CVE-2026-73219 CVAT: Denial of service with regards to automatic annotation

CVAT is an open source interactive video and image annotation tool for computer vision. From 2.17.0 until 2.72.0, a user with write access to a CVAT job can submit a batch automatic annotation request to RequestViewSet.create with inconsistent task and job IDs, and because the task ID determines...

CVE-2026-73219

CVAT vulnerability CVE-2026-73219 affects versions 2.17.0 through 2.72.0. A user with write access can submit a batch automatic annotation request to RequestViewSet.create using inconsistent task and job IDs. The task ID determines the single active request slot, which can block automatic annotat...

CVE-2026-73219 CVAT: Denial of service with regards to automatic annotation

CVAT is an open source interactive video and image annotation tool for computer vision. From 2.17.0 until 2.72.0, a user with write access to a CVAT job can submit a batch automatic annotation request to RequestViewSet.create with inconsistent task and job IDs, and because the task ID determines...

PT-2026-70843

CVAT is an open source interactive video and image annotation tool for computer vision. From 2.17.0 until 2.72.0, a user with the Worker role can use predictable task-based request IDs with the lambda request retrieve and destroy endpoints to view automatic annotation requests for tasks or jobs t...

PT-2024-28849 · Unknown +1 · Doccano Auto Labeling Pipeline +1

Name of the Vulnerable Software and Affected Versions: Doccano Open source annotation tools for machine learning practitioners version 1.8.4 Doccano Auto Labeling Pipeline module version 0.1.23 Description: An issue in the affected software allows a remote attacker to escalate privileges via a...