USN-8649-1 libheif vulnerabilities

It was discovered that libheif had an integer underflow in the Fraction constructor when a clap transform was applied twice. An attacker could possibly use this issue to cause libheif to crash, resulting in a denial of service. CVE-2026-62289 It was discovered that libheif had an out-of-bounds re...

USN-8649-1: libheif vulnerabilities

It was discovered that libheif had an integer underflow in the Fraction constructor when a clap transform was applied twice. An attacker could possibly use this issue to cause libheif to crash, resulting in a denial of service. CVE-2026-62289 It was discovered that libheif had an out-of-bounds re...

CVE-2026-62289 libheif: Integer underflow in Fraction constructor via double clap transform application

libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted HEIF or AVIF file containing a clean aperture box can reduce an image dimension to zero and crash or corrupt tiling results when heifimagehandlegetimagetilinghandle, 1, &tiling is called...

CVE-2026-62289

libheif ≤1.23.0 applies clean aperture transformation twice via process_image_transformations_on_tiling(), causing integer underflow in Box_clap::left_rounded(0) that constructs Fraction(0xFFFFFFFF, 2). Debug builds abort on assertion; release builds produce corrupt crops. Fixed in 1.23.1; Debian...

RUSTSEC-2026-0214 gumdrop is unmaintained

The gumdrop crate is unmaintained, and all versions are affected. Recommended alternatives: - clap is the most popular by far - bpaf is a more lightweight alternative...

[SECURITY] Fedora 43 Update: rust-attribute-derive-0.10.5-1.fc43

Clap like parsing for attributes in proc-macros...

[SECURITY] Fedora 42 Update: rust-attribute-derive-macro-0.10.5-1.fc42

Clap for proc macro attributes...

[SECURITY] Fedora 42 Update: rust-attribute-derive-0.10.5-1.fc42

Clap like parsing for attributes in proc-macros...

[SECURITY] Fedora 41 Update: rust-attribute-derive-0.10.5-1.fc41

Clap like parsing for attributes in proc-macros...

EUVD-2025-3311

Malicious code in bioql PyPI...

CVE-2025-23647

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ariagle WP-Clap wp-clap allows Reflected XSS.This issue affects WP-Clap: from n/a through = 1.5...

CVE-2025-23647

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ariagle WP-Clap wp-clap allows Reflected XSS.This issue affects WP-Clap: from n/a through = 1.5...

CVE-2025-23647

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ariagle WP-Clap wp-clap allows Reflected XSS.This issue affects WP-Clap: from n/a through = 1.5...

CVE-2025-23647 WordPress WP-Clap plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ariagle WP-Clap wp-clap allows Reflected XSS.This issue affects WP-Clap: from n/a through = 1.5...

CVE-2025-23647

CVE-2025-23647 is a WordPress WP-Clap plugin vulnerability: an improper neutralization of input leading to Reflected XSS affecting WP-Clap versions up to 1.5. The CVE lists a CVSS v3.1 base score of 7.1 (HIGH) with Network attack vector, Low confidentiality/integrity/availability impacts, and use...

PT-2025-6992 · WordPress · Ariagle Wp-Clap

Name of the Vulnerable Software and Affected Versions: Ariagle WP-Clap versions 1.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

WordPress plugin WP-Clap 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

WordPress WP-Clap plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin WP-Clap versions = 1.5...

clap-clap.ocnk.net Cross Site Scripting vulnerability OBB-3810211

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

RUSTSEC-2022-0104 `structopt` is in maintenance mode

structopt has been in maintenance mode, with no new development planned, since at least February of 2022. The status of structopt is discussed in a pinned issue. Recommended alternative The structopt derive wrapper was incorporated into clap v3. There is a migration guideclap-migration for...