https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T12:35:11.655131+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-04279 bdu:2024-04279 2026-10-07T12:35:11.880813+00:00 bdu:2024-04279 https://cve.radiocsirt.org/vuln/euvd-2026-225123 EUVD-2026-225123 2026-10-07T12:35:11.880853+00:00 EUVD-2026-225123 https://cve.radiocsirt.org/vuln/fkie_cve-2024-29156 fkie_cve-2024-29156 2026-10-07T12:35:11.880867+00:00

In OpenStack Murano through 16.0.0, when YAQL before 3.0.0 is used, the Murano service's MuranoPL extension to the YAQL language fails to sanitize the supplied environment, leading to potential leakage of sensitive service account information.

 https://cve.radiocsirt.org/vuln/ghsa-mvf6-hwxh-7v76 GHSA-mvf6-hwxh-7v76 — Information leakage in YAQL 2026-10-07T12:35:11.880898+00:00

Affected: PyPI: yaql

YAQL before 3.0.0 is used in Murano, the Murano service's MuranoPL extension to the YAQL language fails to sanitize the supplied environment, leading to potential leakage of sensitive service account information.

 https://cve.radiocsirt.org/vuln/gsd-2024-29156 gsd-2024-29156 2026-10-07T12:35:11.880931+00:00 gsd-2024-29156 https://cve.radiocsirt.org/vuln/oesa-2024-1328 OESA-2024-1328 — python-yaql security update 2026-10-07T12:35:11.880943+00:00

Affected: openEuler:22.03-LTS: python-yaql

YAQL (Yet Another Query Language) is an embeddable and extensible query language, that allows performing complex queries against arbitrary objects. It has a vast and comprehensive standard library of frequently used querying functions and can be extend even further with user-specified functions. YAQL is written in python and is distributed via PyPI. Security Fix(es): In OpenStack Murano through 16.0.0, when YAQL before 3.0.0 is used, the Murano service's MuranoPL extension to the YAQL language fails to sanitize the supplied environment, leading to potential leakage of sensitive service account information.(CVE-2024-29156)

 https://cve.radiocsirt.org/vuln/pysec-2026-2059 PYSEC-2026-2059 — Information leakage in YAQL 2026-10-07T12:35:11.880966+00:00

Affected: PyPI: yaql

YAQL before 3.0.0 is used in Murano, the Murano service's MuranoPL extension to the YAQL language fails to sanitize the supplied environment, leading to potential leakage of sensitive service account information.

 https://cve.radiocsirt.org/vuln/rhsa-2024:1930 RHSA-2024:1930 — Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (openstack-tripleo-heat-templates and python-yaql) security… 2026-10-07T12:35:11.880984+00:00

YAQL: OpenStack Murano Component Information Leakage

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-29156 UBUNTU-CVE-2024-29156 2026-10-07T12:35:11.881002+00:00

Affected: Ubuntu:16.04:LTS: murano, Ubuntu:18.04:LTS: murano, Ubuntu:20.04:LTS: murano, Ubuntu:22.04:LTS: murano, Ubuntu:24.04:LTS: murano

In OpenStack Murano through 16.0.0, when YAQL before 3.0.0 is used, the Murano service's MuranoPL extension to the YAQL language fails to sanitize the supplied environment, leading to potential leakage of sensitive service account information.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0940 WID-SEC-W-2024-0940 — Red Hat OpenStack: Schwachstelle ermöglicht Privilegieneskalation 2026-10-07T12:35:11.881026+00:00

Ein lokaler Angreifer kann eine Schwachstelle in Red Hat OpenStack ausnutzen, um seine Privilegien zu erhöhen.