GHSA-82FW-GWWQ-J7X9 Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock

Summary @vitest/mocker registers a redirect mock's target path without validating it against the dev server's file-serving allowlist. An attacker who can reach the dev server's WebSocket can register a redirect mock pointing outside the project root; when the mocked module is requested, the...

GHSA-H4X7-GW46-3WM6 HTTPX2: Multipart part header injection via unvalidated file Content-Type and custom headers

Summary HTTPX2 serializes the per-file Content-Type and custom headers supplied through the files= tuple API directly into the multipart/form-data body without validating custom header names or values. An attacker who can influence upload metadata passed to HTTPX2 can use CR or LF characters to...

GHSA-4HHP-H66F-J5J7 vLLM: SSRF + arbitrary local file read in MiMoV2OmniMultiModalProcessor `_fetch_image` and audio loader bypass MediaConnector protections

Summary vllm/transformersutils/processors/mimov2omni.py — the multimodal processor for MiMoV2OmniForCausalLM — issues requests.get... directly on user-supplied image and audio URL strings and Image.open... on user-supplied local paths, without the SSRF / allowedlocalmediapath checks that...

EUVD-2026-60377

vLLM: SSRF + arbitrary local file read in MiMoV2OmniMultiModalProcessor fetchimage and audio loader bypass MediaConnector protections...

vLLM: SSRF + arbitrary local file read in MiMoV2OmniMultiModalProcessor `_fetch_image` and audio loader bypass MediaConnector protections

Summary vllm/transformersutils/processors/mimov2omni.py — the multimodal processor for MiMoV2OmniForCausalLM — issues requests.get... directly on user-supplied image and audio URL strings and Image.open... on user-supplied local paths, without the SSRF / allowedlocalmediapath checks that...

EUVD-2026-69706

Laravel Excel writes exports outside the configured filesystem disk when given a caller-controlled path...

GHSA-C7R6-VX3H-W5G2 Laravel Excel writes exports outside the configured filesystem disk when given a caller-controlled path

Summary Excel::store resolved the destination path against the process working directory rather than the configured filesystem disk. When that path resolved to an existing file, the export was written straight to it with fopen, bypassing the disk entirely. An application that passes a...

Laravel Excel writes exports outside the configured filesystem disk when given a caller-controlled path

Summary Excel::store resolved the destination path against the process working directory rather than the configured filesystem disk. When that path resolved to an existing file, the export was written straight to it with fopen, bypassing the disk entirely. An application that passes a...

EUVD-2026-74115

Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-81984 Acrobat Reader | Use After Free (CWE-416)

Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-81984

Adobe Acrobat Reader is affected by a Use After Free (CWE-416) vulnerability that can lead to disclosure of sensitive memory . An attacker must get a victim to open a malicious file, and exploitation requires user interaction with a local attack vector . The CVSS 3.1 score is 5.5 (MEDIUM) with hi...

CVE-2026-81984 Acrobat Reader | Use After Free (CWE-416)

Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-81991 Acrobat Reader | Out-of-bounds Read (CWE-125)

Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-81991

Acrobat Reader is affected by an out-of-bounds read vulnerability (CWE-125) that could lead to disclosure of sensitive memory . Exploitation requires user interaction : a victim must open a malicious file. The CVSS 3.1 score is 5.5 (Medium) , reflecting a local attack vector with low complexity, ...

CVE-2026-81989 Acrobat Reader | Use After Free (CWE-416)

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-81991 Acrobat Reader | Out-of-bounds Read (CWE-125)

Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-81989 Acrobat Reader | Use After Free (CWE-416)

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-81989

Adobe Acrobat Reader is affected by a Use After Free (CWE-416) vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction , as the victim must open a malicious file. The CVSS 3.1 score is 7.8 (HIGH) with a local attack vect...

EUVD-2026-74112

Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-81980 Acrobat Reader | Out-of-bounds Write (CWE-787)

Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...