CVE-2026-4672 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2025-14562 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2026-12436 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-94P8-87FF-W336 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2026-14341 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-G6CJ-PR64-35W5 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, dask-kubernetes, kserve, mitmproxy, semgrep, mycli, ggshield, airflow, k8s-sidecar, in-toto, datadog-agent...

CVE-2026-15157 vulnerabilities

Vulnerabilities for packages: npm, vitess, pulumi, langfuse, prism, code-server...

GHSA-JR45-8VMC-QM54 vulnerabilities

Vulnerabilities for packages: langfuse, code-server, vitess, renovate...

CVE-2026-16729 vulnerabilities

Vulnerabilities for packages: npm, vitess, pulumi, langfuse, prism, code-server...

CVE-2026-16728 vulnerabilities

Vulnerabilities for packages: npm, vitess, pulumi, langfuse, prism, code-server...

GHSA-M8RV-5G2X-5CG5 vulnerabilities

Vulnerabilities for packages: npm, vitess, pulumi, langfuse, prism, code-server...

CVE-2026-14643 vulnerabilities

Vulnerabilities for packages: langfuse, code-server, vitess, renovate...

GHSA-V3R7-H72X-CJCM vulnerabilities

Vulnerabilities for packages: npm, vitess, pulumi, langfuse, prism, code-server...

GHSA-4CWX-7WF7-3272 vulnerabilities

Vulnerabilities for packages: langfuse, code-server, vitess, renovate...

CVE-2026-13697 vulnerabilities

Vulnerabilities for packages: langfuse, code-server, vitess, renovate...

CVE-2026-47781

PDM is a Python package and dependency manager. In versions up to and including 2.26.9, PDM automatically loads project-local plugins from a .pdm-plugins directory during initialization, allowing an attacker-controlled file in an untrusted repository checkout to execute arbitrary Python code befo...

python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files

A flaw was found in Pillow, a Python imaging library. When processing a specially crafted font file, the library's font compilation function does not adequately check for excessive memory allocation. This oversight allows a remote attacker to trigger an unreasonable consumption of system memory,...

python-pillow: Pillow: Denial of Service via crafted PCF font data

A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing specially crafted PCF font data. This data, when processed, can lead to excessive memory allocation because the library does not properly check for decompression bombs. The primar...

aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python. An attacker could exploit this vulnerability by providing untrusted input to the CookieJar.load function. This could potentially lead to arbitrary code execution, allowing the attacker to run malicio...

CVE-2026-47764

pdm is a Python package and dependency manager supporting the latest PEP standards. Versions prior to 2.27.0 are vulnerable to path traversal through writetofs. InstallDestination.writetofs in src/pdm/installers/installers.py overrides the base class to add symlink/hardlink support but replaces t...