{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"2.0.0","last_affected":"2.6.0"}],"component":"senaite-core","cve_ids":["CVE-2026-54569"],"ecosystem":"PyPI","epss":0.01156,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-jrw6-7x4q-w25j","id":"tcs_01M5KH8KFK6QEMDF1WZ13RG5R8","modified_at":"2026-09-10T12:15:12.226358902Z","published_at":"2026-09-10T09:44:57.530435Z","references":["https://osv.dev/vulnerability/PYSEC-2026-3919","https://github.com/senaite/senaite.core/security/advisories/GHSA-jrw6-7x4q-w25j","https://github.com/senaite/senaite.core/pull/2903","https://github.com/senaite/senaite.core/pull/2919","https://github.com/senaite/senaite.core/commit/a24d65e99a17ac43c5374ed9f0a60d0fe60d2f74","https://github.com/senaite/senaite.core/commit/ef4b6d73575b0fbc0edc6114e5e025089aaf9eb7","https://github.com/senaite/senaite.core","https://pypi.org/project/senaite-core","https://github.com/advisories/GHSA-jrw6-7x4q-w25j","https://nvd.nist.gov/vuln/detail/CVE-2026-54569"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"PYSEC-2026-3919","url":"https://osv.dev/vulnerability/PYSEC-2026-3919"}],"summary":"senaite.core Vulnerable to Eval Injection and Missing Authorization"}