Tagged “osv”
CVEs tagged osv, newest first.
6853 CVEsRSS
CVE-2026-114609Medium· 5.8fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content
fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content
CVE-2026-114608Medium· 5.4Pylint: Arbitrary code execution via pickle deserialization of the stats cache in PYLINT_HOME
Pylint: Arbitrary code execution via pickle deserialization of the stats cache in PYLINT_HOME
CVE-2026-114605High· 7.5dnspython dns.name.from_wire_parser() excessive CPU use
dnspython dns.name.from_wire_parser() excessive CPU use
CVE-2026-114510High· 7.1Flexible GraphRAG: Cypher/Graph Injection via broken string-escaping in FalkorDB adapter (_escape()) - full graph wipe from ingested-docu…
Flexible GraphRAG: Cypher/Graph Injection via broken string-escaping in FalkorDB adapter (_escape()) - full graph wipe from ingested-document content
CVE-2026-114053High· 8.1vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution
vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution
RUSTSEC-2026-0413NoneUse-after-free of caller-owned server name in client connection constructors
Use-after-free of caller-owned server name in client connection constructors
RUSTSEC-2026-0412High· 7.8Arbitrary code execution when rerunning tests from a portable recording
Arbitrary code execution when rerunning tests from a portable recording
MAL-2026-18328Critical⚠ ExploitedMalicious code in netweavex (PyPI)
Malicious code in netweavex (PyPI)
MAL-2026-18327Critical⚠ ExploitedMalicious code in zagents-framework (PyPI)
Malicious code in zagents-framework (PyPI)
MAL-2026-18326Critical⚠ ExploitedMalicious code in changes-lxc-wrapper (PyPI)
Malicious code in changes-lxc-wrapper (PyPI)
MAL-2026-18301Critical⚠ ExploitedMalicious code in dictmerge-lite (PyPI)
Malicious code in dictmerge-lite (PyPI)
MAL-2026-18300Critical⚠ ExploitedMalicious code in claudeopusenifile (PyPI)
Malicious code in claudeopusenifile (PyPI)
MAL-2026-18299Critical⚠ ExploitedMalicious code in claudeopuseni (PyPI)
Malicious code in claudeopuseni (PyPI)
MAL-2026-18298Critical⚠ ExploitedMalicious code in claudeopusfile (PyPI)
Malicious code in claudeopusfile (PyPI)
MAL-2026-18297Critical⚠ ExploitedMalicious code in nebulallm (PyPI)
Malicious code in nebulallm (PyPI)
MAL-2026-18296Critical⚠ ExploitedMalicious code in zagents-message-bus (PyPI)
Malicious code in zagents-message-bus (PyPI)
MAL-2026-18271Critical⚠ ExploitedMalicious code in fontus (PyPI)
Malicious code in fontus (PyPI)
RUSTSEC-2026-0409NoneUse-after-free from a comparator that answers inconsistently
Use-after-free from a comparator that answers inconsistently
RUSTSEC-2026-0408NoneAliasing violations in splice, mutable iteration and cursors
Aliasing violations in splice, mutable iteration and cursors
RUSTSEC-2026-0387NoneMultiple timing variability issues in operations intended to be constant-time
Multiple timing variability issues in operations intended to be constant-time
MAL-2026-18242Critical⚠ ExploitedMalicious code in sitecard (PyPI)
Malicious code in sitecard (PyPI)
MAL-2026-18241Critical⚠ ExploitedMalicious code in workslip (PyPI)
Malicious code in workslip (PyPI)
MAL-2026-18240Critical⚠ ExploitedMalicious code in thornqueue (PyPI)
Malicious code in thornqueue (PyPI)
MAL-2026-18239Critical⚠ ExploitedMalicious code in thistlerun (PyPI)
Malicious code in thistlerun (PyPI)
MAL-2026-18238Critical⚠ ExploitedMalicious code in taskquay (PyPI)
Malicious code in taskquay (PyPI)
MAL-2026-18237Critical⚠ ExploitedMalicious code in slatejob (PyPI)
Malicious code in slatejob (PyPI)
MAL-2026-18236Critical⚠ ExploitedMalicious code in sedgehaul (PyPI)
Malicious code in sedgehaul (PyPI)
MAL-2026-18235Critical⚠ ExploitedMalicious code in runpier (PyPI)
Malicious code in runpier (PyPI)
MAL-2026-18234Critical⚠ ExploitedMalicious code in reedworker (PyPI)
Malicious code in reedworker (PyPI)
MAL-2026-18233Critical⚠ ExploitedMalicious code in otterload (PyPI)
Malicious code in otterload (PyPI)