Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch

CVE-2026-59205

### Summary Pillow's public `ImageCms.ImageCmsTransform.apply(im, imOut)` API can trigger controlled native heap corrup

历史摘要 · 未重新核验 · GitHub Advisory

Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service

CVE-2026-59204

### Summary `src/libImaging/Jpeg2KDecode.c:853` accumulates `total_component_width` across every tile in a JPEG2000 imag

历史摘要 · 未重新核验 · GitHub Advisory

Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service

CVE-2026-59203

### Summary Pillow's EPS parser (PIL/EpsImagePlugin.py) accepts a negative byte count in the %%BeginBinary directive. A

历史摘要 · 未重新核验 · GitHub Advisory

Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()

CVE-2026-59200

### Summary `PdfParser.PdfStream.decode()` in Pillow's `PdfParser.py` calls `zlib.decompress()` with the `bufsize` param

历史摘要 · 未重新核验 · GitHub Advisory

Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow

CVE-2026-59199

### Summary Pillow's public image coordinate APIs can trigger a native heap out-of-bounds write when given coordinates

历史摘要 · 未重新核验 · GitHub Advisory

Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images

CVE-2026-59198

### Summary Pillow's TGA RLE encoder reads past its row buffer when saving a mode `"1"` image. Adjacent process heap by

历史摘要 · 未重新核验 · GitHub Advisory

Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`

CVE-2026-59197

### Summary Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very large odd f

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-50651 – .NET Denial of Service Vulnerability

CVE-2026-50651

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-50659 – .NET Spoofing Vulnerability

CVE-2026-50659

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-50525 – .NET Denial of Service Vulnerability

CVE-2026-50525

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-50528 – .NET Security Feature Bypass Vulnerability

CVE-2026-50528

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-50648 – .NET Denial of Service Vulnerability

CVE-2026-50648

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-50524 – .NET Denial of Service Vulnerability

CVE-2026-50524

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-47304 – .NET Security Feature Bypass Vulnerability

CVE-2026-47304

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-47302 – .NET Denial of Service Vulnerability

CVE-2026-47302

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-57108 – .NET Denial of Service Vulnerability

CVE-2026-57108

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in the

历史摘要 · 未重新核验 · GitHub Advisory

Axios Node HTTP adapter can use an inherited proxy after interceptor config cloning

## Summary Axios’ Node.js HTTP adapter can route requests through an attacker-controlled proxy when `Object.prototype.p

历史摘要 · 未重新核验 · GitHub Advisory

Axios form serializer maxDepth bypass via {} metatoken

## Summary Axios versions in the fixed lines for GHSA-62hf-57xw-28j9 still contain an incomplete depth-limit bypass in

历史摘要 · 未重新核验 · GitHub Advisory

Axios: Nested axios option objects can consume polluted prototype values

## Summary Axios can consume inherited properties from nested request option objects when the JavaScript process alread

历史摘要 · 未重新核验 · GitHub Advisory

Axios: HTTP/2 streamed uploads bypass `maxBodyLength`

## Summary Axios versions with Node.js HTTP/2 support allow streamed request bodies to bypass `maxBodyLength` enforceme

历史摘要 · 未重新核验 · GitHub Advisory