Grav Flex Objects plugin 1.4.0 before 1.4.17 contains an authorization bypass because its generic...
CVE-2026-114659
Grav Flex Objects plugin 1.4.0 before 1.4.17 contains an authorization bypass because its generic /api/v1/flex-objects/p
2026-10-22 归档
今日共收录 1761 条安全情报，包含 937 个 CVE，415 篇安全通告，以及 100 篇研究论文。
← 返回归档列表virtualenv: Builtin creation follows linked environment directories
CVE-2026-113716
## Summary The builtin creator accepts existing directory symlinks through ensure_dir() and writes environment files th
virtualenv: Deletion recovery can change a symlink target's mode
CVE-2026-113724
## Summary The deletion error handler obtains permission bits with lstat() but applies them through chmod(), which foll
virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax
CVE-2026-113722
## Summary A destination path supplied to virtualenv can be interpreted as shell syntax by a generated POSIX console la
Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags
CVE-2026-112902
``` ============================================================================ Memory disclosure and segfault in libti
Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO
CVE-2026-112393
``` ============================================================================ Heap buffer overflow in _tiffWriteProc
Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer
CVE-2026-112396
### Summary Saving an image as TIFF to an in-memory buffer can trigger a heap use-after-free if libtiff rejects a tag at
Pillow: APNG background disposal allocates full canvas before decompression bomb check
CVE-2026-112399
``` ============================================================================ APNG background disposal allocates full
Pillow: MSP RLE decoder expands a tiny file into unbounded memory
CVE-2026-112892
### Summary The MSP RLE decoder expands run-length data into an in-memory buffer with no cap tied to the declared image
Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)
CVE-2026-112894
``` ============================================================================ Quadratic-time DoS in PDF save_all (Pdf
Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()
CVE-2026-112391
### Summary `PdfParser`'s `get_value()` can recurse without any limit and crash with an uncaught `RecursionError`. It is
Pillow: Image.quantize() with empty palette leaks uninitialized stack memory
CVE-2026-112898
``` ============================================================================ Image.quantize() with empty palette lea
Pillow: Infinite loop in MIC n_frames when the embedded TIFF
CVE-2026-112390
``` ============================================================================ Infinite loop in MIC n_frames when the
Pillow: Quadratic GIF comment copying during save
CVE-2026-112891
On Pillow 12.3.0 and upstream `main` (`ad277e2761b489681e71b51e91367d46b0ceabb9`), a GIF with a long comment makes `_get
Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0
CVE-2026-112405
### Summary `Image.merge()` checks the mode of every input band except band 0. If band 0 is a single-band `I` or `F` ima
Pillow: Invalid free in FreeType glyph rendering when a stroker is active
CVE-2026-112893
### Summary When text is drawn with a non-zero stroke width, Pillow creates a FreeType stroker and then loads each glyph
Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform
CVE-2026-112402
``` ============================================================================ Double free in ImagingScaleAffine on ca
Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size
CVE-2026-112394
### Summary On `main`, even with the guard in #9725, it's possible to have these decoders read 1 to 3 bytes past the en
Pillow: Argument Injection in Ghostscript call, potentially leading into RCE
CVE-2026-112900
### Summary `PIL.EpsImagePlugin.Ghostscript()` builds the Ghostscript command line using the input file path (`fp.name`)
pypdf: Unvalidated JPEG image data loading
CVE-2026-113786
### Impact An attacker who uses this vulnerability can craft a PDF which leads to arbitrary image parsers being called.