for JS to bypass the sanitizer. A remote attacker could exploit this flaw to run arbitrary JS     code on users who interact with incorrectly sanitized HTML. This issue is patched in lxml 4.6.3.
    (CVE-2021-28957)

  - In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP     address string. This (in some situations) allows attackers to bypass access control that is based on IP     addresses. (CVE-2021-29921)

  - An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in     the authority component, the authority regular expression exhibits catastrophic backtracking, causing a     denial of service if a URL were passed as a parameter or redirected to via an HTTP redirect.
    (CVE-2021-33503)

  - There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince     another local or adjacent user to start a pydoc server could access the server and use it to disclose     sensitive information belonging to the other user that they would not normally be able to access. The     highest risk of this flaw is to data confidentiality. This flaw affects Python versions before 3.8.9,     Python versions before 3.9.3 and Python versions before 3.10.0a7. (CVE-2021-3426)

  - A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote     attacker could possibly use this issue to install a different revision on a repository. The highest threat     from this vulnerability is to data integrity. This is fixed in python-pip version 21.1. (CVE-2021-3572)

  - There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP     server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of     Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the     server to the client. The greatest threat that this flaw poses is to application availability.
    (CVE-2021-3733)

  - A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may     allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop,     consuming CPU time. The highest threat from this vulnerability is to system availability. (CVE-2021-3737)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
159062	SUSE SLES12 Security Update : python-lxml (SUSE-SU-2022:0895-1)	Nessus	SuSE Local Security Checks	3/18/2022	7/14/2023	high
155987	Oracle Linux 8 : python27:2.7 (ELSA-2021-4151)	Nessus	Oracle Linux Local Security Checks	12/10/2021	9/23/2025	high
294479	MiracleLinux 8 : python27:2.7 (AXSA:2021-2829:01)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	high
155193	RHEL 8 : python38:3.8 and python38-devel:3.8 (RHSA-2021:4162)	Nessus	Red Hat Local Security Checks	11/11/2021	9/10/2025	high
358117	Rocky Linux 8 [CIQ] Security Update: Cython-debugsource / PyYAML-debugsource / numpy-debugsource / etc Multiple Vulnerabilities (crlsa-2021_4162)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/1/2026	high
293979	MiracleLinux 8 : python39:3.9 and python39-devel:3.9 (AXSA:2022-2905:01)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	high
184693	Rocky Linux 8 : python39:3.9 and python39-devel:3.9 (RLSA-2021:4160)	Nessus	Rocky Linux Local Security Checks	11/6/2023	11/14/2023	critical

Detections

Analytics

Plugins Search

high

high

high

high

high

high

critical