Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform
CVE-2026-112402
``` ============================================================================ Double free in ImagingScaleAffine on ca
#advisory
共收录 22948 条相关情报。
← 返回所有主题Django REST framework: JSONParser applies an attacker-named codec to the request stream
CVE-2026-114136
Django REST framework is a toolkit for building Web APIs. From 3.6.4 until 3.18.2, JSONParser.parse in rest_framework/pa
Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size
CVE-2026-112394
### Summary On `main`, even with the guard in #9725, it's possible to have these decoders read 1 to 3 bytes past the en
leomoon-studios wiki-go API editor.go SourceHandler path traversal
CVE-2026-114376
A weakness has been identified in leomoon-studios wiki-go up to 1.9.1. Affected by this vulnerability is the function Sa
Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorization
CVE-2026-114135
Jupyter Server is the backend for Jupyter web applications. From 2.0.0 until 2.6.0, enabling GatewayClient.url replaced
Pillow: Argument Injection in Ghostscript call, potentially leading into RCE
CVE-2026-112900
### Summary `PIL.EpsImagePlugin.Ghostscript()` builds the Ghostscript command line using the input file path (`fp.name`)
pypdf: Unvalidated JPEG image data loading
CVE-2026-113786
### Impact An attacker who uses this vulnerability can craft a PDF which leads to arbitrary image parsers being called.
Vitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token file
CVE-2026-112948
### Summary In Vitest 5, Vite's `server.fs.deny` is not applied as intended on Vitest's dev servers. Depending on the s
Vitest: Code injection via unauthenticated manual mock registration
CVE-2026-112949
### Summary `@vitest/mocker`'s `interceptorPlugin` accepts mock registrations on Vite's dev-server WebSocket with no au
Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fix
CVE-2026-112950
## Summary The path traversal fix released for [GHSA-82fw-gwwq-j7x9](https://github.com/vitest-dev/vitest/security/advi
leomoon-studios wiki-go Files Rename API files.go RenameFileHandler path traversal
CVE-2026-114375
A security flaw has been discovered in leomoon-studios wiki-go up to 1.9.1. Affected is the function RenameFileHandler o
ApostropheCMS: Exposure of Sensitive Information via predictable export filenames
CVE-2026-112953
## Summary When a user exports content through `@apostrophecms/import-export`, the module copies the generated archive
OpenClaw: Browser CDP discovery could accept blocked WebSocket URLs
CVE-2026-62197
### Summary Browser CDP discovery could accept blocked WebSocket URLs. In affected versions, a lower-trust caller or co
Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()
CVE-2026-112408
Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker Python SD
leomoon-studios wiki-go fetch-metadata Endpoint metadata_api.go server-side request forgery
CVE-2026-114374
A vulnerability was identified in leomoon-studios wiki-go up to 1.9.1. This impacts an unknown function of the file inte
HarnessRouter Targets Test Endpoint app.py server-side request forgery
CVE-2026-114362
A flaw has been found in HarnessRouter up to 0.31.12. This impacts an unknown function of the file gateway/app.py of the
HarnessRouter Identity Mode app.py improper authorization
CVE-2026-114361
A vulnerability was detected in HarnessRouter up to 0.31.10. This affects an unknown function of the file gateway/app.py
Session Lock Leak on an Invalid UI Id Allows Denial of Service in Vaadin Framework 8
CVE-2026-110803
VaadinService.requestEnd() in Vaadin Framework 8 locks the session and then reads the v-uiId request parameter outside t
Multiple Vulnerabilities in the Highcharts Library Bundled with Vaadin Charts
CVE-2026-107588
Vaadin Charts renders charts with the Highcharts library and pins an exact version of it, 9.2.2 in Vaadin 22 to 24 and 1
Missing kernel object permission check in devmux syscalls allows unprivileged user threads to retarget a device multiplexer
CVE-2026-19947
The device multiplexer pseudo-driver in drivers/misc/devmux/devmux.c exposes two system calls, devmux_select_get() and d