Docling: Crafted DoclingDocument JSON embeds local image files into converted output

CVE-2026-105748

### Summary docling accepts serialized `DoclingDocument` JSON as an input format (`InputFormat.JSON_DOCLING`, enabled b

历史摘要 · 未重新核验 · GitHub Advisory

Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustion

CVE-2026-105749

### Summary The HTML, JATS, ODS (OpenDocument spreadsheet) and BoxNote backends accept table `rowspan` / `colspan` valu

历史摘要 · 未重新核验 · GitHub Advisory

Docling imports plugin entry points before the allow_external_plugins check

CVE-2026-105745

### Summary `allow_external_plugins=False` (the default, and the CLI default) is meant to restrict docling to its own m

历史摘要 · 未重新核验 · GitHub Advisory

Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration

CVE-2026-105697

### Summary Before **Langflow 1.10.3**, the MCP stdio transport launched whatever `command` / `args` a user put in an M

历史摘要 · 未重新核验 · GitHub Advisory

Langflow : Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints

CVE-2026-105698

### Summary Before **Langflow 1.10.1**, two deprecated but still-routed endpoints in the chat API did not check that th

历史摘要 · 未重新核验 · GitHub Advisory

Langflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers

CVE-2026-105699

### Summary Langflow's project-scoped MCP transport authenticates the caller for the `project_id` in the connection URL,

历史摘要 · 未重新核验 · GitHub Advisory

openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation

CVE-2026-105801

### Impact A malicious OpenAPI document processed by any `openapi-python-client` prior to 0.29.1 can generate arbitrary

历史摘要 · 未重新核验 · GitHub Advisory

Vyper: Memory corruption using function calls within tuples / nested calls

### Impact When performing a function call inside a tuple or as an argument inside another function call, there is a mem

历史摘要 · 未重新核验 · GitHub Advisory

Vyper: Call stack corruption when passing complex type containing non-base type members as argument

### Impact When we pass a multi-dimensional array (like `[[1, 2], [3, 4]]`) as an argument to internal/external function

历史摘要 · 未重新核验 · GitHub Advisory

Vyper: Return inside for loop more than 1 level deep

# VVE-2020-0002 Earlier today, we received a responsible disclosure of a potential issue from @michwill (developer of @c

历史摘要 · 未重新核验 · GitHub Advisory

Docling: `enable_local_fetch` is not enforced in HTML browser-rendering mode

CVE-2026-105750

### Summary When the HTML backend renders pages in a headless browser (`HTMLBackendOptions(render_page=True)`), the `en

历史摘要 · 未重新核验 · GitHub Advisory

vLLM: Mirrored multimodal IPC caches desync after a rejected request — a later request reusing the same media hash trips a receiver assertion in the engine core

CVE-2026-105753

## Affected - **Ecosystem / package:** pip / `vllm` - **Affected versions:** vLLM ≤ 0.25.1 (confirmed on 0.25.1, commit

历史摘要 · 未重新核验 · GitHub Advisory

vLLM: Harmony tool continuations drop `cache_salt` — restoring a cross-tenant prefix-cache membership oracle

CVE-2026-105752

## Affected - **Ecosystem / package:** pip / `vllm` - **Affected versions:** vLLM ≤ 0.25.1 (confirmed on 0.25.1, commit

历史摘要 · 未重新核验 · GitHub Advisory

Werkzeug safe_join() allows Windows special device names

CVE-2026-102598

Werkzeug's `safe_join` function allows Windows device names as filenames when they have an empty ADS marker on NTFS. Th

历史摘要 · 未重新核验 · GitHub Advisory

PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encoding

CVE-2026-96749

An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may

历史摘要 · 未重新核验 · GitHub Advisory

PyMongo: PYTHON-5986 Host injection in PyMongo connection string parsing via percent-encoded delimiters

CVE-2026-96748

### Summary PyMongo percent-decoded the entire host section of a connection string before splitting it into individual

历史摘要 · 未重新核验 · GitHub Advisory

PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryption

CVE-2026-96747

### Summary PyMongo passed the KMS endpoint of a data key verbatim into `parse_host()`, which returns any string ending

历史摘要 · 未重新核验 · GitHub Advisory

PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion

CVE-2026-102275

### Summary PyJWT accepts internally inconsistent OKP private JWKs where the declared public key `x` does not correspon

历史摘要 · 未重新核验 · GitHub Advisory

vLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling does not reach

CVE-2026-105758

### Summary An unauthenticated remote attacker can exhaust the memory of the vLLM API-server process by raising the req

历史摘要 · 未重新核验 · GitHub Advisory

vLLM: GLMGA video sampling permits request-driven CPU and memory exhaustion

CVE-2026-105760

## Summary The OpenAI-compatible chat endpoint accepts request-level video loader options through `media_io_kwargs`. A

历史摘要 · 未重新核验 · GitHub Advisory