Tagged “osv”
CVEs tagged osv, newest first.
7180 CVEsRSS
CVE-2026-45338High· 7.7Open WebUI Vulnerable to SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py)
Open WebUI Vulnerable to SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py)
CVE-2026-44216High· 7.5Wasmtime is a runtime for WebAssembly
Wasmtime is a runtime for WebAssembly. From 30.0.0 to 36.0.8, 43.0.2, and 44.0.1, Wasmtime's allocation logic for a WebAssembly table contained checked arithmetic which panicked on overflow. This overflow is possible to trigger, and thus…
CVE-2026-44885Medium· 5.5Portainer has a path traversal in backup archive extraction that allows arbitrary file write
Portainer has a path traversal in backup archive extraction that allows arbitrary file write
GHSA-gxhx-2686-5h9gMediumslack-go `SecretsVerifier` accepts empty signing secret without precondition
slack-go `SecretsVerifier` accepts empty signing secret without precondition
MAL-2026-3638Critical⚠ ExploitedMalicious code in openai-spellcheckers (PyPI)
Malicious code in openai-spellcheckers (PyPI)
RUSTSEC-2026-0235NoneInsufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
CVE-2026-44697High· 8.6Klever-Go MultiDataInterceptor has remote OOM via crafted compressed P2P payload
Klever-Go MultiDataInterceptor has remote OOM via crafted compressed P2P payload
CVE-2026-42561High· 7.5python-multipart: python-multipart: Denial of Service via excessive multipart part headers (CVE-2026-42561)
A flaw was found in python-multipart. A remote attacker can exploit this denial of service (DoS) vulnerability by sending a specially crafted request with an excessive number of part headers or a single very large header value during multi…
CVE-2026-45134High· 7.1LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning
LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning
CVE-2026-45152High· 7.8uniget is Vulnerable to Command Injection in tool.Check Leading to Arbitrary Code Execution
uniget is Vulnerable to Command Injection in tool.Check Leading to Arbitrary Code Execution
CVE-2026-42266High· 8.8JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture
JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions that can be installed from PyPI Extension Manager (allowed_…
CVE-2026-44432High· 7.5urllib3 is an HTTP client library for Python
urllib3 is an HTTP client library for Python. From 2.6.0 to before 2.7.0, urllib3 could decompress the whole response instead of the requested portion (1) during the second HTTPResponse.read(amt=N) call when the response was decompressed…
CVE-2026-44431Medium· 5.3PoCurllib3 is an HTTP client library for Python
urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive hea…
MAL-2026-3615Critical⚠ ExploitedMalicious code in ai-spellcheckers (PyPI)
Malicious code in ai-spellcheckers (PyPI)
CVE-2026-31235Critical· 9.8imgaug contains an insecure deserialization vulnerability in BackgroundAugmenter class within multicore.py module
imgaug contains an insecure deserialization vulnerability in BackgroundAugmenter class within multicore.py module
CVE-2025-65719Critical· 9.8Open Source Kubectl MCP Server vulnerable to arbitrary code execution via user interaction with crafted HTML page
Open Source Kubectl MCP Server vulnerable to arbitrary code execution via user interaction with crafted HTML page
CVE-2026-31234Critical· 9.8Horovod contains an insecure deserialization vulnerability in its KVStore HTTP server component
Horovod contains an insecure deserialization vulnerability in its KVStore HTTP server component
CVE-2026-31233Critical· 9.8Guardrails AI contains a code injection vulnerability in its Hub package installation mechanism
Guardrails AI contains a code injection vulnerability in its Hub package installation mechanism
RUSTSEC-2026-0253NonePotential use-after-free due to lack of panic safety in `LruCache::pop()`
Potential use-after-free due to lack of panic safety in `LruCache::pop()`
CVE-2026-44301High· 7.3hugo: Hugo: Arbitrary file read/write via unrestricted file system access in Node-based asset pipelines (CVE-2026-44301)
A flaw was found in Hugo. When building a Hugo site that uses Node-based asset pipelines (such as PostCSS, Babel, or TailwindCSS), Hugo invoked the configured Node tools without restrictions on file system access. This could allow code run…
CVE-2026-31240High· 7.5mem0 server lacks authentication and authorization controls for its memory management API endpoints
mem0 server lacks authentication and authorization controls for its memory management API endpoints
CVE-2026-44222High· 7.5vllm: vLLM: Denial of Service via malformed multimodal input or token injection (CVE-2026-44222)
A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). This vulnerability allows unauthenticated attackers to cause a Denial of Service (DoS) by supplying image or video placeholder sequences without ma…
CVE-2026-31241Medium· 6.5mem0 server lacks authentication and authorization controls for its memory deletion API endpoint
mem0 server lacks authentication and authorization controls for its memory deletion API endpoint
CVE-2026-31224High· 8.8Snorkel MultitaskClassifier.load uses an unsafe torch.load
Snorkel MultitaskClassifier.load uses an unsafe torch.load
CVE-2026-31223High· 8.8Snorkel BaseLabeler.load uses an unsafe pickle.load
Snorkel BaseLabeler.load uses an unsafe pickle.load
CVE-2026-31245Medium· 5.3mem0 server lacks authentication and authorization controls for its memory creation API endpoint
mem0 server lacks authentication and authorization controls for its memory creation API endpoint
CVE-2026-31222High· 8.8Snorkel Trainer.load uses an unsafe torch.load
Snorkel Trainer.load uses an unsafe torch.load
CVE-2026-31221High· 8.0pytorch-lightning: PyTorch-Lightning: Arbitrary code execution via insecure deserialization of checkpoint files (CVE-2026-31221)
A flaw was found in PyTorch-Lightning. This vulnerability, categorized as insecure deserialization (CWE-502), exists in the checkpoint loading mechanism. A remote attacker can exploit this by providing a maliciously crafted checkpoint file…
CVE-2026-44307Medium· 5.9mako: Mako: Information disclosure via directory traversal (CVE-2026-44307)
A flaw was found in Mako, a Python template library. A remote attacker could exploit a directory traversal vulnerability by crafting a Uniform Resource Identifier (URI) with backslash traversal. This bypasses security checks, allowing the …
CVE-2026-31225High· 8.8Superduper: Remote code execution via unsafe eval in superduper query parsing
Superduper: Remote code execution via unsafe eval in superduper query parsing