CVE-2026-29080

2 advisories.

PyPI/rucio CVE-2026-29080: critical 9.9

Rucio has SQL Injection in FilterEngine Oracle JSON Path via DID Search API

Action: Upgrade rucio to 35.8.5 or later.

pip install rucio==35.8.5

pip install rucio==38.5.5

pip install rucio==39.4.2

pip install rucio==40.1.1

Affected

introduced	fixed	last affected
1.27.0	35.8.5	-
36.0.0	38.5.5	-
39.0.0	39.4.2	-
40.0.0	40.1.1	-

Fixed versions

35.8.5

38.5.5

39.4.2

40.1.1

Sources

CVE-2026-29080 · published 2026-05-06T16:42:49Z · modified 2026-06-30T16:45:17.930458412Z · JSON

PyPI/rucio CVE-2026-29080: critical 9.9

Rucio has SQL Injection in FilterEngine Oracle JSON Path via DID Search API

Action: Upgrade rucio to 35.8.5 or later.

pip install rucio==35.8.5

pip install rucio==38.5.5

pip install rucio==39.4.2

pip install rucio==40.1.1

Affected

introduced	fixed	last affected
1.27.0	35.8.5	-
36.0.0	38.5.5	-
39.0.0	39.4.2	-
40.0.0	40.1.1	-

Fixed versions

35.8.5

38.5.5

39.4.2

40.1.1

Sources

CVE-2026-29080 · published 2026-06-29T11:50:50.519440Z · modified 2026-07-02T13:00:06.458262030Z · JSON