174022 matches found
CVE-2026-12436 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-G6CJ-PR64-35W5 vulnerabilities
Vulnerabilities for packages: superset, mitmproxy, in-toto, airflow, semgrep, datadog-agent, ggshield, kserve, py3-cassandra-medusa, k8s-sidecar, dask-kubernetes, mycli, open-webui, kubeflow-volumes-web-app...
CVE-2026-14341 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-94P8-87FF-W336 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-16729 vulnerabilities
Vulnerabilities for packages: prism, langfuse, npm, renovate, code-server, vitess, pulumi...
CVE-2026-15157 vulnerabilities
Vulnerabilities for packages: prism, langfuse, npm, renovate, code-server, vitess, pulumi...
GHSA-JR45-8VMC-QM54 vulnerabilities
Vulnerabilities for packages: vitess, langfuse, code-server, renovate...
CVE-2026-16728 vulnerabilities
Vulnerabilities for packages: prism, langfuse, npm, renovate, code-server, vitess, pulumi...
CVE-2026-14643 vulnerabilities
Vulnerabilities for packages: vitess, langfuse, code-server, renovate...
GHSA-M8RV-5G2X-5CG5 vulnerabilities
Vulnerabilities for packages: prism, langfuse, npm, renovate, code-server, vitess, pulumi...
GHSA-V3R7-H72X-CJCM vulnerabilities
Vulnerabilities for packages: prism, langfuse, npm, renovate, code-server, vitess, pulumi...
GHSA-4CWX-7WF7-3272 vulnerabilities
Vulnerabilities for packages: vitess, langfuse, code-server, renovate...
CVE-2026-13697 vulnerabilities
Vulnerabilities for packages: vitess, langfuse, code-server, renovate...
CVE-2026-47781
PDM is a Python package and dependency manager. In versions up to and including 2.26.9, PDM automatically loads project-local plugins from a .pdm-plugins directory during initialization, allowing an attacker-controlled file in an untrusted repository checkout to execute arbitrary Python code befo...
python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files
A flaw was found in Pillow, a Python imaging library. When processing a specially crafted font file, the library's font compilation function does not adequately check for excessive memory allocation. This oversight allows a remote attacker to trigger an unreasonable consumption of system memory,...
python-pillow: Pillow: Denial of Service via crafted PCF font data
A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing specially crafted PCF font data. This data, when processed, can lead to excessive memory allocation because the library does not properly check for decompression bombs. The primar...
aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()
A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python. An attacker could exploit this vulnerability by providing untrusted input to the CookieJar.load function. This could potentially lead to arbitrary code execution, allowing the attacker to run malicio...
CVE-2026-47764
pdm is a Python package and dependency manager supporting the latest PEP standards. Versions prior to 2.27.0 are vulnerable to path traversal through writetofs. InstallDestination.writetofs in src/pdm/installers/installers.py overrides the base class to add symlink/hardlink support but replaces t...
CVE-2026-47763
pdm is a Python package and dependency manager supporting the latest PEP standards. In versions prior to 2.27.0, pdm writes several project-local state or configuration files without symlink protection. If a malicious repository places those files as symlinks, local PDM operations can overwrite t...
