Security update for python-dynaconf
view advisory published 2026-03-25
Security update for python-dynaconf
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-33154US | high8.1 | Exploit | ||
dynaconf is a configuration management tool for Python. Prior to version 3.2.13, Dynaconf is vulnerable to Server-Side Template Injection (SSTI) due to unsafe template evaluation i… | ||||
02
references
External citations — patches, advisories, analysis.
- SUSE Bug 1260063self
- URL of this CSAF noticeself
- SUSE CVE CVE-2026-33154 pageself
- SUSE ratingsexternal
03
remediations (1)
- Fixedpython313-dynaconf-0:3.2.5-bp160.2.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan