PyPI/senaite-core CVE-2026-54569: critical 9.8, EPSS 1.16%
senaite.core Vulnerable to Eval Injection and Missing Authorization
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | - | 2.6.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-jrw6-7x4q-w25j
- https://github.com/senaite/senaite.core/security/advisories/GHSA-jrw6-7x4q-w25j
- https://github.com/senaite/senaite.core/pull/2903
- https://github.com/senaite/senaite.core/pull/2919
- https://github.com/senaite/senaite.core/commit/a24d65e99a17ac43c5374ed9f0a60d0fe60d2f74
- https://github.com/senaite/senaite.core/commit/ef4b6d73575b0fbc0edc6114e5e025089aaf9eb7
- https://github.com/senaite/senaite.core
CVE-2026-54569 · published · modified · JSON