Skip to content
OpenAdvisories
Medium USN-8505-1 1 CVE

python-parsl vulnerability

Published Jul 6, 2026 · Updated Jul 6, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Parsl incorrectly constructed SQL queries using
unsafe string formatting with user-supplied input in the parsl-visualize
component. A remote attacker could possibly use this issue to perform SQL
injection attacks, leading to data exfiltration or a denial of service.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 24.04 LTS Pro:24.04:LTS python-parsl 2024.02.26+ds-1ubuntu0.1~esm1

Vulnerabilities 1

  • Medium 5.3
    CVE-2026-21892

    Parsl Monitoring Visualization Vulnerable to SQL Injection

    Parsl is a Python parallel scripting library. A SQL Injection vulnerability exists in the parsl-visualize component of versions prior to 2026.01.05. The application constructs SQL queries using unsafe string formatting (Python % operator) with user-supplied i…

    Parsl parsl python-parsl parsl Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2026-21892