1657 matches found
CVE-2026-45664
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would allow resulting in excessive resource use...
CVE-2026-45664
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would allow resulting in excessive resource use...
CVE-2026-45664: Uncontrolled Resource Consumption
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would allow resulting in excessive resource use...
Embedded Malicious Code
Overview @evolvconsulting/evolv-coder-lite is a light-weight meta-prompting, context engineering, and spec-driven development system for Claude Code, OpenCode, Gemini CLI, Kilo, Codex, Copilot, Cursor, Windsurf, and more. Affected versions of this package are vulnerable to Embedded Malicious Code...
CVE-2026-10175
A security flaw has been discovered in Aider-AI Aider 0.86.3. Affected by this vulnerability is the function editorcoder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. Remote exploitation of the attack is possible. The exploit has bee...
Aider is vulnerable to Code Injection via editor_coder.run function
A security flaw has been discovered in Aider-AI Aider 0.86.3.dev. Affected by this vulnerability is the function editorcoder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. Remote exploitation of the attack is possible. The exploit has...
GHSA-7W7M-V5VP-W699 Aider is vulnerable to Code Injection via editor_coder.run function
A security flaw has been discovered in Aider-AI Aider 0.86.3.dev. Affected by this vulnerability is the function editorcoder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. Remote exploitation of the attack is possible. The exploit has...
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Overview aider-chat is an Aider is AI pair programming in your terminal Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' via the editorcoder.run function in the Architect Mode component. An attacke...
CVE-2026-10175
Affected software : Aider-AI Aider 0.86.3, Architect Mode. Vulnerable component : editor_coder.run in auth.py. Vulnerability : input manipulation enables code injection. Impact : remote execution possible over network; CVSS indicates MEDIUM with low confidentiality/integrity/availability impact. ...
CVE-2026-10175 Aider-AI Aider Architect Mode auth.py editor_coder.run code injection
A security flaw has been discovered in Aider-AI Aider 0.86.3. Affected by this vulnerability is the function editorcoder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. Remote exploitation of the attack is possible. The exploit has bee...
CVE-2026-10175
A security flaw has been discovered in Aider-AI Aider 0.86.3. Affected by this vulnerability is the function editorcoder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. Remote exploitation of the attack is possible. The exploit has bee...
CVE-2026-10175 Aider-AI Aider Architect Mode auth.py editor_coder.run code injection
A security flaw has been discovered in Aider-AI Aider 0.86.3. Affected by this vulnerability is the function editorcoder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. Remote exploitation of the attack is possible. The exploit has bee...
CVE-2026-10175 Aider-AI Aider Architect Mode auth.py editor_coder.run code injection
A security flaw has been discovered in Aider-AI Aider 0.86.3. Affected by this vulnerability is the function editorcoder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. Remote exploitation of the attack is possible. The exploit has bee...
Aider code injection vulnerability
Aider is an open-source terminal AI pair programming tool developed by Aider AI. Version 0.86.3 of Aider contains a code injection vulnerability. This vulnerability arises from the operation editorcoder.run in the Architect Mode component, allowing for code injection. Attackers can launch attacks...
graphicsmagick:coder_MP4_fuzzer: Heap-use-after-free in slice_segment_header::operator=
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6318659349053440 Project: graphicsmagick Fuzzing Engine: honggfuzz Fuzz Target: coderMP4fuzzer Job Type: honggfuzzasangraphicsmagick Platform Id: linux Crash Type: Heap-use-after-free READ 4...
Linux Distros Unpatched Vulnerability : CVE-2026-45664
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, because of a missing...
graphicsmagick:coder_HEIF_fuzzer: Container-overflow in bool vvdec::DecLibRecon::ctuTask<false>
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=4661297856970752 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderHEIFfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type: Container-overflow WRITE 4...
GHSA-M7CR-M3PV-HGRP vulnerabilities
Vulnerabilities for packages: external-secrets-operator, tfsec, wolfictl, cloudbeat-fips, gomplate-fips, gitlab-rails-ce-fips, kubescape, xeol, external-secrets-operator-fips, mapotf, zarf, cloudbeat, jfrog-cli, apko-fips, act, rancher-fleet, src-fingerprint, teleport, nuclei, chainloop-cli-fips,...
CVE-2026-45570 vulnerabilities
Vulnerabilities for packages: external-secrets-operator, tfsec, wolfictl, cloudbeat-fips, gomplate-fips, gitlab-rails-ce-fips, kubescape, xeol, external-secrets-operator-fips, mapotf, zarf, cloudbeat, jfrog-cli, apko-fips, act, rancher-fleet, src-fingerprint, teleport, nuclei, chainloop-cli-fips,...
CVE-2026-45571 vulnerabilities
Vulnerabilities for packages: external-secrets-operator, tfsec, wolfictl, cloudbeat-fips, gomplate-fips, gitlab-rails-ce-fips, kubescape, xeol, external-secrets-operator-fips, mapotf, zarf, cloudbeat, jfrog-cli, apko-fips, act, rancher-fleet, src-fingerprint, teleport, nuclei, chainloop-cli-fips,...