Apache Airflow versions 3.0.0 through 3.1.8 DagRun wait endpoint returns XCom result values even to users who only have DAG Run read permissions, such as the Viewer role.This behavior conflicts with the FAB RBAC model, which treats XCom …

▾ Sunlitapache · airflowEPSS 0.70%via NVD

CVE-2025-57735Critical· 9.1

7mo ago

When user logged out, the JWT token the user had authtenticated with was not invalidated, which could lead to reuse of that token in case it was intercepted

When user logged out, the JWT token the user had authtenticated with was not invalidated, which could lead to reuse of that token in case it was intercepted. In Airflow 3.2 we implemented the mechanism that implements token invalidation …

▾ Midnightapache · airflowEPSS 0.68%via NVD

CVE-2026-35206Medium· 4.4

7mo ago

github.com/helm/helm: Helm: Files written to unexpected directory via specially crafted Chart (CVE-2026-35206)

A flaw was found in Helm, a package manager for Kubernetes. A remote attacker could exploit this vulnerability by providing a specially crafted Chart to the `helm pull --untar` command. This would cause the Chart's contents to be written t…

▾ SunlitRed Hat · Multicluster Engine for KubernetesEPSS 0.21%via CSAF

CVE-2026-39414High

7mo ago

MinIO affected a DoS via Unbounded Memory Allocation in S3 Select CSV Parsing

▾ Twilightminio · github.com/minio/minioEPSS 0.50%via OSV

RUSTSEC-2026-0097None

7mo ago

Rand is unsound with a custom logger using `rand::rng()`

▾ Sunlitrand · randvia OSV

CVE-2026-39980High· 7.2PoC

7mo ago

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.5, the safeEjs.ts file …

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.5, the safeEjs.ts file does not properly sanitize EJS templates. Users with the Manage customization capability can run arb…

▾ Midnightpycti · pyctiEPSS 1.4%via OSV

CVE-2026-5972High· 7.3

7mo ago

FoundationAgents MetaGPT vulnerable to os command injection via the Terminal.run_command

▾ Twilightmetagpt · metagptEPSS 2.7%via OSV

CVE-2026-5973High· 7.3

7mo ago

FoundationAgents MetaGPT vulnerable to OS Command Injection in metagpt/utils/common.py

▾ Twilightmetagpt · metagptEPSS 2.6%via OSV

CVE-2026-5970High· 7.3

7mo ago

MetaGPT has an Injection issue

▾ Twilightmetagpt · metagptEPSS 0.40%via OSV

CVE-2026-5974High· 7.3

7mo ago

FoundationAgents MetaGPT vulnerable to OS Command Injection in metagpt/tools/libs/terminal.py

▾ Twilightmetagpt · metagptEPSS 2.6%via OSV

CVE-2026-5971High· 7.3

7mo ago

FoundationAgents MetaGPT vulnerable to eval injection

▾ Twilightmetagpt · metagptEPSS 0.40%via OSV

GHSA-69x8-hrgq-fjj8High

7mo ago

LiteLLM: Password hash exposure and pass-the-hash authentication bypass

▾ Twilightlitellm · litellmvia OSV

CVE-2026-32288Medium· 5.5

7mo ago

tar.Reader can allocate an unbounded amount of memory when reading a maliciously-crafted archive containing a large number of sparse regions encoded in the "old GNU sparse map" format.

▾ Sunlitgolang · goEPSS 0.29%via NVD

Tagged “osv”

Rembg has a Path Traversal via Custom Model Loading

pypdf: Manipulated XMP metadata entity declarations can exhaust RAM

PraisonAI Vulnerable to Code Injection and Protection Mechanism Failure

PraisonAI has Unrestricted Upload Size in WSGI Recipe Registry Server that Enables Memory Exhaustion DoS

PraisonAI Vulnerable to Implicit Execution of Arbitrary Code via Automatic `tools.py` Loading

Miscompiled guest heap access enables sandbox escape on aarch64 Cranelift

Improperly masked return value from `table.grow` with Winch compiler backend

Wasmtime with Winch compiler backend may allow a sandbox-escaping memory access

Heap OOB read in component model UTF-16 to latin1+utf16 string transcoding

Out-of-bounds write or crash when transcoding component model strings

Use-after-free bug after cloning `wasmtime::Linker`

Panic when transcoding misaligned component model UTF-16 strings

Data leakage between pooling allocator instances

Host panic when Winch compiler executes `table.fill`

Wasmtime segfault or unused out-of-sandbox load with `f64x2.splat` operator on Cranelift x86-64

Host data leakage with 64-bit tables and Winch

Panic when lifting `flags` component value

Apache Airflow versions 3.0.0 through 3.1.8 DagRun wait endpoint returns XCom result values even to users who only have DAG Run read permissions, such as the Viewer role.This behavior conflicts with the FAB RBAC model, which treats XCom …

When user logged out, the JWT token the user had authtenticated with was not invalidated, which could lead to reuse of that token in case it was intercepted

github.com/helm/helm: Helm: Files written to unexpected directory via specially crafted Chart (CVE-2026-35206)

MinIO affected a DoS via Unbounded Memory Allocation in S3 Select CSV Parsing

Rand is unsound with a custom logger using `rand::rng()`

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.5, the safeEjs.ts file …

FoundationAgents MetaGPT vulnerable to os command injection via the Terminal.run_command

FoundationAgents MetaGPT vulnerable to OS Command Injection in metagpt/utils/common.py

MetaGPT has an Injection issue

FoundationAgents MetaGPT vulnerable to OS Command Injection in metagpt/tools/libs/terminal.py

FoundationAgents MetaGPT vulnerable to eval injection

LiteLLM: Password hash exposure and pass-the-hash authentication bypass

tar.Reader can allocate an unbounded amount of memory when reading a maliciously-crafted archive containing a large number of sparse regions encoded in the "old GNU sparse map" format.