Tagged “osv”
CVEs tagged osv, newest first.
7111 CVEsRSS
RUSTSEC-2026-0393NoneOut-of-bounds read when training a dictionary from inconsistent sample sizes
Out-of-bounds read when training a dictionary from inconsistent sample sizes
RUSTSEC-2026-0392NoneUninitialized memory exposed by `write::Decoder` on a corrupt legacy frame
Uninitialized memory exposed by `write::Decoder` on a corrupt legacy frame
RUSTSEC-2026-0391NoneData from an abandoned stream leaks into the next stream on a reused context
Data from an abandoned stream leaks into the next stream on a reused context
RUSTSEC-2026-0373NoneMissing case-insensitive matching for CSS url function
Missing case-insensitive matching for CSS url function
RUSTSEC-2026-0372None`zvariant_derive` is unmaintained
`zvariant_derive` is unmaintained
RUSTSEC-2026-0371None`zbus_names` is unmaintained
`zbus_names` is unmaintained
RUSTSEC-2026-0370None`zvariant` is unmaintained
`zvariant` is unmaintained
RUSTSEC-2026-0366Low· 3.3Stack overflow when parsing deeply nested input in pest_grammars
Stack overflow when parsing deeply nested input in pest_grammars
CVE-2026-108372High· 7.1PoCLoopX serve-status permissive CORS policy exposes control-plane state and private Markdown files
Open and provider-neutral, LoopX is a lightweight state kernel and local-first control plane for loop engineering. From version 0.0.1 until 0.4.5, `loopx serve-status` in `loopx/status_server.py` uses `StatusRequestHandler._send_json()` …
CVE-2026-96628Medium· 4.3Arcane: Environment access token bypasses the admin-required authorization gate on `/api/debug/pprof`
Arcane: Environment access token bypasses the admin-required authorization gate on `/api/debug/pprof`
CVE-2026-96627High· 8.8Arcane: Delegated users:update permission allows admin account takeover via password reset (no privilege-hierarchy check)
Arcane: Delegated users:update permission allows admin account takeover via password reset (no privilege-hierarchy check)
GHSA-6fj4-rcr3-r7rrHigh· 7.5lopdf has a stack overflow via deeply nested PDF objects
lopdf has a stack overflow via deeply nested PDF objects
CVE-2026-68549Low· 3.3ClickMigrate has Path Traversal in "revision -m" argument
ClickMigrate has Path Traversal in "revision -m" argument
CVE-2026-62994Low· 3.7CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin
CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin
CVE-2026-96620Critical· 9.2Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution
Claude Agent SDK is a Python SDK for Claude Code. Prior to 0.2.121, the resume option is passed to the Claude CLI as a separate token without validation, so a dash-leading value is parsed as an independent CLI flag. An attacker can injec…
CVE-2026-102941High· 7.5gomarkdown/markdown IsSafeURL panics on short URLs
The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Prior to 0.0.0-20260724235538-61af6e1e6971, parser.IsSafeURL in parser/parser.go slices url[:nPath] before the len(url) >= nPath …
MAL-2026-17900Critical⚠ ExploitedMalicious code in marocolor (PyPI)
Malicious code in marocolor (PyPI)
MAL-2026-17897Critical⚠ ExploitedMalicious code in fromthehotel-poems (PyPI)
Malicious code in fromthehotel-poems (PyPI)
MAL-2026-17866Critical⚠ ExploitedMalicious code in pyyi (PyPI)
Malicious code in pyyi (PyPI)
CVE-2026-58494Medium· 6.5Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination
Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination
MAL-2026-17889Critical⚠ ExploitedMalicious code in proxyrobika (PyPI)
Malicious code in proxyrobika (PyPI)
MAL-2026-17887Critical⚠ ExploitedMalicious code in proxy-rubikis (PyPI)
Malicious code in proxy-rubikis (PyPI)
CVE-2026-62322Medium· 6.5Python Social Auth is a social authentication/registration mechanism
Python Social Auth is a social authentication/registration mechanism. Prior to 5.0.2, the LINE backend exchanges an authorization code without validating the returned OAuth state. An attacker can begin authorization for an attacker-contr…
CVE-2026-111171Medium· 5.4PoCWeb3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 contains a server-side request forgery vulnerability because _check_ip_blocked() does not unwrap IPv4-mapped IPv6 addresses in CCIP Read URL validation
Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 contains a server-side request forgery vulnerability because _check_ip_blocked() does not unwrap IPv4-mapped IPv6 addresses in CCIP Read URL validation. Malicious contracts can retu…
CVE-2026-111170Medium· 6.5kedro-datasets from 9.3.0 through 9.6.0 contains a path traversal vulnerability in MatplotlibDataset.save() that allows attackers to write files outside the dataset directory by supplying absolute plot names
kedro-datasets from 9.3.0 through 9.6.0 contains a path traversal vulnerability in MatplotlibDataset.save() that allows attackers to write files outside the dataset directory by supplying absolute plot names. Because validate_sub_path() …
CVE-2026-104266Medium· 6.5tinytag is a Python library for reading audio file metadata
tinytag is a Python library for reading audio file metadata. From 2.0.0 until 2.3.0, an M4A file containing a sub-atom with a size of zero inside a ---- atom can cause the metadata parser to stop advancing through the input. The custom-f…
CVE-2026-100354High· 7.5PoCkin-openapi is a Go project for handling OpenAPI files
kin-openapi is a Go project for handling OpenAPI files. Prior to 0.149.0, runtime request, response, and direct schema validation lacks cycle detection when an allOf, anyOf, or oneOf chain refers back to an ancestor schema, even though l…
CVE-2026-100353High· 7.5PoCkin-openapi is a Go project for handling OpenAPI files
kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.149.0, three openapi3filter decoder paths that were missed by the fix for GHSA-p6wj-qrr4-pgh5 lack a nil-items guard for legal OpenAPI 3.1 array schemas. An una…
CVE-2026-97394High· 7.5PoCkin-openapi is a Go project for handling OpenAPI files
kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.143.0, openapi3filter accepts OpenAPI 3.1 array schemas without an items keyword and then dereferences the nil Schema.Items value while decoding application/x-w…
CVE-2026-100347Medium· 5.3PoCkin-openapi is a Go project for handling OpenAPI files
kin-openapi is a Go project for handling OpenAPI files. Prior to 0.145.0, openapi3filter.ValidationHandler uses the routers/legacy router, which passes an unsupported or non-canonical HTTP method for an existing static path to openapi3.P…