Omnigent: Unvalidated os_env.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENT_RUNNER_WORKSPACE

CVE-2026-62677

### Summary An authenticated, non-admin user can obtain **arbitrary host-filesystem read/write** (and host environment-

历史摘要 · 未重新核验 · GitHub Advisory

Omnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCE

CVE-2026-62674

### Summary An authenticated user with edit access to their own session can overwrite a shared/template agent by upload

历史摘要 · 未重新核验 · GitHub Advisory

Omnigent: Uploaded Agent Bundle Allows Authenticated Runner RCE via Python Callable Tools

CVE-2026-62675

### Summary An authenticated user can upload a crafted agent bundle that defines a server-side Python callable tool. Th

历史摘要 · 未重新核验 · GitHub Advisory

NLTK: Default ENFORCE=False Disables All pathsec Security Controls

CVE-2026-62388

NLTK's pathsec.py security module defaults to ENFORCE=False (line 24), which means all 8 security validation functions o

历史摘要 · 未重新核验 · GitHub Advisory

NLTK: SSRF Fail-Open in validate_network_url() via DNS Resolution Failure

CVE-2026-63311

There is an SSRF vulnerability in NLTK 3.9.4's network URL validation. The validate_network_url() function in nltk/paths

历史摘要 · 未重新核验 · GitHub Advisory

Mistune: Denial of Service — RecursionError via Excessive Emphasis Markers in Markdown

CVE-2026-76098

## Summary Mistune v3.3.2 is vulnerable to a Denial of Service (DoS) attack via uncontrolled recursion in the HTML rende

历史摘要 · 未重新核验 · GitHub Advisory

pypdf: Possible long runtimes/large memory usage when retrieving outlines

CVE-2026-84310

### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consum

历史摘要 · 未重新核验 · GitHub Advisory

pypdf: Possible long runtimes/large memory usage when extracting XForm objects

CVE-2026-84311

### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consum

历史摘要 · 未重新核验 · GitHub Advisory

pypdf: Possible infinite loop for TreeObject.insert_child

CVE-2026-84309

### Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires a (us

历史摘要 · 未重新核验 · GitHub Advisory

sqlparse: Reindentation of tuple lists causes near-cap quadratic CPU consumption

CVE-2026-84305

### Summary When SQL is formatted with reindentation enabled, `ReindentFilter` repeatedly rebuilds prefixes of the curr

历史摘要 · 未重新核验 · GitHub Advisory

NLTK: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841)

CVE-2026-79675

## Vulnerability The fix for CVE-2026-12841 (CWE-88, JVM argument injection) added `_validate_java_options()` to block

历史摘要 · 未重新核验 · GitHub Advisory

NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary

CVE-2026-78680

Two NLTK sites executed the Graphviz `dot` program by bare name, so process creation resolved it via the search path — a

历史摘要 · 未重新核验 · GitHub Advisory

tornado: multipart split() creates huge temp list before max_parts check -> memory amplification DoS (httputil.py:34)

## Description ### Summary `parse_multipart_form_data` (httputil.py:34) calls `data.split(b"--"+boundary+b"\r\n")` **b

历史摘要 · 未重新核验 · GitHub Advisory

Tornado: Incomplete fix for CVE-2026-35536: cookie attribute injection re-opened via the legacy case-insensitive `**kwargs` path in `set_cookie`

## Summary The CVE-2026-35536 fix added a validation loop that rejects `[\x00-\x20\x3b\x7f]`, but only for the hardcoded

历史摘要 · 未重新核验 · GitHub Advisory

Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`

CVE-2026-73228

## Summary While investigating Django REST Framework's request parsing behavior, I identified that DRF's high-level `re

历史摘要 · 未重新核验 · GitHub Advisory

Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requests

CVE-2026-73229

Summary AdminRenderer may disclose data that would normally be protected by GET permissions when rendering a 400 Bad Re

历史摘要 · 未重新核验 · GitHub Advisory

MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False safety control bypassed by mlflow.statsmodels flavor — RCE via crafted model artifact

## Summary MLflow introduced `MLFLOW_ALLOW_PICKLE_DESERIALIZATION` as a security control to prevent unsafe `pickle.load

历史摘要 · 未重新核验 · GitHub Advisory

RestrictedPython guard hooks can be shadowed via positional-only arguments

CVE-2026-55830

### Impact RestrictedPython rewrites sensitive operations to go through guard hooks. Attribute access becomes `_getattr

历史摘要 · 未重新核验 · GitHub Advisory

AIIR verification and policy gates could report success without enforcing the control (fail-open)

### Summary Several of AIIR's verification and policy paths could return a success/"verified" result without actually en

历史摘要 · 未重新核验 · GitHub Advisory

aiosmtplib: STARTTLS response injection

CVE-2026-55558

## Impact When a connection is upgraded with STARTTLS, aiosmtplib reads the server's 220 go-ahead reply and immediately

历史摘要 · 未重新核验 · GitHub Advisory