Tagged “osv”
CVEs tagged osv, newest first.
7182 CVEsRSS
CVE-2025-61730Medium· 5.3crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls (CVE-2025-61730)
A TLS connection handling flaw has been discovered in the golang crypto/tls library. During the TLS 1.3 handshake if multiple messages are sent in records that span encryption level boundaries (for instance the Client Hello and Encrypted E…
CVE-2025-61728NoneExcessive CPU consumption when building archive index in archive/zip
Excessive CPU consumption when building archive index in archive/zip
CVE-2025-61726High· 7.5The net/url package does not set a limit on the number of query parameters in a query
The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the maximum request header size, the net/http.Request.ParseForm method can …
MAL-2026-548Critical⚠ ExploitedMalicious code in tabletas (PyPI)
Malicious code in tabletas (PyPI)
CVE-2026-23892Medium· 5.9OctoPrint has Timing Side-Channel Vulnerability in API Key Authentication
OctoPrint has Timing Side-Channel Vulnerability in API Key Authentication
CVE-2026-1213Mediumaskbot inexhaustive permissions check allows any user to modify a different user's profile picture
askbot inexhaustive permissions check allows any user to modify a different user's profile picture
CVE-2026-24688Medium· 5.3PoCpypdf: pypdf Infinite Loop when processing outlines/bookmarks (CVE-2026-24688)
A reachable infinite loop has been discovered in pypdf. An attacker who uses an infinite loop vulnerability that is present in versions prior to 6.6.2 can craft a PDF which leads to an infinite loop. This requires accessing the outlines/bo…
CVE-2026-24779High· 7.1vLLM is an inference and serving engine for large language models (LLMs)
vLLM is an inference and serving engine for large language models (LLMs). Prior to version 0.14.1, a Server-Side Request Forgery (SSRF) vulnerability exists in the `MediaConnector` class within the vLLM project's multimodal feature set. …
CVE-2026-24747High· 8.8PyTorch is a Python package that provides tensor computation
PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's `weights_only` unpickler allows an attacker to craft a malicious checkpoint file (`.pth`) that, when loaded with `torch.l…
CVE-2026-24486High· 8.6PoCPython-Multipart is a streaming multipart parser for Python
Python-Multipart is a streaming multipart parser for Python. Prior to version 0.0.22, a Path Traversal vulnerability exists when using non-default configuration options `UPLOAD_DIR` and `UPLOAD_KEEP_FILENAME=True`. An attacker can write …
CVE-2026-22696Criticaldcap-qvl has Missing Verification for QE Identity
dcap-qvl has Missing Verification for QE Identity
CVE-2026-24116NoneWasmtime segfault or unused out-of-sandbox load with `f64.copysign` operator on x86-64
Wasmtime segfault or unused out-of-sandbox load with `f64.copysign` operator on x86-64
CVE-2026-24408None· 0.0sigstore CSRF possibility in OIDC authentication during signing
sigstore CSRF possibility in OIDC authentication during signing
CVE-2026-24489Medium· 5.3Gakido vulnerable to HTTP Header Injection (CRLF Injection)
Gakido vulnerable to HTTP Header Injection (CRLF Injection)
CVE-2026-24490High· 8.1MobSF has Stored XSS via Manifest Analysis - Dialer Code Host Field
MobSF has Stored XSS via Manifest Analysis - Dialer Code Host Field
CVE-2026-24123High· 7.4BentoML has a Path Traversal via Bentofile Configuration
BentoML has a Path Traversal via Bentofile Configuration
CVE-2025-11687Medium· 6.1GI-DocGen vulnerable to Reflected XSS via unescaped query strings
GI-DocGen vulnerable to Reflected XSS via unescaped query strings
CVE-2025-11065Medium· 5.3PoCA flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode
A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input valu…
MAL-2026-492Critical⚠ ExploitedMalicious code in tableates (PyPI)
Malicious code in tableates (PyPI)
MAL-2026-490Critical⚠ ExploitedMalicious code in tabletes (PyPI)
Malicious code in tabletes (PyPI)
CVE-2025-66719Critical· 9.1Free5gc NRF is vulnerable to scope validation bypass via maliciously crafted targetNF value
Free5gc NRF is vulnerable to scope validation bypass via maliciously crafted targetNF value
CVE-2026-0770HighCISA KEV0dayPoCLangflow affected by Remote Code Execution via validate_code() exec()
Langflow affected by Remote Code Execution via validate_code() exec()
CVE-2026-0994High· 7.5PoCA denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing recursion depth ac…
A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing recursion depth ac…
CVE-2026-24117Medium· 5.3github.com/sigstore/rekor: Rekor Server-Side Request Forgery (SSRF) (CVE-2026-24117)
A Server-Side Request Forgery (SSRF) flaw has been discovered in the Rekor transparency log tool. In versions 1.4.3 and below, attackers can trigger SSRF to arbitrary internal services because /api/v1/index/retrieve supports retrieving a p…
CVE-2026-23831Medium· 5.3github.com/sigstore/rekor: Rekor denial of service (CVE-2026-23831)
Rekor’s cose v0.0.1 entry implementation can panic on attacker-controlled input when canonicalizing a proposed entry with an empty spec.message. validate() returns nil (success) when message is empty, leaving sign1Msg uninitialized, and Ca…
CVE-2025-67221HighPoCorjson does not limit recursion for deeply nested JSON documents
orjson does not limit recursion for deeply nested JSON documents
CVE-2026-23991Medium· 5.9github.com/theupdateframework/go-tuf/v2: go-tuf client DoS via malformed server response (CVE-2026-23991)
A denial of service flaw has been discovered in go-tuf. If the TUF repository (or any of its mirrors) returns invalid TUF metadata JSON (valid JSON but not well formed TUF metadata), the client will panic during parsing, causing a denial o…
CVE-2026-63763HighSurrealDB Affected by Confused Deputy Privilege Escalation through Future Fields and Functions
SurrealDB Affected by Confused Deputy Privilege Escalation through Future Fields and Functions
MAL-2026-470NoneMalicious code in urlsssser (PyPI)
Malicious code in urlsssser (PyPI)
MAL-2026-468NoneMalicious code in urlsser (PyPI)
Malicious code in urlsser (PyPI)