filelock: ReadWriteLock on the hard-link route deletes any directory another user renames onto its .filelock-* link directory name

CVE-2026-112937

`ReadWriteLock` and `AsyncReadWriteLock` (the SQLite-backed reader/writer lock) remove their private `.filelock-*` link

历史摘要 · 未重新核验 · GitHub Advisory

virtualenv: Temporary app-data can leave dangling seed package links

CVE-2026-113713

## Summary The app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when

历史摘要 · 未重新核验 · GitHub Advisory

virtualenv: Seeded files retain permissions from an older cache

CVE-2026-113720

## Summary The app-data copy seeder uses shutil.copy, which preserves cached file modes independently of the current um

历史摘要 · 未重新核验 · GitHub Advisory

virtualenv: Seed replacement does not contain metadata deletion paths

CVE-2026-113719

## Summary The app-data seeder joins paths from existing distribution metadata to site-packages and deletes the resulti

历史摘要 · 未重新核验 · GitHub Advisory

undici vulnerable to Denial of Service via unbounded memory in the EventSource parser

CVE-2026-109924

### Impact undici's `EventSource` client can be driven to exhaust process memory by a malicious or compromised Server-S

历史摘要 · 未重新核验 · GitHub Advisory

undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens

CVE-2026-109841

### Impact undici's `fetch()` verifies Subresource Integrity (SRI) metadata by looking up the algorithm token in a lowe

历史摘要 · 未重新核验 · GitHub Advisory

MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints

CVE-2026-115886

### Summary MLflow's tracking server exposes `POST /ajax-api/3.0/mlflow/scorer/invoke` with **no authentication**, and t

历史摘要 · 未重新核验 · GitHub Advisory

LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores

CVE-2026-115883

### Summary The Postgres and SQLite stores save a namespace as its labels joined with `.`, so `("tenant", "bob")` and `

历史摘要 · 未重新核验 · GitHub Advisory

Wasmtime: Panic lowering a host-created component model stream into a guest that expects a different payload type

CVE-2026-115892

### Summary Wasmtime may panic when the host lowers a component model `stream` or `future` into a guest, if the host cr

历史摘要 · 未重新核验 · GitHub Advisory

filelock: SoftFileLock evicts a fresh lock file whose watched age another local user's pre-dated file passed on through inode reuse

CVE-2026-112906

`SoftFileLock` and `MarkerSoftFileLock` evict an unparsable marker (the lock file at ``, whose presence says a process h

历史摘要 · 未重新核验 · GitHub Advisory

filelock: SoftFileLock stale-break restore follows a swapped-in symbolic link and hard-links a file of the user running the lock into the lock directory

CVE-2026-112914

When a soft-lock stale break finds that the marker (the lock file at ``) it renamed aside was a live one recreated by a

历史摘要 · 未重新核验 · GitHub Advisory

Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1

CVE-2026-114501

### Summary When [`PILLOW_ALIGNMENT`](https://pillow.readthedocs.io/en/stable/reference/block_allocator.html#memory-poo

历史摘要 · 未重新核验 · GitHub Advisory

Nodemailer: A nested comment ends early in addressparser, releasing the rest of the comment as a recipient

### Vulnerability summary RFC 5322 comments nest. addressparser ended a comment at the first `)`, including the one tha

历史摘要 · 未重新核验 · GitHub Advisory

Nodemailer: A ";" inside a quoted string or comment ends an address group early in addressparser, turning display text into a recipient

### Vulnerability summary addressparser ends an RFC 5322 group at the first `;`, including one inside a quoted display

历史摘要 · 未重新核验 · GitHub Advisory

Nodemailer: A ">" inside a quoted local part ends an angle-addr early in addressparser, delivering to a domain the header does not name

### Vulnerability summary addressparser ends an angle-addr at the first `>` it sees, including one inside a quoted loca

历史摘要 · 未重新核验 · GitHub Advisory

Laravel relationship inclusion can trigger unauthorized data destruction

CVE-2026-114508

A vulnerability in how relationship inclusion is processed on certain read endpoints. Under specific conditions, a reque

历史摘要 · 未重新核验 · GitHub Advisory

fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding

CVE-2026-110306

### Impact `fast-uri` percent-decodes the scheme component with the legacy global `unescape()` before validating it, so

历史摘要 · 未重新核验 · GitHub Advisory

fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization

CVE-2026-110180

### Impact `fast-uri` versions `>= 2.4.2, = 3.1.3, = 4.0.1, <= 4.2.2` can silently rewrite the host of an HTTP-family U

历史摘要 · 未重新核验 · GitHub Advisory

An incomplete list of disallowed inputs in the Python code validator of the run_script tool in...

CVE-2026-115845

An incomplete list of disallowed inputs in the Python code validator of the run_script tool in AWS MCP Server might allo

历史摘要 · 未重新核验 · GitHub Advisory

FastMCP: Post-transform component authorization is skipped on direct calls

## Maintainer assessment and remediation This report is accepted as a FastMCP authorization vulnerability. In supported

历史摘要 · 未重新核验 · GitHub Advisory