Tagged “osv”
CVEs tagged osv, newest first.
7180 CVEsRSS
CVE-2026-33814High· 7.5When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.
When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.
CVE-2026-42499High· 7.5Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.
Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.
CVE-2026-39820High· 7.5Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.
Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.
CVE-2026-33811High· 7.5When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.
When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.
GHSA-qcxq-75wr-5cm8Highldap3_proto has LDAP Filter stack exhaustion
ldap3_proto has LDAP Filter stack exhaustion
CVE-2026-44423Medium· 6.5ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data
ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data
CVE-2026-44334High· 8.4PraisonAI has unauthenticated RCE via `tool_override.py` (CVE-2026-40287 patch bypass)
PraisonAI has unauthenticated RCE via `tool_override.py` (CVE-2026-40287 patch bypass)
CVE-2026-42544High· 7.5Granian vulnerable to unauthenticated DoS via WebSocket subprotocol header panic
Granian vulnerable to unauthenticated DoS via WebSocket subprotocol header panic
CVE-2026-44305Medium· 6.8Lemur: LDAP Authentication Globally Disables TLS Certificate Verification When LDAP_USE_TLS Is Enabled
Lemur: LDAP Authentication Globally Disables TLS Certificate Verification When LDAP_USE_TLS Is Enabled
CVE-2026-44405Low· 3.4Paramiko rsakey.py allows the SHA-1 algorithm
Paramiko rsakey.py allows the SHA-1 algorithm
CVE-2026-44335Critical· 9.8PraisonAI has an SSRF bypass
PraisonAI has an SSRF bypass
CVE-2026-42557Critical· 9.6JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted content
JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted content
CVE-2026-44363Mediummisp-modules has unsafe remote resource fetching in expansion
misp-modules has unsafe remote resource fetching in expansion
CVE-2026-42545Medium· 5.9Granian vulnerable to DoS via WSGI response header panic
Granian vulnerable to DoS via WSGI response header panic
CVE-2026-42448Low· 3.5Magic Wormhole: receive, with --output pointing at an existing directory can be path-traversed
Magic Wormhole: receive, with --output pointing at an existing directory can be path-traversed
CVE-2026-44226Medium· 5.3PyLoad vulnerable to unauthenticated traceback disclosure via global exception handler in WebUI
PyLoad vulnerable to unauthenticated traceback disclosure via global exception handler in WebUI
CVE-2026-44368Mediumpyquorum: Timing side‑channel in mul_mod
pyquorum: Timing side‑channel in mul_mod
CVE-2026-44243High· 7.1GitPython reference APIs has a path traversal vulnerability that allows arbitrary file write and delete outside the repository
GitPython reference APIs has a path traversal vulnerability that allows arbitrary file write and delete outside the repository
CVE-2026-44439High· 7.5Playwright Capture permits access to local files and internal network resources during page capture
Playwright Capture permits access to local files and internal network resources during page capture
CVE-2026-44304High· 8.1Lemur: LDAP Filter Injection enables post-authentication privilege escalation
Lemur: LDAP Filter Injection enables post-authentication privilege escalation
CVE-2026-33079High· 7.5In versions 3.0.0a1 through 3.2.0 of Mistune, there is a ReDoS (Regular Expression Denial of Service) vulnerability in `LINK_TITLE_RE` that allows an attacker who can supply Markdown for parsing to cause denial of service
In versions 3.0.0a1 through 3.2.0 of Mistune, there is a ReDoS (Regular Expression Denial of Service) vulnerability in `LINK_TITLE_RE` that allows an attacker who can supply Markdown for parsing to cause denial of service. The regular ex…
CVE-2026-42864Critical· 9.9FireFighter has unauthenticated SSRF in its Raid jira_bot endpoint that allows IAM credential theft
FireFighter has unauthenticated SSRF in its Raid jira_bot endpoint that allows IAM credential theft
CVE-2026-42196Criticaldjango-s3file is vulnerable to relative path traversal
django-s3file is vulnerable to relative path traversal
CVE-2026-25660CriticalCodechecker has an authentication bypass for certain API calls
Codechecker has an authentication bypass for certain API calls
CVE-2026-42600Medium· 4.9MinIO vulnerable to Path Traversal via msgpack Body in `ReadMultiple` Storage-REST Endpoint
MinIO vulnerable to Path Traversal via msgpack Body in `ReadMultiple` Storage-REST Endpoint
CVE-2026-32936High· 7.5github.com/coredns/coredns: CoreDNS: Denial of Service via oversized DNS-over-HTTPS GET requests (CVE-2026-32936)
A flaw was found in CoreDNS, a DNS server that chains plugins. A remote, unauthenticated attacker can exploit this vulnerability by repeatedly sending oversized DNS-over-HTTPS (DoH) GET requests. The GET path, unlike the POST path, lacks s…
CVE-2026-5766Medium· 5.3Django has an Improper Handling of Length Parameter Inconsistency
Django has an Improper Handling of Length Parameter Inconsistency
CVE-2025-61669Medium· 6.1Jupyter Server is the backend for Jupyter web applications
Jupyter Server is the backend for Jupyter web applications. In jupyter_server versions through 2.17.0, the next query parameter in the login flow is insufficiently validated in `LoginFormHandler._redirect_safe()`, which allows redirects …
CVE-2026-42304High· 7.5Twisted has a Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains
Twisted has a Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains
CVE-2026-40934Medium· 6.8Jupyter Server's Authentication Cookies Remain Valid After Password Reset and Server Restart
Jupyter Server's Authentication Cookies Remain Valid After Password Reset and Server Restart