proot-distro has a Container Isolation Bypass via Crafted Restore Archive

CVE-2026-54727

## Affected Component - **Package:** proot-distro - **Affected command:** `restore` - **Attack surface:** Host-side Ter

历史摘要 · 未重新核验 · GitHub Advisory

`proot-distro install` has a Symlink Escape (Arbitrary Host File Write) via Malicious Tar Archive

CVE-2026-54574

**Repository:** `termux/proot-distro` **Component:** `proot_distro/commands/install.py` → `_extract_plain_tar()`; also

历史摘要 · 未重新核验 · GitHub Advisory

olm dependency deprecation: CVE-2022-39255 and CVE-2024-45193

### Problem Multiple vulnerabilities were disclosed in 2024 affecting libolm (Olm): AES timing / side‑channel, Ed25519

历史摘要 · 未重新核验 · GitHub Advisory

Penelope unsafe tar extraction allows arbitrary local file write via crafted session archive

CVE-2026-50558

### Summary Penelope versions prior to 0.19.3 extracted tar archives received from remote sessions without validating a

历史摘要 · 未重新核验 · GitHub Advisory

`datamodel-code-generator` vulnerable to code injection via unescaped carriage return in `--extra-template-data` `comment` field

CVE-2026-54654

### Summary `datamodel-code-generator` is vulnerable to code injection when a developer passes an `--extra-template-dat

历史摘要 · 未重新核验 · GitHub Advisory

datamodel-code-generator vulnerable to arbitrary local file read via JSON-Schema `$ref` (`file://` and `../` traversal), bypassing `--no-allow-remote-refs`

CVE-2026-55389

### Summary `datamodel-code-generator` resolves JSON-Schema `$ref` targets that point at the local filesystem without r

历史摘要 · 未重新核验 · GitHub Advisory

`datamodel-code-generator` vulnerable to code injection in via attacker-controlled `default_factory` schema field

CVE-2026-54653

### Summary `datamodel-code-generator` is vulnerable to code injection when generating Python models from an attacker-c

历史摘要 · 未重新核验 · GitHub Advisory

datamodel-code-generator vulnerable to SSRF protection bypass via DNS rebinding

CVE-2026-55391

### Summary `datamodel-code-generator`'s anti-SSRF guard validates the resolved IP of a fetch target once and then lets

历史摘要 · 未重新核验 · GitHub Advisory

`datamodel-code-generator` vulnerable to code execution on import via unescaped `validators` entries in --extra-template-data

CVE-2026-54656

### Summary When the Pydantic v2 output mode is in use, `datamodel-code-generator` reads a `validators` array from each

历史摘要 · 未重新核验 · GitHub Advisory

datamodel-code-generator vulnerable to SSRF via JSON-Schema `$ref` to HTTP URL (silent by default)

CVE-2026-54690

### Summary JSON-Schema `$ref` values pointing at HTTP or HTTPS URLs are silently dereferenced by `datamodel-code-gener

历史摘要 · 未重新核验 · GitHub Advisory

datamodel-code-generator vulnerable to code injection via `x-python-import` / `customTypePath` in generated import statements

CVE-2026-55415

#### Summary A malicious input schema (OpenAPI / JSON Schema) can execute arbitrary Python code on the machine that **i

历史摘要 · 未重新核验 · GitHub Advisory

`datamodel-code-generator` vulnerable to code injection via unescaped carriage return in GraphQL Union description

CVE-2026-54621

### Summary `datamodel-code-generator` is vulnerable to code injection when generating Python models from an attacker-c

历史摘要 · 未重新核验 · GitHub Advisory

`datamodel-code-generator` vulnerable to code execution on import via `x-python-type` JSON-Schema extension in datamodel-code-generator

CVE-2026-54655

### Summary `datamodel-code-generator` honours a custom `x-python-type` JSON-Schema extension that lets a schema author

历史摘要 · 未重新核验 · GitHub Advisory

datamodel-code-generator: Authorization / request headers leaked to cross-origin redirect target when fetching remote schemas

CVE-2026-55403

### Summary When `datamodel-code-generator` fetches a remote schema and follows an HTTP redirect, it re-sends the origi

历史摘要 · 未重新核验 · GitHub Advisory

datamodel-code-generator vulnerable to SSRF via --url: no host/IP validation, follows redirects

CVE-2026-54691

### Summary `datamodel-code-generator`'s built-in HTTP fetcher (`http.get_body`) issues an `httpx.GET` against any URL

历史摘要 · 未重新核验 · GitHub Advisory

datamodel-code-generator vulnerable to arbitrary local file read via XSD `schemaLocation` (`xs:include`/`xs:import`) path traversal, with no remote-ref gate

CVE-2026-55390

### Summary When generating models from an XML Schema (`--input-file-type xmlschema`), `datamodel-code-generator` resol

历史摘要 · 未重新核验 · GitHub Advisory

AWS Bedrock AgentCore: Improper neutralization of argument delimiters in the Python SDK install_packages()

CVE-2026-16796

### Summary The AWS Bedrock AgentCore Python SDK (bedrock-agentcore) provides tools for building AI agents, including a

历史摘要 · 未重新核验 · GitHub Advisory

libp2p: yamux connection DoS via oversized data frame

### Summary The yamux stream multiplexer in py-libp2p does not validate incoming DATA frame lengths against the receive

历史摘要 · 未重新核验 · GitHub Advisory

AWS API MCP Server Security Policy Bypass via Startup Initialization Failure

CVE-2026-16584

## Summary The AWS API MCP Server is an open source Model Context Protocol (MCP) server that enables AI assistants to in

历史摘要 · 未重新核验 · GitHub Advisory

vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review

### Impact Edit permission lacks ownership check, so another developer could alter metadata that is later trusted by nod

历史摘要 · 未重新核验 · GitHub Advisory