210771 matches found
python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files
A flaw was found in Pillow, a Python imaging library. When processing a specially crafted font file, the library's font compilation function does not adequately check for excessive memory allocation. This oversight allows a remote attacker to trigger an unreasonable consumption of system memory,...
ROOT-APP-PYPI-CVE-2025-69228 CVE-2025-69228 in aiohttp - Patched by Root
Root has patched CVE-2025-69228 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-54279 CVE-2026-54279 in aiohttp - Patched by Root
Root has patched CVE-2026-54279 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-54274 CVE-2026-54274 in aiohttp - Patched by Root
Root has patched CVE-2026-54274 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
MINI-CP45-MGMJ-5M2W
Bulletin has no description...
MINI-J668-XGFG-62G6
Bulletin has no description...
MINI-4823-MJ8P-656R
Bulletin has no description...
MINI-R24F-FGGX-HMCX
Bulletin has no description...
MINI-6HHW-WW2X-GH6W
Bulletin has no description...
MINI-CJR3-JJ73-C6MM
Bulletin has no description...
MAL-2026-11709 Malicious code in @or-sdk/library-types-v1 (npm)
npm/@or-sdk/library-types-v1 is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
MAL-2026-11640 Malicious code in @onereach/si-list (npm)
npm/@onereach/si-list is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished b...
Malicious code in @or-sdk/library (npm)
npm/@or-sdk/library is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by...
DEBIAN-CVE-2026-18401
The non-blocking asynchronous JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in StreamReadConstraints default: 1000 characters. An attacker able to submit JSON to an application that uses the async parser API can supply a number token of arbitrary length,...
ROOT-APP-NPM-CVE-2021-3795 CVE-2021-3795 in semver-regex - Patched by Root
Root has patched CVE-2021-3795 in the semver-regex package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2023-26133 CVE-2023-26133 in progressbar.js - Patched by Root
Root has patched CVE-2023-26133 in the progressbar.js package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2022-24999 CVE-2022-24999 in qs - Patched by Root
Root has patched CVE-2022-24999 in the qs package for Root:npm. Multiple fixed versions available...
MINI-32FH-7MRV-2F94
Bulletin has no description...