Tagged “osv”
CVEs tagged osv, newest first.
7107 CVEsRSS
CVE-2026-113732High· 7.8virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote
virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote
CVE-2026-113726High· 7.8virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST
virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST
CVE-2026-113716Medium· 4.5virtualenv: Builtin creation follows linked environment directories
virtualenv: Builtin creation follows linked environment directories
CVE-2026-113722High· 7.8PoCvirtualenv: Generated POSIX console launchers interpret destination paths as shell syntax
virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax
CVE-2026-113724Medium· 4.5PoCvirtualenv: Deletion recovery can change a symlink target's mode
virtualenv: Deletion recovery can change a symlink target's mode
CVE-2026-113725High· 7.8virtualenv bash activate runs commands from an environment name with a backslash before $
virtualenv bash activate runs commands from an environment name with a backslash before $
CVE-2026-112900Critical· 9.2PoCPillow: Argument Injection in Ghostscript call, potentially leading into RCE
Pillow: Argument Injection in Ghostscript call, potentially leading into RCE
CVE-2026-112894High· 7.5PoCPillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)
Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)
CVE-2026-112901Medium· 7.5Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes
Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes
CVE-2026-112390High· 7.5PoCPillow: Infinite loop in MIC n_frames when the embedded TIFF
Pillow: Infinite loop in MIC n_frames when the embedded TIFF
CVE-2026-112394Medium· 8.2PoCPillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size
Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size
CVE-2026-112391Medium· 7.5Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()
Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()
CVE-2026-112396Medium· 5.9Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer
Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer
CVE-2026-112401Medium· 6.9Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()
Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()
CVE-2026-112393Critical· 9.2PoCPillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO
Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO
CVE-2026-112392High· 7.5PoCPillow: NULL dereference in ImagingExpand via rank filters on zero-size images
Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images
CVE-2026-112405High· 7.5PoCPillow: NULL pointer dereference in Image.merge via an unvalidated band 0
Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0
CVE-2026-112406High· 7.5Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle
Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle
CVE-2026-112891Medium· 6.9Pillow: Quadratic GIF comment copying during save
Pillow: Quadratic GIF comment copying during save
CVE-2026-112402High· 7.5PoCPillow: Double free in ImagingScaleAffine on calloc failure via Image.transform
Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform
GO-2026-6651NonePinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks in github.com/xtls/xray-core
Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks in github.com/xtls/xray-core
PYSEC-2026-4321Noneuv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised
uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised
PYSEC-2026-4320Nonecertifi bundles emSign root CAs with compromised intermediate CA keys
certifi bundles emSign root CAs with compromised intermediate CA keys
MAL-2026-18119Critical⚠ ExploitedMalicious code in ssemver (PyPI)
Malicious code in ssemver (PyPI)
MAL-2026-18118Critical⚠ ExploitedMalicious code in semer (PyPI)
Malicious code in semer (PyPI)
MAL-2026-18117Critical⚠ ExploitedMalicious code in deebug (PyPI)
Malicious code in deebug (PyPI)
MAL-2026-18116Critical⚠ ExploitedMalicious code in debbug (PyPI)
Malicious code in debbug (PyPI)
MAL-2026-18114Critical⚠ ExploitedMalicious code in trijigo-kalip (PyPI)
Malicious code in trijigo-kalip (PyPI)
MAL-2026-18113Critical⚠ ExploitedMalicious code in jiklpo-tsunari-kay (PyPI)
Malicious code in jiklpo-tsunari-kay (PyPI)
MAL-2026-18112Critical⚠ ExploitedMalicious code in hijok-lampam (PyPI)
Malicious code in hijok-lampam (PyPI)