CVE-2026-57448 Blombooru: administrator image-proxy server-side request forgery

Blombooru is a self-hosted personal booru for organizing and tagging private image collections. Prior to 1.40.0, the administrator-only GET /proxy-image endpoint, exposed as /api/booru-import/proxy-image, accepts a url query parameter and fetches it server-side without meaningful destination...

GHSA-GQ5Q-89C7-VHVX vLLM DeepSeek-OCR image processing vulnerable to denial of service

Summary Any vLLM deployment serving a model of the DeepSeek-OCR family — deepseek-ai/DeepSeek-OCR, deepseek-ai/DeepSeek-OCR-2, or baidu/Unlimited-OCR whose UnlimitedOCRForCausalLM subclasses DeepseekOCRForCausalLM — can be killed by a single unauthenticated chat request carrying an ordinary,...

vLLM DeepSeek-OCR image processing vulnerable to denial of service

Summary Any vLLM deployment serving a model of the DeepSeek-OCR family — deepseek-ai/DeepSeek-OCR, deepseek-ai/DeepSeek-OCR-2, or baidu/Unlimited-OCR whose UnlimitedOCRForCausalLM subclasses DeepseekOCRForCausalLM — can be killed by a single unauthenticated chat request carrying an ordinary,...

babyvec (0.2.1), dnn-tts-torch (>=0.0.2, <=0.0.9) +2 more potentially affected by CVE-2026-112909 via filelock (3.15.3)

filelock PYPI version 3.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on filelock and may be impacted: - babyvec 0.2.1 - dnn-tts-torch =0.0.2, =0.5.0, =0.7.0 Source cves: CVE-2026-112909 Source advisory: OSV:GHSA-69HJ-F68J-2879...

CVE-2026-100704

A flaw was found in Kyverno. When evaluating image validation policies, the policy exception handler fails to restrict exemptions to specific designated images, applying the exception to all images within a matching resource instead. An authenticated user can exploit this vulnerability to bypass...

CLSA-2026-1793215035 TuxCare security update for spatie/image-optimizer (1 CVE)

TuxCare rebuilt spatie/image-optimizer to address 1 CVE. Fixed in 1.5.0-p1+tuxcare...

WordPress Core <= 7.1.3 - Author+ Stored Cross-Site Scripting via Image and Playlist Block Insertion

Author+ Stored Cross-Site Scripting via Image and Playlist Block Insertion vulnerability discovered by Ben Bidner in WordPress core versions = 7.1.3...

SUSE CVE-2026-115424

A flaw was found in the OpenShift client oc. When extracting container image layers with oc image extract, the application fails to properly sanitize symbolic and hard link targets pointing to absolute paths or to sibling directories of the extraction destination. An attacker who supplies a...

CVE-2026-118039

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external entity reference vulnerability in SVG image processing allows an unauthenticated attacker to read local files on the server via a crafted SVG image with a nested embedded SVG, when the image is...

CVE-2026-118039

Progress Telerik Document Processing Libraries versions prior to 2026.3.1027 are vulnerable to an XML external entity reference vulnerability in SVG image processing. An unauthenticated attacker can exploit this by providing a crafted SVG image containing a nested embedded SVG. If the library pro...

EUVD-2026-112035

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external entity reference vulnerability in SVG image processing allows an unauthenticated attacker to read local files on the server via a crafted SVG image with a nested embedded SVG, when the image is...

CVE-2026-118039 XML External Entity Reference in Telerik Document Processing Libraries SVG Image Processing

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external entity reference vulnerability in SVG image processing allows an unauthenticated attacker to read local files on the server via a crafted SVG image with a nested embedded SVG, when the image is...

RUSTSEC-2026-0433 Quadratic parsing of nested image wikilinks with `ENABLE_WIKILINKS`

With Options::ENABLEWIKILINKS, handlewikilink builds a wikilink's target from the raw text of its body: scanwikilinkpipe walks it looking for |, then contains'\0' and fromreplacenuls walk it again. Once a wikilink is created, disablealllinks only disables Link entries, so every enclosing ! stays...

Quadratic parsing of nested image wikilinks with `ENABLE_WIKILINKS`

With Options::ENABLEWIKILINKS, handlewikilink builds a wikilink's target from the raw text of its body: scanwikilinkpipe walks it looking for |, then contains'\0' and fromreplacenuls walk it again. Once a wikilink is created, disablealllinks only disables Link entries, so every enclosing ! stays...

CVE-2026-110185

The Bit Flows: AI Agent Automation & Integrations plugin for WordPress is vulnerable to Local File Inclusion (LFI) in all versions up to and including 1.31.0 . The vulnerability exists in the 'image' parameter (used by the ImageHelper node's mix tag). An unauthenticated attacker can include and e...

CVE-2026-110185 Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More <= 1.31.0 - Unauthenticated Local File Inclusion via 'webhook' and 'body' Parameters

The Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.31.0 via the 'image any body field referenced by the ImageHelper node's mix tag' parameter...

C97net qEngine CMS arbitrary file upload vulnerability

C97net qEngine CMS versions 6.0.0 and earlier, Kemana Directory versions 1.5.6 and earlier, and Cart Engine versions 3.0.0 and earlier contain an arbitrary file upload vulnerability. This vulnerability arises from unrestricted file uploads in the image management field; users with edit permission...

CVE-2026-57448: mrblomblo blombooru: Blombooru is a self-hosted personal booru for organizing and tagging private image collections

Blombooru is a self-hosted personal booru for organizing and tagging private image collections. Prior to 1.40.0, the administrator-only GET /proxy-image endpoint, exposed as /api/booru-import/proxy-image, accepts a url query parameter and fetches it server-side without meaningful destination...

Image Gallery Block – Showcase Photos in Stunning Responsive Grids < 2.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The Image Gallery Block – Showcase Photos in Stunning Responsive Grids plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.4.1. This is due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-118537: n/a a2ui: A vulnerability was found in a2ui up to 0.10.4

A vulnerability was found in a2ui up to 0.10.4. This vulnerability affects unknown code of the file src/v09/basiccatalog/components/Image.js of the component Image Player/Video Player/Audio Player. Performing a manipulation of the argument url results in improper input validation. The attack may ...