CVE-2026-10175 Aider-AI Aider Architect Mode auth.py editor_coder.run code injection

A security flaw has been discovered in Aider-AI Aider 0.86.3. Affected by this vulnerability is the function editorcoder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. Remote exploitation of the attack is possible. The exploit has bee...

CVE-2026-10175

A security flaw has been discovered in Aider-AI Aider 0.86.3. Affected by this vulnerability is the function editorcoder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. Remote exploitation of the attack is possible. The exploit has bee...

CVE-2026-10175

Affected software : Aider-AI Aider 0.86.3, Architect Mode. Vulnerable component : editor_coder.run in auth.py. Vulnerability : input manipulation enables code injection. Impact : remote execution possible over network; CVSS indicates MEDIUM with low confidentiality/integrity/availability impact. ...

CVE-2026-10175 Aider-AI Aider Architect Mode auth.py editor_coder.run code injection

A security flaw has been discovered in Aider-AI Aider 0.86.3. Affected by this vulnerability is the function editorcoder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. Remote exploitation of the attack is possible. The exploit has bee...

Aider 代码注入漏洞

Aider is an open-source terminal AI pair programming tool developed by Aider AI. Version 0.86.3 of Aider contains a code injection vulnerability. This vulnerability arises from the operation editorcoder.run in the Architect Mode component, allowing for code injection. Attackers can launch attacks...

Linux Distros Unpatched Vulnerability : CVE-2026-45664

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, because of a missing...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, nfpm, cerbos-fips, chainctl-fips, scorecard, trufflehog, coder, kyverno, xeol, external-secrets-operator, argo-cd-fips, chainloop-cli-fips, upwind-agent, packer, amazon-ssm-agent-fips, argo-events-fips, gitaly-fips, gitlab-runner, gitsign,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, nfpm, cerbos-fips, chainctl-fips, scorecard, trufflehog, coder, kyverno, xeol, external-secrets-operator, argo-cd-fips, chainloop-cli-fips, upwind-agent, packer, amazon-ssm-agent-fips, argo-events-fips, gitaly-fips, gitlab-runner, gitsign,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, nfpm, cerbos-fips, chainctl-fips, scorecard, trufflehog, coder, kyverno, xeol, external-secrets-operator, argo-cd-fips, chainloop-cli-fips, upwind-agent, packer, amazon-ssm-agent-fips, argo-events-fips, gitaly-fips, gitlab-runner, gitsign,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, nfpm, cerbos-fips, chainctl-fips, scorecard, trufflehog, coder, kyverno, xeol, external-secrets-operator, argo-cd-fips, chainloop-cli-fips, upwind-agent, packer, amazon-ssm-agent-fips, argo-events-fips, gitaly-fips, gitlab-runner, gitsign,...

Astra Linux – Vulnerability in imagemagick

There are several memory leaks in the MIFF coder located at /coders/miff.c, due to improper image depth values. These leaks can be triggered by a specially crafted input file. They could potentially affect the availability of the application or cause a denial of service. It was initially reported...

Astra Linux – Vulnerability in imagemagick

A issue was discovered with ImageMagick 7.1.0-4, involving division by zero in the ReadEnhMetaFile function of coders/emf.c...

Astra Linux – Vulnerability in imagemagick

A flaw was discovered in ImageMagick’s coders, specifically in the webp.c file. An attacker who submits a crafted file processed by ImageMagick could trigger undefined behavior, including division by zero in mathematical operations. The most significant threat of this vulnerability is its impact ...

Astra Linux – Vulnerability in imagemagick

ImageMagick is free software available as a ready-to-run binary distribution or as source code that you can use, copy, modify, and distribute in both open and proprietary applications. In affected versions, Postscript files may be read and written when specifically excluded by a module policy in...

GHSA-6X44-W3XG-HQQF Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft

Summary azureidentity.Validate verifies that the PKCS7 signer certificate chains to a trusted Azure CA but never verifies the PKCS7 signature itself. An attacker can embed a legitimate Azure certificate alongside arbitrary content e.g. "vmId":"" and the forged vmId will be accepted returning the...

ImageMagick: Policy Bypass in MNG coder could

Because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would allow resulting in excessive resource use...

JLSEC-2026-495 GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in `coders/jxl.c`,...

GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call...

Malicious code in dcchbot (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df79831d1b486c8ca704295b410cec7b66be85aa87c3244d97ff1e87f643183a The package performs multiple installer-hostile behaviors. 1 dcchbot/init.py auto-invokes run on import, which triggers interactive input prompts and...

Unity Linux 20.1060e / 20.1070e Security Update: ImageMagick (UTSA-2026-017551)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017551 advisory. The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory in routine WritePALMImage because it needs to be offset by 256. This can cause a...

Unity Linux 20.1060e / 20.1070e Security Update: ImageMagick (UTSA-2026-017608)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017608 advisory. A flaw was found in ImageMagick in coders/bmp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form...