PT-2026-80383

In github.com/prebid/prebid-server/v4 before 4.4.0, multiple bidder adapters acuityads, bidmachine, relevantdigital, smartyads, tappx, trafficgate, zeroclickfraud interpolate user-supplied host and subdomain parameters into outbound request URLs without validation. A remote attacker can craft bid...

CVE-2026-65975

A flaw was found in Pydantic AI's UI adapters, specifically within the sanitizemessages function. This vulnerability allows a remote client to bypass security checks and execute server tools with arguments they provide, rather than those generated by the AI model. This occurs when a trailing clie...

Pydantic AI: Unvalidated UploadedFile references in UI adapters allow server-side file access using the application's credentials

Summary A client that can submit message history to a Pydantic AI UI adapter can reference arbitrary files in the application's model-provider or cloud-storage account. The server forwards the reference to the model provider, which fetches it using the server's own credentials, allowing the clien...

CVE-2026-72742: External Control of File Name or Path

DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field adapters that allows attackers with influence over language model outputs to read arbitrary local files by injecting a filesystem path into the url field of a parsed Image or Audio typed output. The...

CVE-2026-68214

In the Linux kernel, the following vulnerability has been resolved: media: rtl2832: fix use-after-free in rtl2832remove canceldelayedworksync is called before i2cmuxdeladapters in rtl2832remove. While the cancel waits for any running instance of i2cgatework to finish, it does not prevent the time...

CVE-2026-68214 media: rtl2832: fix use-after-free in rtl2832_remove()

In the Linux kernel, the following vulnerability has been resolved: media: rtl2832: fix use-after-free in rtl2832remove canceldelayedworksync is called before i2cmuxdeladapters in rtl2832remove. While the cancel waits for any running instance of i2cgatework to finish, it does not prevent the time...

CVE-2026-68214

The CVE-2026-68214 issue affects the Linux kernel media/rtl2832 path and causes a use-after-free during module removal when a concurrent I2C transfer via the mux adapter is in flight. The root cause is that cancel_delayed_work_sync() is invoked before i2c_mux_del_adapters(), allowing rtl2832_dese...

EUVD-2026-55315

In the Linux kernel, the following vulnerability has been resolved: media: rtl2832: fix use-after-free in rtl2832remove canceldelayedworksync is called before i2cmuxdeladapters in rtl2832remove. While the cancel waits for any running instance of i2cgatework to finish, it does not prevent the time...

MAL-2026-12607 Malicious code in claims-auth-api-adapters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a214cb0da52b5d7bb026d974fbcd6897b455b8ca000e3ef92c6205678742935e index.js unconditionally requires./runtime on module load. runtime.js selects an OS/arch-specific payload path and fetches an opaque binary from...

MAL-2026-12605 Malicious code in claims-api-adapters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 484891b513be8a69a5292810c211fd31bf54ad2a32c6f4899faafb1e7d31ef7e On require of claims-api-adapters, index.js unconditionally loads init.js, which invokes bootstrap at top level. bootstrap selects a platform-specifi...

Malicious code in claims-historical-claims-api-adapters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7434149cb83ab4bb1378b89c5fd8165ce08bf714df3258c0a4b2ba67940c997 index.js unconditionally requires loader.js on module load. loader.js reconstructs remote hostnames from split string fragments e.g...

Malicious code in claims-policies-api-adapters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d8ba02b55d458bc61e8bda89796763be5f0318df30b36dca5746990b9a578db On require of claims-policies-api-adapters, index.js loads vendor.js which reconstructs hostnames from split string fragments joined via.join'',...

Malicious code in @or-sdk/adapters (npm)

npm/@or-sdk/adapters is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by...

MAL-2026-11667 Malicious code in @or-sdk/adapters (npm)

npm/@or-sdk/adapters is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by...

adapters (>=0.0.0.dev20231111, <=0.0.0.dev20231116), ag-llama-api-s (0.0.12) +44 more potentially affected by CVE-2026-9856 via transformers (4.33.3)

transformers PYPI version 4.33.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adapters =0.0.0.dev20231111, =0.0.13, =0.0.15, =0.0.29, =0.1.0, =0.3.0, =0.0.1, =0.1.36a0, =1.1.1, =0.1.1, =0.1.5 and more Source cves:...

Server-Side Request Forgery (SSRF)

Prebid Server is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to certain bidder adapters interpolating user-supplied parameters into outbound request URLs without properly validating host and subdomain values, which allows an attacker to craft bid request parameters th...

CVE-2026-67316

axios is vulnerable to read-side prototype-pollution gadgets that can alter request construction when Object.prototype has already been polluted by a separate vulnerability or dependency. In the bodyless method aliases axios.get, axios.delete, axios.head, axios.options, inherited data is read via...

UBUNTU-CVE-2026-67316

axios is vulnerable to read-side prototype-pollution gadgets that can alter request construction when Object.prototype has already been polluted by a separate vulnerability or dependency. In the bodyless method aliases axios.get, axios.delete, axios.head, axios.options, inherited data is read via...

CVE-2026-67316 axios before 1.18.0 Prototype Pollution via bodyless methods

axios is vulnerable to read-side prototype-pollution gadgets that can alter request construction when Object.prototype has already been polluted by a separate vulnerability or dependency. In the bodyless method aliases axios.get, axios.delete, axios.head, axios.options, inherited data is read via...

CVE-2026-67314

axios versions =1.15.2 and 1.18.0 contain prototype-pollution read-side gadgets in Basic auth subfield handling lib/adapters/http.js and lib/helpers/resolveConfig.js. When an application is already affected by a separate prototype-pollution primitive and makes an axios request with an own auth...