GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL

### Summary `Repo.clone_from()` passes the caller-supplied remote URL through `Git.polish_url()`, which on every non-Cyg

历史摘要 · 未重新核验 · GitHub Advisory

Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch

CVE-2026-59205

### Summary Pillow's public `ImageCms.ImageCmsTransform.apply(im, imOut)` API can trigger controlled native heap corrup

历史摘要 · 未重新核验 · GitHub Advisory

Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service

CVE-2026-59204

### Summary `src/libImaging/Jpeg2KDecode.c:853` accumulates `total_component_width` across every tile in a JPEG2000 imag

历史摘要 · 未重新核验 · GitHub Advisory

Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service

CVE-2026-59203

### Summary Pillow's EPS parser (PIL/EpsImagePlugin.py) accepts a negative byte count in the %%BeginBinary directive. A

历史摘要 · 未重新核验 · GitHub Advisory

Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()

CVE-2026-59200

### Summary `PdfParser.PdfStream.decode()` in Pillow's `PdfParser.py` calls `zlib.decompress()` with the `bufsize` param

历史摘要 · 未重新核验 · GitHub Advisory

Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow

CVE-2026-59199

### Summary Pillow's public image coordinate APIs can trigger a native heap out-of-bounds write when given coordinates

历史摘要 · 未重新核验 · GitHub Advisory

Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images

CVE-2026-59198

### Summary Pillow's TGA RLE encoder reads past its row buffer when saving a mode `"1"` image. Adjacent process heap by

历史摘要 · 未重新核验 · GitHub Advisory

Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`

CVE-2026-59197

### Summary Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very large odd f

历史摘要 · 未重新核验 · GitHub Advisory

LightRAG is Vulnerable to Authentication Bypass: hardcoded DEFAULT_TOKEN_SECRET and public /auth-status defeat LIGHTRAG_API_KEY protection

CVE-2026-61740

## Summary When LightRAG is deployed with `LIGHTRAG_API_KEY` set but `AUTH_ACCOUNTS` unset (an officially documented "A

历史摘要 · 未重新核验 · GitHub Advisory

LightRAG: CORS Wildcard + Credentials Enables Any-Origin Credentialed Requests

CVE-2026-61736

### Summary The server defaults to CORS_ORIGINS=* combined with allow_credentials=True. Starlette's CORSMiddleware echoe

历史摘要 · 未重新核验 · GitHub Advisory

Mistune renderers/html.safe_url: HARMFUL_PROTOCOLS list misses legacy and chained schemes that historically chain to `javascript:` execution

CVE-2026-59929

## Summary **Type:** URL-scheme allowlist gap. The `safe_url` filter only blocks the four schemes `javascript:`, `vbscr

历史摘要 · 未重新核验 · GitHub Advisory

Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id="toc_N"` content

CVE-2026-59930

## Summary **Type:** Predictable identifier generation. The `toc` plugin and `TableOfContents` directive both default t

历史摘要 · 未重新核验 · GitHub Advisory

Mistune: Arbitrary File Read via Include directive path traversal

CVE-2026-59924

### Summary A path traversal issue exists in mistune's `Include` directive when markdown files are processed using `md.

历史摘要 · 未重新核验 · GitHub Advisory

Mistune plugins/formatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough / mark / insert)

CVE-2026-59922

## Summary **Type:** Algorithmic-complexity denial of service. A run of N closed pairs `~~x~~~~x~~...` (or the analogou

历史摘要 · 未重新核验 · GitHub Advisory

Mistune: XSS via unescaped class option in Admonition directive

CVE-2026-59926

In `src/mistune/directives/admonition.py`, the `render_admonition()` function concatenates the `:class:` option directly

历史摘要 · 未重新核验 · GitHub Advisory

Mistune: XSS via percent-encoded javascript URI bypass in safe_url()

CVE-2026-59923

### Summary An XSS vulnerability in Mistune allows bypassing of safe_url() protections via percent-encoded javascript UR

历史摘要 · 未重新核验 · GitHub Advisory

Mistune inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs

CVE-2026-59925

## Summary **Type:** Algorithmic-complexity DoS in core emphasis parsing. A long sequence of well-formed `**x**` (stron

历史摘要 · 未重新核验 · GitHub Advisory

PocketSphinx: Buffer overflows in language and acoustic model loading code

CVE-2026-54559

### Impact The trie language model code introduced in PocketSphinx 5prealpha failed to check various boundary condition

历史摘要 · 未重新核验 · GitHub Advisory

PRoot-Distro has Path Traversal in proot-distro copy — Arbitrary Read, Write, and Persistent Code Execution Outside Container Rootfs

Path Traversal in proot-distro copy — Arbitrary Read, Write, and Persistent Code Execution Outside Container Rootfs Repo

历史摘要 · 未重新核验 · GitHub Advisory

Flask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641)

CVE-2026-54567

## 1. Header | Field | Value | |---|---| | **Title** | Extension-denylist bypass via case-folding asymmetry in name-ove

历史摘要 · 未重新核验 · GitHub Advisory