PT-2026-37199

🗓️ 04 May 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 12 Views

Malicious PDF can loop PdfParser on trailer Prev pointers, freezing the app; fixed in 12.2.0.

Reporter	Title	Published	Views	Family All 572
IBM Security Bulletins	Security Bulletin: There is a vulnerability in idna-3.13-py3-none-any.whl used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-45409)	26 Jun 202608:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.2.0	30 Jun 202616:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in DataView	6 Jul 202610:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to loss of confidentiality and denial of service due to multiple CVEs	2 Jul 202610:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by a Regular Expression Denial of Service vulnerability due to idna	8 Jul 202611:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerabilities in pyjwt-2.12.1-py3-none-any.whl	17 Jun 202615:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses idna-3.13-py3-none-any.whl which is vulnerable to CVE-2026-45409.	29 Jun 202615:56	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	30 Jun 202607:44	–	ibm
ATTACKERKB	CVE-2026-48525	28 May 202615:11	–	attackerkb
ATTACKERKB	CVE-2026-42309	9 May 202604:08	–	attackerkb

Source	Link
github	www.github.com/python-pillow/Pillow
osv	www.osv.dev/vulnerability/CVE-2026-42308
osv	www.osv.dev/vulnerability/ghsa-whj4-6x5x-4v2j
osv	www.osv.dev/vulnerability/CVE-2026-42311
security-tracker	www.security-tracker.debian.org/tracker/CVE-2026-42310
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-42308
osv	www.osv.dev/vulnerability/ghsa-r73j-pqj5-w3x7
ubuntu	www.ubuntu.com/security/CVE-2026-42308
twitter	www.twitter.com/CVEnew/status/2053131381866475581
github	www.github.com/python-pillow/Pillow/security/advisories/GHSA-r73j-pqj5-w3x7

10 Jun 2026 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.5 - 7.8

CVSS 48.6

EPSS0.00408

SSVC