{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"2.0.0","last_affected":"2.6.0"}],"component":"senaite-core","cve_ids":["CVE-2026-54569"],"ecosystem":"PyPI","epss":0.01156,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-jrw6-7x4q-w25j","id":"tcs_01M5KFPKAKKYTPX120JGVH8F97","modified_at":"2026-09-10T12:26:08.424127847Z","published_at":"2026-08-26T15:28:47Z","references":["https://osv.dev/vulnerability/GHSA-jrw6-7x4q-w25j","https://github.com/senaite/senaite.core/security/advisories/GHSA-jrw6-7x4q-w25j","https://github.com/senaite/senaite.core/pull/2903","https://github.com/senaite/senaite.core/pull/2919","https://github.com/senaite/senaite.core/commit/a24d65e99a17ac43c5374ed9f0a60d0fe60d2f74","https://github.com/senaite/senaite.core/commit/ef4b6d73575b0fbc0edc6114e5e025089aaf9eb7","https://github.com/senaite/senaite.core"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-jrw6-7x4q-w25j","url":"https://osv.dev/vulnerability/GHSA-jrw6-7x4q-w25j"}],"summary":"senaite.core Vulnerable to Eval Injection and Missing Authorization"}