CVE-2026-69235

Esri Portal for ArcGIS versions 11.5 and prior contain a stored cross-site scripting (XSS) vulnerability that allows a remote, privileged attacker to inject malicious code, potentially leading to arbitrary code execution in a victim's browser. The CVSS 3.1 score is 6.1 (Medium) with a scope chang...

EUVD-2026-64160

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious code that could potentially execute arbitrary in a victim’s browser. Users working with ArcGIS Enterprise 11.1, 11.3, and 11.5 are...

EUVD-2026-64083

JSONata is a JSON query and transformation language. Prior to 1.8.8 and 2.2.1, the src/jsonata.js environment.lookup function used a bypassable hasOwnProperty check. Crafted expressions could use $hasOwnProperty, $spread, $string, prototype access, and $constructor to reach the object prototype a...

CVE-2026-77414

JSONata (a JSON query and transformation language) is vulnerable to arbitrary code execution in versions prior to 1.8.8 and 2.2.1 . The root cause is a bypassable hasOwnProperty check in the environment.lookup function of src/jsonata.js. An attacker can craft expressions chaining $hasOwnProperty,...

CVE-2026-77414 JSONata: Arbitrary Code Execution via crafted JSONata expressions

JSONata is a JSON query and transformation language. Prior to 1.8.8 and 2.2.1, the src/jsonata.js environment.lookup function used a bypassable hasOwnProperty check. Crafted expressions could use $hasOwnProperty, $spread, $string, prototype access, and $constructor to reach the object prototype a...

EUVD-2026-64158

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, administratively privileged attacker to inject malicious code that could potentially execute arbitrary in a victim’s browser. Users working with ArcGIS Enterprise 11.1, 11.3, an...

CVE-2026-69230

A stored cross-site scripting (XSS) vulnerability in Esri Portal for ArcGIS versions 11.5 and prior allows a remote, administratively privileged attacker to inject malicious code that executes in a victim's browser. The CVSS v3.1 score is 5.5 (Medium) , reflecting high privileges required, change...

EUVD-2026-64155

JSONata is a JSON query and transformation language. Prior to 1.8.8 and 2.2.0, the src/functions.js lookup function lacked an Object.prototype.hasOwnProperty check and allowed crafted expressions to access inherited prototype members. An attacker able to supply an expression could use inherited...

CVE-2026-77413

JSONata (a JSON query and transformation language) is vulnerable to arbitrary code execution prior to versions 1.8.8 and 2.2.0 . The root cause is a missing Object.prototype.hasOwnProperty check in the src/functions.js lookup function, which allows crafted expressions to access inherited prototyp...

CVE-2026-77413 JSONata: Arbitrary Code Execution via crafted JSONata expressions

JSONata is a JSON query and transformation language. Prior to 1.8.8 and 2.2.0, the src/functions.js lookup function lacked an Object.prototype.hasOwnProperty check and allowed crafted expressions to access inherited prototype members. An attacker able to supply an expression could use inherited...

EUVD-2026-64146

Xinference is an inference API for running open-source, speech, and multimodal models. In 2.5.0 and earlier, Xinference passes attacker-influenced Llama3 tool-call output to eval in xinference/model/llm/toolparsers/llama3toolparser.py and xinference/model/llm/utils.py. Requests to...

CVE-2026-61539 Xinference: Remote code execution via unsafe `eval()` in Llama3 tool-call parsing

Xinference is an inference API for running open-source, speech, and multimodal models. In 2.5.0 and earlier, Xinference passes attacker-influenced Llama3 tool-call output to eval in xinference/model/llm/toolparsers/llama3toolparser.py and xinference/model/llm/utils.py. Requests to...

CVE-2026-61539

Xinference (an inference API for open-source, speech, and multimodal models) versions 2.5.0 and earlier are vulnerable to remote code execution via unsafe use of Python's eval() in Llama3 tool-call parsing. An unauthenticated remote attacker can craft a prompt sent to /v1/chat/completions with a ...

CVE-2026-18309

A flaw was found in GIMP. This vulnerability allows a remote attacker to execute arbitrary code on affected installations of GIMP. This occurs due to an integer overflow during the parsing of APNG Animated Portable Network Graphics files, caused by a lack of proper validation of user-supplied dat...

CVE-2026-18308

A flaw was found in GIMP. This vulnerability allows remote attackers to execute arbitrary code on affected installations. User interaction is required, as the target must open a malicious TIF Tagged Image File Format file or visit a malicious page. The issue stems from improper validation of...

CVE-2026-18307

A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. Successful exploitation can lead to arbitrary...

CVE-2026-18306

A flaw was found in GIMP. This vulnerability, an integer overflow within the parsing of SGI Silicon Graphics Image files, allows a remote attacker to execute arbitrary code. Exploitation requires user interaction, where the target must open a specially crafted malicious SGI file. Successful...

CVE-2026-18305

A flaw was found in GIMP, an image manipulation program. This vulnerability allows a remote attacker to execute arbitrary code on an affected system. Exploitation requires user interaction, where the target must open a specially crafted TIF Tagged Image File Format file. The flaw occurs during TI...

CVE-2026-18304

A flaw was found in GIMP. This vulnerability allows a remote attacker to execute arbitrary code by tricking a user into opening a specially crafted TIF file. The issue arises from improper validation of user-supplied data during TIF file parsing, which can lead to an integer overflow before memor...

CVE-2026-18303

A flaw was found in GIMP. This vulnerability, a stack-based buffer overflow in the TIF file parsing component, allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. The issue stems from insufficient...