Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()
CVE-2026-112401
``` ============================================================================ Quadratic GIF comment concatenation all
#severity:medium
共收录 5506 条相关情报。
← 返回所有主题Pillow: Quadratic GIF comment copying during save
CVE-2026-112891
On Pillow 12.3.0 and upstream `main` (`ad277e2761b489681e71b51e91367d46b0ceabb9`), a GIF with a long comment makes `_get
Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size
CVE-2026-112394
### Summary On `main`, even with the guard in #9725, it's possible to have these decoders read 1 to 3 bytes past the en
Vitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token file
CVE-2026-112948
### Summary In Vitest 5, Vite's `server.fs.deny` is not applied as intended on Vitest's dev servers. Depending on the s
Vitest: Code injection via unauthenticated manual mock registration
CVE-2026-112949
### Summary `@vitest/mocker`'s `interceptorPlugin` accepts mock registrations on Vite's dev-server WebSocket with no au
Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fix
CVE-2026-112950
## Summary The path traversal fix released for [GHSA-82fw-gwwq-j7x9](https://github.com/vitest-dev/vitest/security/advi
ApostropheCMS: Exposure of Sensitive Information via predictable export filenames
CVE-2026-112953
## Summary When a user exports content through `@apostrophecms/import-export`, the module copies the generated archive
OpenClaw: Browser CDP discovery could accept blocked WebSocket URLs
CVE-2026-62197
### Summary Browser CDP discovery could accept blocked WebSocket URLs. In affected versions, a lower-trust caller or co
Electron: HID and USB permission checks can be attributed to the wrong origin
CVE-2026-113800
### Impact For `hid` and `usb` permission checks made from an iframe, `session.setPermissionCheckHandler` was given the
Vyper 0.1.0b1 before 0.1.0b12, 0.1.0b14, and 0.4.1 through 0.5.0b1 mix character-based line...
CVE-2026-114114
Vyper 0.1.0b1 before 0.1.0b12, 0.1.0b14, and 0.4.1 through 0.5.0b1 mix character-based line offsets with Python's UTF-8
Vyper 0.3.4 through 0.5.0b1 computes the remaining blueprint size in create_from_blueprint by...
CVE-2026-114118
Vyper 0.3.4 through 0.5.0b1 computes the remaining blueprint size in create_from_blueprint by uint256 subtraction withou
Vyper 0.3.8 through 0.5.0b1 contains a compiler miscompilation vulnerability in parse_IfExp that...
CVE-2026-114115
Vyper 0.3.8 through 0.5.0b1 contains a compiler miscompilation vulnerability in parse_IfExp that reads nested arrays wit
Vyper 0.1.0b1 before 0.1.0b17 and 0.4.1 through 0.5.0b1 builds its source-line table with str...
CVE-2026-114116
Vyper 0.1.0b1 before 0.1.0b17 and 0.4.1 through 0.5.0b1 builds its source-line table with str.splitlines(), which treats
Coraza from 3.0.0 before 3.8.1 has a JSON body processor that flattens nested properties into dot...
CVE-2026-114099
Coraza from 3.0.0 before 3.8.1 has a JSON body processor that flattens nested properties into dot-separated ARGS_POST na
Coraza from 3.0.4 before 3.8.1 contains a request body inspection bypass because request-body...
CVE-2026-114100
Coraza from 3.0.4 before 3.8.1 contains a request body inspection bypass because request-body processor selection compar
adm-zip 0.6.0 contains a decompression bomb protection bypass that allows attackers to evade the...
CVE-2026-114103
adm-zip 0.6.0 contains a decompression bomb protection bypass that allows attackers to evade the maxOutputLength guard b
Coraza before 3.8.1 extracts multipart upload filenames with Go's mime.ParseMediaType, which...
CVE-2026-114101
Coraza before 3.8.1 extracts multipart upload filenames with Go's mime.ParseMediaType, which silently ignores RFC 5987 f
Adm-zip before 0.6.1 contains an incorrect permission assignment vulnerability that allows...
CVE-2026-114105
Adm-zip before 0.6.1 contains an incorrect permission assignment vulnerability that allows attackers to set setuid, setg
Trigger.dev before 4.5.6 contains a cross-site request forgery vulnerability that allows remote...
CVE-2026-114093
Trigger.dev before 4.5.6 contains a cross-site request forgery vulnerability that allows remote attackers to log out aut
Trigger.dev before 4.5.0 looks up runs by friendlyId alone in the api.v1.runs.$runParam.replay...
CVE-2026-114091
Trigger.dev before 4.5.0 looks up runs by friendlyId alone in the api.v1.runs.$runParam.replay route without scoping the