Known vulnerabilities in python-unversioned-command

Vendor: OpenAnolis
Software: python-unversioned-command
Software CPE: cpe:2.3:o:openanolis:python-unversioned-command:*:*:*:*:*:anolis_os:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 29
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting python-unversioned-command python-unversioned-command is affected by 29 known vulnerabilities: 3 high, 21 medium, 5 low Critical High Medium Low

Vulnerabilities (29)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153035 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-11940		 CWE-22 High
No
No
 3.11.6-32 01.10.2026 SB2026100109
SB2026100111
SB2026100113
and 8 more
#VU122819 - Command injection
CVE-2025-15367		 CWE-77 Medium
No
No
 3.11.6-16 13.02.2026 SB2026021343
SB2026021347
SB2026021348
and 57 more
#VU122818 - Command injection
CVE-2025-15366		 CWE-77 Medium
No
No
 3.11.6-16 13.02.2026 SB2026021343
SB2026021347
SB2026021348
and 53 more
#VU122817 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-1299		 CWE-93 Medium
No
No
 3.11.6-16 13.02.2026 SB2026021343
SB2026021347
SB2026021348
and 46 more
#VU122816 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2025-15282		 CWE-93 Medium
No
No
 3.11.6-16 13.02.2026 SB2026021343
SB2026021353
SB2026021354
and 25 more
#VU122815 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-0865		 CWE-444 Medium
No
No
 3.11.6-16 13.02.2026 SB2026021343
SB2026021347
SB2026021348
and 50 more
#VU122814 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-0672		 CWE-93 Medium
No
No
 3.11.6-16 13.02.2026 SB2026021343
SB2026021353
SB2026021354
and 30 more
#VU122813 - Improper input validation
CVE-2025-11468		 CWE-20 Medium
No
No
 3.11.6-20 13.02.2026 SB2026021343
SB2026021353
SB2026021354
and 25 more
#VU119234 - Resource exhaustion
CVE-2025-13837		 CWE-400 Medium
No
No
 3.11.6-13 06.12.2025 SB2025120603
SB20251226352
SB2025123104
and 13 more
#VU119233 - Resource exhaustion
CVE-2025-13836		 CWE-400 Medium
No
No
 3.11.6-12 06.12.2025 SB2025120602
SB20251226352
SB2025123104
and 36 more
#VU118735 - Resource exhaustion
CVE-2025-6075		 CWE-400 Low
No
No
 3.11.6-11 24.11.2025 SB2025112495
SB2025112498
SB2025112569
and 26 more
#VU116971 - Improper input validation
CVE-2025-8291		 CWE-20 Medium
No
No
 3.11.6-10 14.10.2025 SB2025101418
SB2025101423
SB2025101424
and 47 more
#VU111967 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-4330		 CWE-59 High
No
No
 3.11.6-32 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 66 more
#VU111966 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-4517		 CWE-22 High
Available
No
 3.11.6-9 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 77 more
#VU99357 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-9287		 CWE-78 Low
No
No
 3.11.6-9 28.10.2024 SB2024102836
SB2024102838
SB20241101111
and 117 more
#VU98567 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-3219		 CWE-362 Low
No
No
 3.11.6-9 15.10.2024 SB2024101561
SB2024101575
SB2024101576
and 7 more
#VU96945 - Resource exhaustion
CVE-2024-7592		 CWE-400 Medium
No
No
 3.11.6-9 09.09.2024 SB2024090916
SB2024090917
SB2024090918
and 72 more
#VU96596 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-8088		 CWE-835 Medium
No
No
 3.11.6-9 28.08.2024 SB2024082860
SB2024082861
SB2024082862
and 82 more
#VU87685 - Resource exhaustion
CVE-2024-0450		 CWE-400 Medium
No
No
 3.11.6-9 21.03.2024 SB2024032107
SB2024032110
SB2024040848
and 80 more
#VU82980 - Improper input validation
CVE-2023-27043		 CWE-20 Medium
No
No
 3.11.6-9 10.11.2023 SB2023041957
SB2023111064
SB2023111315
and 120 more


Showing elements 1 - 20 out of 29