There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can take excessive time to
    retrieve page labels from a crafted PDF containing a flat page-label number tree with many ranges. The
    page_labels property resolves each page independently and repeatedly scans the same /Nums array from the
    beginning, causing work to grow with both the page count and the number of label ranges. This issue is
    fixed in version 6.21.3. (CVE-2026-119206)

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - pypdf 是一个免费的开源纯 python PDF 库。在之前 6.21.3的版本中，pypdf 可能会花费过多时间从包含具有多个范围的平面页面标签编号树的构建 PDF 中检索页面标签。page_labels 属性独立解析每个页面，并从头开始反复扫描相同的 /Nums 数组，从而导致工作随着页面计数和标签范围数的增加而增加。此问题已在 6.21.3 版本中修复。(CVE-2026-119206)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - pypdf 是免費且開放原始碼的 pure-python PDF 程式庫。在 6.21.3之前，pypdf 可能需要過多的時間才能從包含具有許多範圍的平面頁面標籤編號樹狀結構的特製 PDF 中擷取頁面標籤。page_labels 屬性會獨立解析每個頁面，並從一開始重複掃描相同的 /Nums 陣列，導致工作隨著頁數和標籤範圍數目的增加而增加。6.21.3 版已修正此問題。(CVE-2026-119206)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - pypdf は、無料のオープンソース pure-python PDF ライブラリです。より前の 6.21.3 以前では、pypdf は、多くの範囲を持つフラットなページラベル番号ツリーを含む細工された PDF からページラベルを取得するのに、過剰な時間を要していました。page_labels プロパティは、各ページを独立して解決し、最初から同じ /Nums 配列を繰り返しスキャンするため、ページ数とラベル範囲の数の両方で作業が増えます。この問題はバージョン 6.21.3 で修正されています。(CVE-2026-119206)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can take excessive time to     retrieve page labels from a crafted PDF containing a flat page-label number tree with many ranges. The     page_labels property resolves each page independently and repeatedly scans the same /Nums array from the     beginning, causing work to grow with both the page count and the number of label ranges. This issue is     fixed in version 6.21.3. (CVE-2026-119206)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22219-1 advisory.

    Changes in python-pypdf:

    - CVE-2026-119209: negative /Index values and multiplied xref       streams can lead to clamp bypass and server memory exhaustion       (bsc#1288950)
    - CVE-2026-119208: trusting forged /Count values in encrypted PDF       page trees can lead to excessive resource consumption and denial       of service (bsc#1288951)
    - CVE-2026-119207: nested exception text accumulation in strict       mode parsing can lead to memory amplification and application       denial of service (bsc#1288952)
    - CVE-2026-119206: repeated sequential /Nums scanning in       page_labels resolution can lead to algorithmic complexity attacks       and denial of service (bsc#1288944)
    - CVE-2026-119205: misdirected reference tracking during dictionary       cloning can lead to cycle-detection bypass and thread-hanging       infinite loops (bsc#1288943)
    - CVE-2026-119204: unbounded resource entry copying during       page-tree flattening can lead to excessive memory allocation and       denial of service (bsc#1288942)
    - CVE-2026-119203: unterminated trailer search in incomplete       cross-reference tables can lead to an infinite loop and       thread-blocking denial of service (bsc#1288941)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
478148	Chainguard: multiple open-webui packages: security update to 0.12.3-r14	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	2026/11/1	2026/11/3	high
478052	SCA: security update for pypdf (GHSA-42gh-23hr-vphw)	Tenable Cloud Security	SCA Checks	2026/10/31	2026/11/3	high
478148	Chainguard: multiple open-webui packages: security update to 0.12.3-r14	Tenable Cloud Security	Chainguard Local Security Checks	2026/11/1	2026/11/3	high
478052	SCA: security update for pypdf (GHSA-42gh-23hr-vphw)	Tenable Self-Hosted Container Security	SCA Checks	2026/10/31	2026/11/3	high
374227	Linux Distros 未修补的漏洞：CVE-2026-119206	Nessus	Misc.	2026/10/30	2026/11/6	high
374227	Linux Distros 未修補弱點：CVE-2026-119206	Nessus	Misc.	2026/10/30	2026/11/6	high
374227	Linux Distros のパッチ未適用の脆弱性: CVE-2026-119206	Nessus	Misc.	2026/10/30	2026/11/6	high
374227	Linux Distros Unpatched Vulnerability : CVE-2026-119206	Nessus	Misc.	2026/10/30	2026/11/6	high
376242	openSUSE 16 Security Update : python-pypdf (openSUSE-SU-2026:22219-1)	Nessus	SuSE Local Security Checks	2026/11/5	2026/11/5	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high

high

high