176651 matches found
python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files
A flaw was found in Pillow, a Python imaging library. When processing a specially crafted font file, the library's font compilation function does not adequately check for excessive memory allocation. This oversight allows a remote attacker to trigger an unreasonable consumption of system memory,...
CVE-2026-18446
fast-uri before 4.1.2, 3.1.5, and 2.4.4 requires a literal double forward slash to recognize a URI authority, so a reference that uses a backslash based introducer in place of it backslash backslash, forward slash backslash, or backslash forward slash is parsed with no authority and folds into th...
CVE-2026-64607
HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported Content-Encoding header value in the response message. Please note this defect does not affect HttpClient based on the async i/o...
CVE-2026-11770
A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean...
GHSA-MMJF-RQRV-855V vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap, promitor...
CVE-2026-59870 vulnerabilities
Vulnerabilities for packages: renovate...
GHSA-724G-MXRG-4QVM vulnerabilities
Vulnerabilities for packages: renovate...
CVE-2026-50527 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap, promitor...
GHSA-CP45-6Q6C-3772 vulnerabilities
Vulnerabilities for packages: openjdk-11-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9, openjdk-26-openj9, openjdk-25-openj9...
CVE-2026-16439 vulnerabilities
Vulnerabilities for packages: openjdk-11-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9, openjdk-26-openj9, openjdk-25-openj9...
GHSA-PW53-4WCC-WM6V vulnerabilities
Vulnerabilities for packages: openjdk-11-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9, openjdk-26-openj9, openjdk-25-openj9...
CVE-2026-59876 vulnerabilities
Vulnerabilities for packages: librechat...
GHSA-JFJ6-75FJ-8934 vulnerabilities
Vulnerabilities for packages: librechat...
GHSA-F88M-G3JW-G9CJ vulnerabilities
Vulnerabilities for packages: keep-fips, tileserver-gl-fips, tileserver-gl, langfuse, peerdb-ui, homepage, librechat, jitsucom-jitsu, keep, langfuse-fips...
GHSA-XJFQ-6RHW-XJ37 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-WQGP-6HGV-R9QF vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-WC2C-7F6V-VHF3 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-M5J7-35RX-PHQ8 vulnerabilities
Vulnerabilities for packages: firefox...