Tagged “osv”
CVEs tagged osv, newest first.
7180 CVEsRSS
CVE-2026-27628High· 7.5pypdf: possible infinite loop when loading circular /Prev entries in cross-reference streams (CVE-2026-27628)
A flaw was found in pypdf. Processing a specially crafted PDF document, specifically with circular /Prev references in the cross-reference (xref) chain, can cause an infinite loop and a high consumption of CPU, resulting in a denial of ser…
CVE-2026-27572NonePanic adding excessive fields to a `wasi:http/types.fields` instance
Panic adding excessive fields to a `wasi:http/types.fields` instance
CVE-2026-27204NoneGuest-controlled resource exhaustion in WASI implementations
Guest-controlled resource exhaustion in WASI implementations
CVE-2026-27195NonePanic when dropping a `[Typed]Func::call_async` future
Panic when dropping a `[Typed]Func::call_async` future
CVE-2024-56373High· 8.4Apache Airflow vulnerable to Code Injection in the web-server context via LogTemplate table
Apache Airflow vulnerable to Code Injection in the web-server context via LogTemplate table
CVE-2026-23984HighApache Superset: Read-Only Bypass via Improper Input Validation on PostgreSQL Connections
Apache Superset: Read-Only Bypass via Improper Input Validation on PostgreSQL Connections
CVE-2026-23983LowApache Superset allows authenticated users to view sensitive data without explicit permissions
Apache Superset allows authenticated users to view sensitive data without explicit permissions
CVE-2026-23980MediumPoCApache Superset allows privileged users to conduct error-based SQL Injection
Apache Superset allows privileged users to conduct error-based SQL Injection
CVE-2026-27469Medium· 6.1Isso affected by Stored XSS via comment website field
Isso affected by Stored XSS via comment website field
CVE-2025-27555Medium· 6.5Apache Airflow exposes sensitive information in its log files
Apache Airflow exposes sensitive information in its log files
CVE-2026-27156Medium· 6.1NiceGUI vulnerable to XSS via Code Injection during client-side element function execution
NiceGUI vulnerable to XSS via Code Injection during client-side element function execution
CVE-2026-23969MediumApache Superset: Incomplete DISALLOWED_SQL_FUNCTIONS default list for ClickHouse engine
Apache Superset: Incomplete DISALLOWED_SQL_FUNCTIONS default list for ClickHouse engine
CVE-2026-27483High· 8.8PoCMindsDB: Path Traversal in /api/files Leading to Remote Code Execution
MindsDB: Path Traversal in /api/files Leading to Remote Code Execution
CVE-2026-23982HighApache Superset Improper Authorization allows low-privileged users to bypass access controls
Apache Superset Improper Authorization allows low-privileged users to bypass access controls
CVE-2026-2969Medium· 4.7datapizza-ai: Server-Side Template Injection in ChatPromptTemplate via Jinja2 Template Handler
datapizza-ai: Server-Side Template Injection in ChatPromptTemplate via Jinja2 Template Handler
CVE-2026-2970Medium· 4.6datapizza-ai has unsafe deserialization via pickle.loads() in RedisCache
datapizza-ai has unsafe deserialization via pickle.loads() in RedisCache
CVE-2026-26331High· 8.8PoCyt-dlp: Arbitrary Command Injection when using the `--netrc-cmd` option
yt-dlp: Arbitrary Command Injection when using the `--netrc-cmd` option
CVE-2026-2033High· 8.10dayMLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability
MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability
CVE-2025-65995Medium· 6.5When a DAG failed during parsing, Airflow’s error-reporting in the UI could include the full kwargs passed to the operators
When a DAG failed during parsing, Airflow’s error-reporting in the UI could include the full kwargs passed to the operators. If those kwargs contained sensitive values (such as secrets), they might be exposed in the UI tracebacks to auth…
MAL-2026-951Critical⚠ ExploitedMalicious code in printrables (PyPI)
Malicious code in printrables (PyPI)
CVE-2026-2473HighGoogle Cloud Vertex AI has a a vulnerability involving predictable bucket naming
Google Cloud Vertex AI has a a vulnerability involving predictable bucket naming
CVE-2026-27025Medium· 6.5pypdf: pypdf: Denial of Service via crafted PDF with large font values (CVE-2026-27025)
A flaw was found in pypdf. An attacker can craft a malicious PDF file containing unusually large values in the /ToUnicode entry of a font. When this crafted PDF is processed, for example during text extraction, it can lead to excessive res…
CVE-2026-2472HighPoCGoogle Cloud Vertex AI SDK affected by Stored Cross-Site Scripting (XSS)
Google Cloud Vertex AI SDK affected by Stored Cross-Site Scripting (XSS)
CVE-2026-27482Medium· 5.9Ray dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion)
Ray dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion)
CVE-2026-27026Medium· 6.5pypdf: pypdf: Denial of Service via malformed PDF /FlateDecode stream (CVE-2026-27026)
A flaw was found in pypdf, a pure-python PDF library. A remote attacker can exploit this vulnerability by crafting a malicious PDF file containing a malformed /FlateDecode stream. This stream, which is used for data compression within the …
CVE-2026-27024Medium· 5.5pypdf: pypdf: Denial of Service via crafted PDF with TreeObject outlines (CVE-2026-27024)
A flaw was found in pypdf. An attacker can craft a malicious PDF file that, when processed, leads to an infinite loop. This occurs when accessing specific elements within the PDF structure, such as the children of a TreeObject, which can b…
CVE-2026-24834High· 8.8Kata Container to Guest micro VM privilege escalation
Kata Container to Guest micro VM privilege escalation
CVE-2026-25527Medium· 5.3PoCchangedetection.io is a free open source web page change detection tool. In versions prior to 0.53.2, the `/static/<group>/<filename>` ro…
changedetection.io is a free open source web page change detection tool. In versions prior to 0.53.2, the `/static/<group>/<filename>` route accepts `group=".."`, which causes `send_from_directory("static/..", filename)` to execute. This…
CVE-2026-27194HighD-Tale affected by Remote Code Execution through the /save-column-filter endpoint
D-Tale affected by Remote Code Execution through the /save-column-filter endpoint
CVE-2026-27205LowFlask session does not add `Vary: Cookie` header when accessed in some ways
Flask session does not add `Vary: Cookie` header when accessed in some ways