CVE-2026-65920

Diffusers up to 0.39.0 is affected by a path traversal in the _get_checkpoint_shard_files function. Attackers can supply malicious weight_map values in the model index JSON (e.g., ../ sequences or absolute paths) to escape the model directory and read safetensors files outside the intended locati...

CVE-2026-65920 Diffusers Path Traversal via weight_map Arbitrary File Read

Diffusers through 0.39.0, fixed in commit cee298c, contains a path traversal vulnerability in the getcheckpointshardfiles function that allows attackers to read arbitrary files by supplying malicious weightmap values in model index JSON. Attackers can use ../ sequences or absolute paths in...

CVE-2026-60584

creationtimestamp| type| source ---|---|--- 2026-07-23 17:20:39+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60554

creationtimestamp| type| source ---|---|--- 2026-07-23 17:19:44+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60549

creationtimestamp| type| source ---|---|--- 2026-07-23 17:19:32+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-30 08:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrtzx34j3o2c...

CVE-2026-60544

creationtimestamp| type| source ---|---|--- 2026-07-23 17:19:20+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60531

creationtimestamp| type| source ---|---|--- 2026-07-23 17:18:49+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-24 19:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrg33be4wd2s 2026-07-29 06:07:06+00:00| seen|...

CVE-2026-60503

creationtimestamp| type| source ---|---|--- 2026-07-23 17:18:23+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-30 09:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mru3mqhmmm2s...

CVE-2026-60458

creationtimestamp| type| source ---|---|--- 2026-07-23 17:17:21+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-24 15:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrfoyzjg752a...

CVE-2026-60438

creationtimestamp| type| source ---|---|--- 2026-07-23 17:16:36+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-24 14:44:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrflns566c2j...

CVE-2026-60430

creationtimestamp| type| source ---|---|--- 2026-07-23 17:16:24+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-30 11:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrucdctw7l2l...

UBUNTU-CVE-2026-16768

A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined palette range, an out-of-bounds read can occur due to improper bounds checking against the actual palette size. This vulnerability causes heap bytes to be interpreted as valid palet...

CVE-2026-60377

creationtimestamp| type| source ---|---|--- 2026-07-23 17:15:10+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-24 18:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrfxmfu6ug2u 2026-07-29 07:37:06+00:00| seen|...

CVE-2026-60375

creationtimestamp| type| source ---|---|--- 2026-07-23 17:15:06+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-24 18:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrfxit4vlo23 2026-07-29 13:07:07+00:00| seen|...

CVE-2026-16584

creationtimestamp| type| source ---|---|--- 2026-07-23 17:04:50+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116970375756122049 2026-07-23 17:04:50+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrdd2js4g22v 2026-07-24 01:01:22+00:00| seen|...

CVE-2026-61183

creationtimestamp| type| source ---|---|--- 2026-07-23 16:54:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdchdro2t2j 2026-07-23 18:17:08+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-08-01 09:24:46+00:00| seen|...

CVE-2026-60362

creationtimestamp| type| source ---|---|--- 2026-07-23 16:52:38+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-24 18:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrfx65f4ic2a 2026-08-03 20:37:06+00:00| seen|...

CVE-2026-61174

creationtimestamp| type| source ---|---|--- 2026-07-23 16:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcdps45p24 2026-07-23 18:16:52+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60284

creationtimestamp| type| source ---|---|--- 2026-07-23 16:50:41+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-27 12:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrmubtc7z32v...

CVE-2026-60277

creationtimestamp| type| source ---|---|--- 2026-07-23 16:50:29+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-27 17:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrnf2bur232i...