CVE-2026-62239

FlashAttention through 2.8.3.post1, fixed in commit 0816ef1, contains a symlink attack vulnerability in the downloadandcopy function within hopper/setup.py that extracts NVIDIA toolchain archives without validating symlinks or filtering tar members. A local attacker can pre-plant a symlink in the...

CVE-2026-62239 FlashAttention Symlink Attack via tarfile.extractall in hopper/setup.py

FlashAttention through 2.8.3.post1, fixed in commit 0816ef1, contains a symlink attack vulnerability in the downloadandcopy function within hopper/setup.py that extracts NVIDIA toolchain archives without validating symlinks or filtering tar members. A local attacker can pre-plant a symlink in the...

CVE-2026-55773

CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisions. In versions prior to 2.3.6, 3.4.1 and 4.9.0, under certain circumstances, improper input handling could allow Cedar-expression injection via unescaped toCedarExpr. The...

Security Bulletin: Vulnerability in bytes bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage include the bytes library, which is affected by an integer overflow vulnerability. CVE-2026-25541 Vulnerability Details CVEID:CVE-2026-25541 DESCRIPTION: Bytes is a utility library for working with bytes. From version 1.2.1 ...

OPENSUSE-SU-2026:21333-1 Security update for nasm

This update for nasm fixes the following issues - CVE-2026-6067: heap buffer overflow vulnerability due to a lack of bounds checking in the objdirective function bsc1261986. - CVE-2026-6068: heap use after free vulnerability in response file processing bsc1261985. Changes for nasm: - Update to...

CVE-2026-61462 mcp-gitlab Path Traversal via job_id Parameter

mcp-gitlab contains a path traversal vulnerability in the jobid parameter of build/index.js that allows attackers to redirect GitLab API requests to arbitrary endpoints. Attackers can supply crafted jobid values like ../../../user to escape the intended path prefix and access arbitrary GitLab API...

EUVD-2026-43504

mcp-gitlab contains a path traversal vulnerability in the jobid parameter of build/index.js that allows attackers to redirect GitLab API requests to arbitrary endpoints. Attackers can supply crafted jobid values like ../../../user to escape the intended path prefix and access arbitrary GitLab API...

Exploit for Improper Input Validation in Snakeyaml_Project Snakeyaml

Seal Security — Java Maven Example A minimal, intentionally...

PYSEC-2026-2970 Rattler vulnerable to package cache path traversal via conda package build string

rattlercache and py-rattler were vulnerable to package-cache path traversal when handling package metadata from conda channels. During cache materialization, the rattercache code used the package record build string as part of a cache key that was joined into a filesystem path. A malicious or...

Rattler vulnerable to package cache path traversal via conda package build string

rattlercache and py-rattler were vulnerable to package-cache path traversal when handling package metadata from conda channels.During cache materialization, the rattercache code used the package record build string as part of a cache key that was joined into a filesystem path. A malicious or...

ONNX has Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)

SummaryNull pointer dereference SIGSEGV in Upsample67::adaptupsample67 onnx/versionconverter/adapters/upsample67.h:31 when convertversion processes a model with an Upsample node that has zero inputs. The adapter accesses node-inputs0-sizes without checking input count. 107-byte PoC crashes on...

doppler-pdm (>=0.1.0, <=1.0.2), mina-build (>=0.1.5, <=0.1.6) +5 more potentially affected by CVE-2026-47781 via pdm (1.15.5)

pdm PYPI version 1.15.5 is affected by a known vulnerability. The following packages have a transitive dependency on pdm and may be impacted: - doppler-pdm =0.1.0, =0.1.5, =0.2.0, =0.2.1 - pdm-shell 1.0.0 - pdm-venv 0.6.0 - pdm-version 1.0.0 Source cves: CVE-2026-47781 Source advisory:...

PYSEC-2026-2399 BentoML has Information Disclosure in `bentoml build` via symlink traversal in the build context

Summary BentoML's bentoml build packaging workflow follows attacker-controlled symlinks inside the build context and copies the referenced file contents into the generated Bento artifact. If a victim builds an untrusted repository or other attacker-supplied build context, the attacker can place a...

BentoML has Information Disclosure in `bentoml build` via symlink traversal in the build context

SummaryBentoML's bentoml build packaging workflow follows attacker-controlled symlinks inside the build context and copies the referenced file contents into the generated Bento artifact.If a victim builds an untrusted repository or other attacker-supplied build context, the attacker can place a...

build-magic (>=0.4.1rc0, <=0.5.1rc0), lemur (>=1.1.0, <=1.2.0) +10 more potentially affected by CVE-2026-44405 via paramiko (2.9.2)

paramiko PYPI version 2.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - build-magic =0.4.1rc0, =1.1.0, =0.10.10, =1.0.0, =0.10.4, =0.2.0.1, =0.0.0.dev0, =1.27.0, =1.34.0 - wizardwebssh 1.9.0 Source cves: CVE-2026-444...

benchmark-runner (>=1.0.363, <=1.0.441), build-magic (>=0.5.1rc1, <=0.5.1) +3 more potentially affected by CVE-2026-44405 via paramiko (2.10.1)

paramiko PYPI version 2.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - benchmark-runner =1.0.363, =0.5.1rc1, =1.0.0, =1.9.1, =1.9.3 Source cves: CVE-2026-44405 Source advisory: OSV:PYSEC-2026-2858...

pyp2spec is Vulnerable to Code Injection

Impactpyp2spec was writing PyPI package metadata e.g. the summary field into the generated spec file without escaping RPM macro directives. When a packager then runs rpmbuild, those directives get evaluated, so a malicious package can execute arbitrary commands on the build machine.The macro...

PYSEC-2026-3003 pyp2spec is Vulnerable to Code Injection

Impact pyp2spec was writing PyPI package metadata e.g. the summary field into the generated spec file without escaping RPM macro directives. When a packager then runs rpmbuild, those directives get evaluated, so a malicious package can execute arbitrary commands on the build machine. The macro...

Improper S3 ownership verification in Bedrock AgentCore Starter Toolkit

SummaryAn issue has been identified in the Bedrock AgentCore Starter Toolkit versions prior to v0.1.13 that may allow a remote actor to inject code during the build process, leading to code execution in the AgentCore Runtime. ImpactA remote actor could inject code during the build process, leadin...

CVE-2026-40469

Integer overflow vulnerability has been found in "builtin.c" program file of gawk dosub routine. This issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It affects 32-bit builds of gawk in versions 5.4.0 and below...