ammico-lavis (1.0.2.3), autodistill-albef (0.1.0) +2 more potentially affected by CVE-2026-9856 via transformers (4.25.0)

transformers PYPI version 4.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ammico-lavis 1.0.2.3 - autodistill-albef 0.1.0 - autodistill-blip =0.1.0, =0.1.3 - visionscript 0.0.2 Source cves: CVE-2026-9856 Source...

ammico-lavis (1.0.2.3), autodistill-albef (0.1.0) +2 more potentially affected by CVE-2026-9856 via transformers (4.25.0)

transformers PYPI version 4.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ammico-lavis 1.0.2.3 - autodistill-albef 0.1.0 - autodistill-blip =0.1.0, =0.1.3 - visionscript 0.0.2 Source cves: CVE-2026-9856 Source...

blip-alpha (>=0.0.3, <=0.0.19), blip-gw (>=1.0.0, <=1.0.6) +7 more potentially affected by CVE-2023-41334 via astropy (4.0.1.post1)

astropy PYPI version 4.0.1.post1 is affected by a known vulnerability. The following packages have a transitive dependency on astropy and may be impacted: - blip-alpha =0.0.3, =1.0.0, =0.1.0, =0.0.1, =0.17.4, =1.8.1, =1.0.0, =1.0.1 Source cves: CVE-2023-41334 Source advisory: OSV:PYSEC-2026-1199...

ammico-lavis (1.0.2.3), autodistill-albef (0.1.0) +2 more potentially affected by CVE-2026-5241 via transformers (4.25.0)

transformers PYPI version 4.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ammico-lavis 1.0.2.3 - autodistill-albef 0.1.0 - autodistill-blip =0.1.0, =0.1.3 - visionscript 0.0.2 Source cves: CVE-2026-5241 Source...

ammico-lavis (1.0.2.3), autodistill-albef (0.1.0) +2 more potentially affected by CVE-2026-5241 via transformers (4.25.0)

transformers PYPI version 4.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ammico-lavis 1.0.2.3 - autodistill-albef 0.1.0 - autodistill-blip =0.1.0, =0.1.3 - visionscript 0.0.2 Source cves: CVE-2026-5241 Source...

ammico-lavis (1.0.2.3), autodistill-albef (0.1.0) +2 more potentially affected by CVE-2026-4372 via transformers (4.25.0)

transformers PYPI version 4.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ammico-lavis 1.0.2.3 - autodistill-albef 0.1.0 - autodistill-blip =0.1.0, =0.1.3 - visionscript 0.0.2 Source cves: CVE-2026-4372 Source...

ammico-lavis (1.0.2.3), autodistill-albef (0.1.0) +2 more potentially affected by CVE-2026-4372 via transformers (4.25.0)

transformers PYPI version 4.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ammico-lavis 1.0.2.3 - autodistill-albef 0.1.0 - autodistill-blip =0.1.0, =0.1.3 - visionscript 0.0.2 Source cves: CVE-2026-4372 Source...

ammico-lavis (1.0.2.3), autodistill-albef (0.1.0) +2 more potentially affected by CVE-2026-1839 via transformers (4.25.0)

transformers PYPI version 4.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ammico-lavis 1.0.2.3 - autodistill-albef 0.1.0 - autodistill-blip =0.1.0, =0.1.3 - visionscript 0.0.2 Source cves: CVE-2026-1839 Source...

ammico-lavis (1.0.2.3), autodistill-albef (0.1.0) +2 more potentially affected by CVE-2026-1839 via transformers (4.25.0)

transformers PYPI version 4.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ammico-lavis 1.0.2.3 - autodistill-albef 0.1.0 - autodistill-blip =0.1.0, =0.1.3 - visionscript 0.0.2 Source cves: CVE-2026-1839 Source...

OSV-2026-86 Security exception in java.base/java.util.Arrays.copyOfRange

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=476431399 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOfRange org.apache.poi.util.IOUtils.safelyClone org.apache.poi.ddf.EscherBlipRecord.setPictureData...

ammico-lavis (1.0.2.3), autodistill-albef (0.1.0) +2 more potentially affected by CVE-2025-14929 via transformers (4.25.0)

transformers PYPI version 4.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ammico-lavis 1.0.2.3 - autodistill-albef 0.1.0 - autodistill-blip =0.1.0, =0.1.3 - visionscript 0.0.2 Source cves: CVE-2025-14929 Sourc...

EUVD-2020-18498

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2020-25866

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 3.2.0 to 3.2.6 and 3.0.0 to 3.0.13, the BLIP protocol dissector has a NULL pointer dereference because a buffer was sized for compressed not...

SUSE CVE-2020-25866

In Wireshark 3.2.0 to 3.2.6 and 3.0.0 to 3.0.13, the BLIP protocol dissector has a NULL pointer dereference because a buffer was sized for compressed not uncompressed messages. This was addressed in epan/dissectors/packet-blip.c by allowing reasonable compression ratios and rejecting ZIP bombs...

Wireshark BLIP Protocol DoS

The vulnerability of the BLIP protocol analyzer in Wireshark is related to pointer assignment errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

SUSE SLED15 / SLES15 Security Update : wireshark (SUSE-SU-2020:3166-1)

This update for wireshark fixes the following issues : Update to wireshark 3.2.7 : - CVE-2020-25863: MIME Multipart dissector crash bsc1176908 - CVE-2020-25862: TCP dissector crash bsc1176909 - CVE-2020-25866: BLIP dissector crash bsc1176910 - CVE-2020-17498: Kafka dissector crash bsc1175204 Note...

openSUSE Security Update : wireshark (openSUSE-2020-1882)

This update for wireshark fixes the following issues : - Update to wireshark 3.2.7 : - CVE-2020-25863: MIME Multipart dissector crash bsc1176908 - CVE-2020-25862: TCP dissector crash bsc1176909 - CVE-2020-25866: BLIP dissector crash bsc1176910 - CVE-2020-17498: Kafka dissector crash bsc1175204 Th...

Security update for wireshark (moderate)

openSUSE Security Update: Security update for wireshark Announcement ID: openSUSE-SU-2020:1878-1 Rating: moderate References: 1175204 1176908 1176909 1176910 Cross-References: CVE-2020-17498 CVE-2020-25862 CVE-2020-25863 CVE-2020-25866 Affected Products: openSUSE Leap 15.1 An update that fixes fo...

MGASA-2020-0384 Updated wireshark packages fix security vulnerabilities

The TCP dissector could crash CVE-2020-25862. The MIME Multipart dissector could crash CVE-2020-25863. The BLIP dissector could crash CVE-2020-25866...

Updated wireshark packages fix security vulnerabilities

The TCP dissector could crash CVE-2020-25862. The MIME Multipart dissector could crash CVE-2020-25863. The BLIP dissector could crash CVE-2020-25866...