1168 matches found
CVE-2026-10175
Affected software : Aider-AI Aider 0.86.3, Architect Mode. Vulnerable component : editor_coder.run in auth.py. Vulnerability : input manipulation enables code injection. Impact : remote execution possible over network; CVSS indicates MEDIUM with low confidentiality/integrity/availability impact. ...
CVE-2026-10175 Aider-AI Aider Architect Mode auth.py editor_coder.run code injection
A security flaw has been discovered in Aider-AI Aider 0.86.3. Affected by this vulnerability is the function editorcoder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. Remote exploitation of the attack is possible. The exploit has bee...
Aider 代码注入漏洞
Aider is an open-source terminal AI pair programming tool developed by Aider AI. Version 0.86.3 of Aider contains a code injection vulnerability. This vulnerability arises from the operation editorcoder.run in the Architect Mode component, allowing for code injection. Attackers can launch attacks...
Linux Distros Unpatched Vulnerability : CVE-2026-45664
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, because of a missing...
GHSA-M7CR-M3PV-HGRP vulnerabilities
Vulnerabilities for packages: kubescape, act, apko, gitaly, xeol, grafana-alloy-fips, grafana-alloy, grafana, cloudbeat-fips, pulumi, steampipe, packer-fips, k9s, nemo, mapotf, amazon-ssm-agent-fips, flux-fips, rancher-fleet-fips, k9s-fips, coder-fips, upwind-agent, grafana-fips, kots,...
CVE-2026-45570 vulnerabilities
Vulnerabilities for packages: kubescape, act, apko, gitaly, xeol, grafana-alloy-fips, grafana-alloy, grafana, cloudbeat-fips, pulumi, steampipe, packer-fips, k9s, nemo, mapotf, amazon-ssm-agent-fips, flux-fips, rancher-fleet-fips, k9s-fips, coder-fips, upwind-agent, grafana-fips, kots,...
CVE-2026-45571 vulnerabilities
Vulnerabilities for packages: kubescape, act, apko, gitaly, xeol, grafana-alloy-fips, grafana-alloy, grafana, cloudbeat-fips, pulumi, steampipe, packer-fips, k9s, nemo, mapotf, amazon-ssm-agent-fips, flux-fips, rancher-fleet-fips, k9s-fips, coder-fips, upwind-agent, grafana-fips, kots,...
GHSA-CRHJ-59GH-8X96 vulnerabilities
Vulnerabilities for packages: kubescape, act, apko, gitaly, xeol, grafana-alloy-fips, grafana-alloy, grafana, cloudbeat-fips, pulumi, steampipe, packer-fips, k9s, nemo, mapotf, amazon-ssm-agent-fips, flux-fips, rancher-fleet-fips, k9s-fips, coder-fips, upwind-agent, grafana-fips, kots,...
GHSA-6X44-W3XG-HQQF Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft
Summary azureidentity.Validate verifies that the PKCS7 signer certificate chains to a trusted Azure CA but never verifies the PKCS7 signature itself. An attacker can embed a legitimate Azure certificate alongside arbitrary content e.g. "vmId":"" and the forged vmId will be accepted returning the...
ImageMagick: Policy Bypass in MNG coder could
Because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would allow resulting in excessive resource use...
JLSEC-2026-495 GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in `coders/jxl.c`,...
GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call...
Malicious code in dcchbot (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df79831d1b486c8ca704295b410cec7b66be85aa87c3244d97ff1e87f643183a The package performs multiple installer-hostile behaviors. 1 dcchbot/init.py auto-invokes run on import, which triggers interactive input prompts and...
Unity Linux 20.1060e / 20.1070e Security Update: ImageMagick (UTSA-2026-017538)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017538 advisory. A flaw was found in ImageMagick in coders/jp2.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form...
Unity Linux 20.1060e / 20.1070e Security Update: ImageMagick (UTSA-2026-017608)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017608 advisory. A flaw was found in ImageMagick in coders/bmp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form...
Unity Linux 20.1060e / 20.1070e Security Update: ImageMagick (UTSA-2026-017534)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017534 advisory. There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially crafted input file. Thes...
Unity Linux 20.1060e / 20.1070e Security Update: ImageMagick (UTSA-2026-017551)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017551 advisory. The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory in routine WritePALMImage because it needs to be offset by 256. This can cause a...
Maestro 0.15.4
Maestro is a cross-platform desktop app for orchestrating your fleet of AI agents and projects. It's a high-velocity solution for hackers who are juggling multiple projects in parallel. Designed for power users who live on the keyboard and rarely touch the mouse. Collaborate with AI to create...
CLSA-2026-1776179858 Fix of 5 CVEs
SECURITY UPDATE: fix vulnerability in MSL coder - debian/patches/CVE-2026-25988.patch: fix vulnerability in MSL coder - CVE-2026-25988 SECURITY UPDATE: fix path traversal via policy bypass - debian/patches/CVE-2026-25965.patch: fix path traversal via policy bypass - CVE-2026-25965 SECURITY UPDATE...
CLSA-2026-1777542570 Fix of 5 CVEs
SECURITY UPDATE: fix heap-based buffer overflow in VIFF coder - debian/patches/CVE-2026-33900.patch: fix heap-based buffer overflow in VIFF coder - CVE-2026-33900 SECURITY UPDATE: fix heap-based buffer overflow in SampleImage - debian/patches/CVE-2026-33905.patch: fix heap-based buffer overflow i...
TencentOS Server 2: ImageMagick (TSSA-2026:0256)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0256 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...