CVE-2026-73621 GitPython before 3.1.56 Arbitrary File Truncation via Commit.count

GitPython before 3.1.56 contains an argument injection vulnerability in the Commit.count method, which forwards keyword arguments to 'git rev-list' without the checkunsafeoptions guard present in the sibling iteritems method. An attacker who can control options passed to Commit.count e.g., via an...

CVE-2026-73621

GitPython vulnerability CVE-2026-73621 affects GitPython before 3.1.56. The Commit.count() method forwards keyword arguments to git rev-list without the check_unsafe_options guard present in iter_items, allowing an attacker who controls options (e.g., via an app forwarding a user-supplied dict) t...

EUVD-2026-57695

PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document. For an HTML string or file source, the constructor collects every element in the document head through pdfwebkitmetatags and turns each one into a wkhtmltopdf command line...

CVE-2026-16770

PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document. For an HTML string or file source, the constructor collects every element in the document head through pdfwebkitmetatags and turns each one into a wkhtmltopdf command line...

PT-2026-71628

Name of the Vulnerable Software and Affected Versions rsync versions prior to 3.5.0 Description Multiple command and argument injection issues allow attackers to execute arbitrary commands by providing malicious input through various code paths. These paths include the RSYNC CONNECT PROG...

CVE-2026-16770: Improper Neutralization of Argument Delimiters in a Command

PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document. For an HTML string or file source, the constructor collects every element in the document head through pdfwebkitmetatags and turns each one into a wkhtmltopdf command line...

CVE-2026-73621: Improper Neutralization of Argument Delimiters in a Command

GitPython before 3.1.56 contains an argument injection vulnerability in the Commit.count method, which forwards keyword arguments to 'git rev-list' without the checkunsafeoptions guard present in the sibling iteritems method. An attacker who can control options passed to Commit.count e.g., via an...

CVE-2026-16770 PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document

PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document. For an HTML string or file source, the constructor collects every element in the document head through pdfwebkitmetatags and turns each one into a wkhtmltopdf command line...

CVE-2026-16770 PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document

PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document. For an HTML string or file source, the constructor collects every element in the document head through pdfwebkitmetatags and turns each one into a wkhtmltopdf command line...

CVE-2026-16770 PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document

PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document. For an HTML string or file source, the constructor collects every element in the document head through pdfwebkitmetatags and turns each one into a wkhtmltopdf command line...

CVE-2026-16770

The PDF::WebKit library for Perl (versions through 1.2 ) is vulnerable to argument injection within wkhtmltopdf . The root cause is that the constructor collects elements from the source document head and converts them into command line options without validating against an allow list. Attackers...

CVE-2026-16770

PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document. For an HTML string or file source, the constructor collects every element in the document head through pdfwebkitmetatags and turns each one into a wkhtmltopdf command line...

CVE-2026-73240

Specifically crafted inputs may lead to git argument injection in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue...

CVE-2026-73240 Apache Allura: Git command injection

Specifically crafted inputs may lead to git argument injection in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue...

EUVD-2026-57369

Specifically crafted inputs may lead to git argument injection in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue...

CVE-2026-73240

Specifically crafted inputs may lead to git argument injection in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue...

CVE-2026-73240 Apache Allura: Git command injection

Specifically crafted inputs may lead to git argument injection in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue...

CVE-2026-73240

Apache Allura versions prior to 1.19.1 are vulnerable to git argument injection . This flaw occurs when specifically crafted inputs allow an attacker to insert unauthorized arguments into a git command executed by the application. The impact is severe, with a CVSS score of 9.8 , indicating high c...

CVE-2026-73240 Apache Allura: Git command injection

Specifically crafted inputs may lead to git argument injection in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue...

Improper Neutralization Of Argument Delimiters (Argument Injection)

Apache Camel is vulnerable to Improper Neutralization of Argument Delimiters. The vulnerability is due to insufficient validation of custom CLI arguments and path values supplied through Camel headers, which allows an attacker who can influence these values to inject unintended docling command-li...