PYSEC-2026-925

See a problem?
Import Source
https://github.com/pypa/advisory-database/blob/main/vulns/sosreport/PYSEC-2026-925.yaml
JSON Data
https://api.osv.dev/v1/vulns/PYSEC-2026-925
Aliases
Published
2026-07-06T08:03:32.275629Z
Modified
2026-07-07T11:45:51.077674573Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
sosreport Exposure of Sensitive Information vulnerability
Details

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev

References

Affected packages

PyPI / sosreport

Package

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4

Affected versions

3.*
3.2.0a1
3.2

Database specific

source
"https://github.com/pypa/advisory-database/blob/main/vulns/sosreport/PYSEC-2026-925.yaml"