Tagged “osv”
CVEs tagged osv, newest first.
7107 CVEsRSS
RUSTSEC-2026-0354NoneHost panic when component `call_async` is cancelled under some conditions
Host panic when component `call_async` is cancelled under some conditions
RUSTSEC-2026-0353NonePanic when invoking an async-lifted function via `call`
Panic when invoking an async-lifted function via `call`
RUSTSEC-2026-0352NoneFilesystem sandbox escape when renaming symlinks with trailing slashes
Filesystem sandbox escape when renaming symlinks with trailing slashes
RUSTSEC-2026-0351Medium· 5.3`wasi-http`: Request with long url before query parameter crashes host
`wasi-http`: Request with long url before query parameter crashes host
RUSTSEC-2026-0350NoneGuests can send absolute-form HTTP requests to different hosts
Guests can send absolute-form HTTP requests to different hosts
RUSTSEC-2026-0349Low· 3.7Unauthenticated ServerHello can downgrade later connections to classical key exchange
Unauthenticated ServerHello can downgrade later connections to classical key exchange
RUSTSEC-2026-0348Low· 3.7Brotli certificate decompression can allocate up to 1 GiB before authentication
Brotli certificate decompression can allocate up to 1 GiB before authentication
RUSTSEC-2026-0347Low· 2.3Buffered application data sent to outer server after ECH rejection
Buffered application data sent to outer server after ECH rejection
RUSTSEC-2026-0346Medium· 4.0`Debug` impls for client session values expose TLS secrets
`Debug` impls for client session values expose TLS secrets
MAL-2026-17877Critical⚠ ExploitedMalicious code in saeka (PyPI)
Malicious code in saeka (PyPI)
CVE-2026-110860Medium· 6.1PoCGitPython from 3.1.62 before 3.2.0 contains a symlink-following flaw in Submodule.move(), which checks the destination only lexically and does not reject symbolic links in intermediate path components
GitPython from 3.1.62 before 3.2.0 contains a symlink-following flaw in Submodule.move(), which checks the destination only lexically and does not reject symbolic links in intermediate path components. An untrusted repository can commit …
CVE-2026-110859High· 7.5PoCGitPython before 3.2.0 contains an argument injection vulnerability in Head.checkout() that allows remote attackers to read arbitrary files by supplying a branch name parsed as a git option
GitPython before 3.2.0 contains an argument injection vulnerability in Head.checkout() that allows remote attackers to read arbitrary files by supplying a branch name parsed as a git option. Attackers can host a repository whose default …
CVE-2026-110858High· 8.1GitPython from 3.1.30 before 3.2.0 contains a remote code execution vulnerability in Remote.pull() whose unsafe-option guard inspects only keyword arguments, not the positional refspec
GitPython from 3.1.30 before 3.2.0 contains a remote code execution vulnerability in Remote.pull() whose unsafe-option guard inspects only keyword arguments, not the positional refspec. Attackers controlling the refspec can supply --uplo…
CVE-2026-110857High· 7.5GitPython before 3.2.0 contains a remote code execution vulnerability that allows attackers to run commands because Git.ls_remote forwards URLs without check_unsafe_protocols validation
GitPython before 3.2.0 contains a remote code execution vulnerability that allows attackers to run commands because Git.ls_remote forwards URLs without check_unsafe_protocols validation. Attackers can supply ext:: remote-helper URLs to e…
CVE-2026-110856High· 7.5PoCGitPython before 3.2.0 contains a regular expression denial of service vulnerability in the _re_actor_epoch pattern used by parse_actor_and_date on author, committer, and tagger lines
GitPython before 3.2.0 contains a regular expression denial of service vulnerability in the _re_actor_epoch pattern used by parse_actor_and_date on author, committer, and tagger lines. Attackers can serve repositories with commit or tag …
CVE-2026-110855Medium· 6.5PoCGitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious repositories to expand environment variables via separate_git_dir in Repo._clone(), which omits expand_vars=False when calling Git.polish_url()…
GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious repositories to expand environment variables via separate_git_dir in Repo._clone(), which omits expand_vars=False when calling Git.polish_url()…
CVE-2026-102748Critical· 9.2Dgraph is an open source distributed GraphQL database
Dgraph is an open source distributed GraphQL database. Prior to 25.4.0, Dgraph Zero registers administrative HTTP routes on port 6080 without authentication when the administrative interface is enabled. The /removeNode route accepts atta…
CVE-2026-102682Medium· 5.6Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents
Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. From 0.0.98 until 1.6.0, the pipecat-ai package's built-in development runner exposes unauthenticated endpoints including /star…
CVE-2026-59180Low· 3.1Apprise forwards configured auth headers across cross-origin HTTP redirects
Apprise forwards configured auth headers across cross-origin HTTP redirects
CVE-2026-77564Low· 3.3Talos Linux is a Linux distribution built for Kubernetes deployments
Talos Linux is a Linux distribution built for Kubernetes deployments. Prior to 1.12.9 and 1.13.3, talosctl support includes the auth field from resources/registryconfigs.cri.talos.dev.yaml and sensitive content from etcfilespecs.files.ta…
CVE-2026-77524Critical· 9.9PoCKEDA is a Kubernetes-based Event Driven Autoscaling component
KEDA is a Kubernetes-based Event Driven Autoscaling component. In version 2.20.2 and earlier, a namespace administrator who can create TriggerAuthentication and ScaledObject resources can set hashiCorpVault.address to a tenant-controlled…
CVE-2026-59951Medium· 6.9The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP)
The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). From 1.8.0 until 1.30.0 and 2.2.0, stateful Streamable HTTP servers, including FastMCP, MCPServer, Server.streamable_http_app(), and …
CVE-2026-103929High· 7.8PoCmise manages dev tools like node, python, cmake, and terraform
mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.7.14, in the default non-safe mode, mise loads .mise.toml [settings] from an untrusted local project before trust approval and strip_local_only_settings remove…
CVE-2026-100394Medium· 6.5PoCNezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool
Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From 2.2.7 until 2.2.11, ServiceSentinel.worker in service/singleton/servicesentinel.go checked an owned service under servicesLock and later…
CVE-2026-100169High· 7.6⚖ disputedImproper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, b…
Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, b…
CVE-2026-73802Critical· 9.9Gitea Runner passes workflow-controlled container options into Docker job container configuration while privileged mode is disabled
Gitea Runner passes workflow-controlled container options into Docker job container configuration while privileged mode is disabled. Host namespace settings, expanded capabilities, and security profile overrides can remain effective desp…
CVE-2026-55786High· 8.4PoCFlyto2 Core is an execution kernel for automation and AI-agent workflows
Flyto2 Core is an execution kernel for automation and AI-agent workflows. From 2.26.2 until 2.26.4, the HTTP MCP POST /mcp route accepts unauthenticated JSON-RPC tools/call requests and forwards execute_module arguments to the module reg…
RUSTSEC-2026-0386None`AsyncFd::new` and related constructors violate I/O safety
`AsyncFd::new` and related constructors violate I/O safety
MAL-2026-17863Critical⚠ ExploitedMalicious code in crelic-bqwheel-52f66a3f1d (PyPI)
Malicious code in crelic-bqwheel-52f66a3f1d (PyPI)
MAL-2026-17862Critical⚠ ExploitedMalicious code in fontcase (PyPI)
Malicious code in fontcase (PyPI)