CVE-2026-29090

2 advisories.

PyPI/rucio CVE-2026-29090: critical 9.9

Rucio has SQL Injection in FilterEngine PostgreSQL Query Builder via DID Search API

Action: Upgrade rucio to 35.8.5 or later.

pip install rucio==35.8.5

pip install rucio==38.5.5

pip install rucio==39.4.2

pip install rucio==40.1.1

Affected

introduced	fixed	last affected
1.30.0	35.8.5	-
36.0.0	38.5.5	-
39.0.0	39.4.2	-
40.0.0	40.1.1	-

Fixed versions

35.8.5

38.5.5

39.4.2

40.1.1

Sources

CVE-2026-29090 · published 2026-05-06T16:44:07Z · modified 2026-06-30T16:45:17.925520051Z · JSON

PyPI/rucio CVE-2026-29090: critical 9.9

Rucio has SQL Injection in FilterEngine PostgreSQL Query Builder via DID Search API

Action: Upgrade rucio to 35.8.5 or later.

pip install rucio==35.8.5

pip install rucio==38.5.5

pip install rucio==39.4.2

pip install rucio==40.1.1

Affected

introduced	fixed	last affected
1.30.0	35.8.5	-
36.0.0	38.5.5	-
39.0.0	39.4.2	-
40.0.0	40.1.1	-

Fixed versions

35.8.5

38.5.5

39.4.2

40.1.1

Sources

CVE-2026-29090 · published 2026-06-29T11:50:49.082878Z · modified 2026-07-02T13:00:06.505900329Z · JSON