Tagged “osv”
CVEs tagged osv, newest first.
7111 CVEsRSS
CVE-2026-121440Low· 3.7`wasi-http` p3: forwarded trailers aren't checked against `is_forbidden_header` hook
`wasi-http` p3: forwarded trailers aren't checked against `is_forbidden_header` hook
CVE-2026-121439Medium· 5.3`wasi-http` p3: Guests can set incorrect content-length for spliced response bodies
`wasi-http` p3: Guests can set incorrect content-length for spliced response bodies
RUSTSEC-2026-0380Critical· 9.9Bit-packing in Cranelift compiler causes silent overflow and miscompilation
Bit-packing in Cranelift compiler causes silent overflow and miscompilation
RUSTSEC-2026-0379Critical· 9.9Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction
Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction
RUSTSEC-2026-0378NonePanic lowering a host-created component model stream into a guest that expects a different payload type
Panic lowering a host-created component model stream into a guest that expects a different payload type
RUSTSEC-2026-0377Low· 3.7`wasi-http` p3: forwarded trailers aren't checked against `is_forbidden_header` hook
`wasi-http` p3: forwarded trailers aren't checked against `is_forbidden_header` hook
RUSTSEC-2026-0376Low· 3.7`wasi-http`: Guests can add conflicting content lengths to messages
`wasi-http`: Guests can add conflicting content lengths to messages
RUSTSEC-2026-0375Medium· 5.3`wasi-http` p3: Guests can set incorrect content-length for spliced response bodies
`wasi-http` p3: Guests can set incorrect content-length for spliced response bodies
GO-2026-6754NoneVikunja: Task relation deletion does not check read access to the other task, allowing cross-project relation removal in code.vikunja.io/api
Vikunja: Task relation deletion does not check read access to the other task, allowing cross-project relation removal in code.vikunja.io/api
GO-2026-6732NoneVikunja: CalDAV relation creation bypasses TaskRelation.CanCreate, allowing an unauthorized write into any task by known UID in code.viku…
Vikunja: CalDAV relation creation bypasses TaskRelation.CanCreate, allowing an unauthorized write into any task by known UID in code.vikunja.io/api
GO-2026-6723NoneVikunja: Assignee email addresses disclosed to read-only project members via the task assignees endpoint in code.vikunja.io/api
Vikunja: Assignee email addresses disclosed to read-only project members via the task assignees endpoint in code.vikunja.io/api
GO-2026-6714NoneVikunja: Cross-project task disclosure through subtask expansion in code.vikunja.io/api
Vikunja: Cross-project task disclosure through subtask expansion in code.vikunja.io/api
MAL-2026-18045Critical⚠ ExploitedMalicious code in asurion (PyPI)
Malicious code in asurion (PyPI)
MAL-2026-17943Critical⚠ ExploitedMalicious code in vinted-mocked-apis (PyPI)
Malicious code in vinted-mocked-apis (PyPI)
CVE-2026-112893High· 8.2PoCPillow: Invalid free in FreeType glyph rendering when a stroker is active
Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid glyph pointer during FreeType rendering with an active stroker. If FT_Load_Glyph fails, cleanup may call FT_Done_Glyph on an uninitialized or stale …
CVE-2026-112898Medium· 6.9PoCPillow: Image.quantize() with empty palette leaks uninitialized stack memory
Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack memory when Image.quantize() uses an empty palette. ImagingPaletteCacheUpdate() leaves a local cache array uninitialized when the palett…
CVE-2026-112395Medium· 6.5PoCPillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)
Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow's tiled-TIFF decoder can read past the tile buffer while copying four-byte pixels. In _decodeTile, libtiff can return a tile allocation smaller than the required row str…
CVE-2026-112399High· 8.7PoCPillow: APNG background disposal allocates full canvas before decompression bomb check
Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate an APNG disposal background at the full canvas size before applying the decompression-bomb check. A crafted APNG with a small first frame, a very large decl…
CVE-2026-112404High· 8.8PoCPillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels
Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow's TIFF tile and RGBA decode paths can read beyond row data produced by libtiff. In _decodeTile and the RGBA unpacker path, when Pillow and libtiff interpret duplicated P…
CVE-2026-112892High· 7.5pillow: pillow: Denial of Service via unbounded memory expansion in MSP image decoder (CVE-2026-112892)
A flaw was found in Pillow. A remote attacker can cause a Denial of Service (DoS) by supplying a specially crafted Microsoft Paint (MSP) image file to an application that processes image pixels. Due to missing expansion limits during decom…
CVE-2026-53995High· 8.2PoCMLflow 3.17.1 and prior Path Traversal via Trace ID API
MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to control filesystem paths by submitting a crafted trace ID containing traversal sequences to the …
CVE-2026-111066High· 7.5aiohttp: aiohttp: Denial of Service via file descriptor exhaustion in multipart request processing (CVE-2026-111066)
A flaw was found in aiohttp. When processing multipart requests, the framework fails to properly limit the number of open file descriptors retained during request handling. An unauthenticated remote attacker can exploit this issue by sendi…
CVE-2026-111750Medium· 6.3AIOHTTP: Pure-Python parser request smuggling
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the pure Python parser accepts ambiguous HTTP request framing. An unauthenticated attacker can consequently smuggle requests when an applica…
CVE-2026-111749Low· 2.3AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Host-Only scope on an existing parent-domain cookie can be removed by a subdomain. A user who accesses an untrusted subdomain can consequent…
GHSA-pcc4-rvhr-2pr8MediumGraphify Fortran extractor: incomplete cpp #include hardening allows arbitrary host-file read/exfiltration when indexing an untrusted repo
Graphify Fortran extractor: incomplete cpp #include hardening allows arbitrary host-file read/exfiltration when indexing an untrusted repo
GHSA-953h-535j-jg2vMediumagent-router: MCP session resume does not verify the embedded anti-hijacking subject; default Helm seed makes session IDs forgeable
agent-router: MCP session resume does not verify the embedded anti-hijacking subject; default Helm seed makes session IDs forgeable
GHSA-2g87-pp6c-29x5Highaiohttp: Multiple instances of excessive or unbounded memory/CPU use
aiohttp: Multiple instances of excessive or unbounded memory/CPU use
CVE-2026-111064High· 8.2aiohttp server lacks an initial request/header timeout
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, keepalive timeout handling is absent during the initial portion of a request. An attacker can keep an idle connection open indefinitely befo…
CVE-2026-111063Medium· 6.3AIOHTTP: Secure attribute not enforced for shared cookie
AIOHTTP: Secure attribute not enforced for shared cookie
CVE-2026-111057Critical· 10.0PoCMercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass
Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in BLOCKED_PATTERNS concatenates the /lab and /api/terminals regular-expression literals. Requests to…