AlmaLinux 9.6 [TuxCare] Security Update: emacs / emacs-common / emacs-devel / emacs-filesystem / emacs-lucid / etc (ALMALINUX9.6:CLSA-2026:1793305644)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793305644 advisory. - GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents ...

Apple Containerization security vulnerability

A security vulnerability exists in Apple Containerization versions prior to 1.6.0 and Apple Containerization versions prior to 0.52.1. This vulnerability arises when an attacker controls the registry, image, or network path; they can then provide arbitrary image contents via digest retrieval,...

PT-2026-129232

An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content in response to a pull by digest, so that a user runs an image other than the one they pinned. The fix compares the returned digest to the pinned digest and fails the pull on a...

CVE-2026-16889: Apereo Foundation openEQUELLA: In openEQUELLA before 2026.1, the pre-login notice image upload endpoint (PUT /api/preloginnotice/image/{name}) does…

In openEQUELLA before 2026.1, the pre-login notice image upload endpoint PUT /api/preloginnotice/image/name does not validate the type of uploaded files and serves them with a Content-Type derived from the supplied filename. A user holding the EDITSYSTEMSETTINGS permission can upload an HTML file...

CVE-2026-113695: BMC BMC IT Service Management Suite: Reflected cross-site scripting in the SmartIT inline-image attachment feature of BMC IT Service Management Suite…

Reflected cross-site scripting in the SmartIT inline-image attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to inject script content into HTML responses viewed by another user...

WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Playlist and Image Blocks

Description WordPress does not properly sanitise user-controlled block attributes in the Playlist and Image blocks in some cases, which could allow users with contributor-level access and above to perform Stored Cross-Site Scripting attacks. This also affects the Gutenberg plugin...

openEQUELLA arbitrary file upload vulnerability

Versions of openEQUELLA prior to 2026.1 contain an arbitrary file upload vulnerability. This vulnerability arises because the image upload endpoint PUT /api/preloginnotice/image/name is not validated for file types prior to login; the Content-Type is set based on the filename. Users with...

ALSA-2026:92639 Important: python-pillow security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Exploit for Unchecked Return Value in Google Brotli

CVE-2026-111497: pinned WordPress image RCE PoC This source-o...

CVE-2026-118537

A vulnerability was found in a2ui up to 0.10.4. This vulnerability affects unknown code of the file src/v09/basiccatalog/components/Image.js of the component Image Player/Video Player/Audio Player. Performing a manipulation of the argument url results in improper input validation. The attack may ...

CVE-2025-12543-Fix-for-Wildfly

WildFly 11.0.0.Final Base Image — CVE-2025-12543 Patch Overview This repository provides a Docker base image built on WildFly 11.0.0.Final with a backported fix for CVE-2025-12543 , a critical Host header validation vulnerability in Undertow. The image is intended to be provided to colleagues as ...

CVE-2026-118537

The a2ui software versions up to 0.10.4 are affected by a vulnerability in the Image Player/Video Player/Audio Player component. The flaw resides in the src/v0_9/basic_catalog/components/Image.js file, where a manipulation of the url argument leads to improper input validation . This issue can be...

CVE-2026-118537 a2ui Image Player/Video Player/Audio Player Image.js input validation

A vulnerability was found in a2ui up to 0.10.4. This vulnerability affects unknown code of the file src/v09/basiccatalog/components/Image.js of the component Image Player/Video Player/Audio Player. Performing a manipulation of the argument url results in improper input validation. The attack may ...

CVE-2026-118537

A vulnerability was found in a2ui up to 0.10.4. This vulnerability affects unknown code of the file src/v09/basiccatalog/components/Image.js of the component Image Player/Video Player/Audio Player. Performing a manipulation of the argument url results in improper input validation. The attack may ...

EUVD-2026-112506

Blombooru is a self-hosted personal booru for organizing and tagging private image collections. Prior to 1.40.0, the administrator-only GET /proxy-image endpoint, exposed as /api/booru-import/proxy-image, accepts a url query parameter and fetches it server-side without meaningful destination...

CVE-2026-57448 Blombooru: administrator image-proxy server-side request forgery

Blombooru is a self-hosted personal booru for organizing and tagging private image collections. Prior to 1.40.0, the administrator-only GET /proxy-image endpoint, exposed as /api/booru-import/proxy-image, accepts a url query parameter and fetches it server-side without meaningful destination...

CVE-2026-57448

Blombooru is a self-hosted personal booru for organizing and tagging private image collections. Prior to 1.40.0, the administrator-only "GET /proxy-image" endpoint, exposed as "/api/booru-import/proxy-image", accepts a "url" query parameter and fetches it server-side without meaningful destinatio...

CVE-2026-57448 Blombooru: administrator image-proxy server-side request forgery

Blombooru is a self-hosted personal booru for organizing and tagging private image collections. Prior to 1.40.0, the administrator-only GET /proxy-image endpoint, exposed as /api/booru-import/proxy-image, accepts a url query parameter and fetches it server-side without meaningful destination...

GHSA-GQ5Q-89C7-VHVX vLLM DeepSeek-OCR image processing vulnerable to denial of service

Summary Any vLLM deployment serving a model of the DeepSeek-OCR family — deepseek-ai/DeepSeek-OCR, deepseek-ai/DeepSeek-OCR-2, or baidu/Unlimited-OCR whose UnlimitedOCRForCausalLM subclasses DeepseekOCRForCausalLM — can be killed by a single unauthenticated chat request carrying an ordinary,...

vLLM DeepSeek-OCR image processing vulnerable to denial of service

Summary Any vLLM deployment serving a model of the DeepSeek-OCR family — deepseek-ai/DeepSeek-OCR, deepseek-ai/DeepSeek-OCR-2, or baidu/Unlimited-OCR whose UnlimitedOCRForCausalLM subclasses DeepseekOCRForCausalLM — can be killed by a single unauthenticated chat request carrying an ordinary,...