PT-2026-41688

Name of the Vulnerable Software and Affected Versions CI4MS versions prior to 0.31.9.0 Description Stored Cross-Site Scripting XSS exists due to a failure in the html purify validation rule used to sanitize blog post bodies. The rule relies on by-reference mutation ?string &$str, but the underlyi...

PT-2026-70612

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper input validation allows an unauthorized attacker to execute arbitrary code over a network, which can lead to a full system compromise. Recommendations At the...

CVE-2026-6341: Incorrect Authorization

Mattermost Plugins versions =11.5 11.1.5 10.13.11 11.3.4.0 fail to have API-level checks on which groups the user can create issues or attach comments to which allows a user that is member of multiple groups to create issues to a locked group via direct API requests. Mattermost Advisory ID:...

PT-2026-41691

Name of the Vulnerable Software and Affected Versions mcp-security versions prior to 0.1.9 Description The mcp-security framework fails to implement mandatory Server-Side Request Forgery SSRF mitigations—a flaw where an attacker can induce the server to make requests to an unintended location—as...

PT-2026-41685

Name of the Vulnerable Software and Affected Versions Faraday versions 2.0.0 through 2.14.1 Description Faraday is an HTTP client library abstraction layer. A flaw exists where protocol-relative host override is possible when the request target is passed as a URI object instead of a String to the...

PT-2026-41669

Name of the Vulnerable Software and Affected Versions SGLangs multimodal generation runtime affected versions not specified Description An unauthenticated path traversal flaw allows an attacker to write arbitrary files to any location where the server process has write permissions. This is achiev...

PT-2026-41668

Name of the Vulnerable Software and Affected Versions SGLangs affected versions not specified Description The multimodal generation runtime scheduler's ROUTER socket binds to 0.0.0.0 by default. It contains a sink that calls the pickle.loads function on incoming messages, which can lead to remote...

PT-2026-41646

Mattermost Plugins versions =11.5 11.1.5 10.13.11 11.3.4.0 fail to have API-level checks on which groups the user can create issues or attach comments to which allows a user that is member of multiple groups to create issues to a locked group via direct API requests. Mattermost Advisory ID:...

PT-2026-41695

Name of the Vulnerable Software and Affected Versions Statamic versions prior to 5.73.22 Statamic versions prior to 6.18.1 Description The Glide image proxy contains a flaw where URL validation can be bypassed using an IP representation that is not normalized before the public-IP check. This allo...

libvips:vips_fuzzer: Heap-buffer-overflow in vips_hist_local_generate

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=6121452385665024 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: vipsfuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libavif:[email protected]: Heap-buffer-overflow in aom_stop_encode

Project: https://github.com/AOMediaCodec/libavif.git Detailed Report: https://oss-fuzz.com/testcase?key=5288434888671232 Project: libavif Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzerasanlibavif Platform Id: linux Crash...

ghostscript:gs_device_tiffsep1_fuzzer: Crash in image_simple_expand

Detailed Report: https://oss-fuzz.com/testcase?key=5185787787542528 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicetiffsep1fuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x794a1935585f Crash State: imagesimpleexpand...

openbabel:fuzz_convert: Global-buffer-overflow in OpenBabel::OBMol::ConvertZeroBonds

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=4790758942244864 Project: openbabel Fuzzing Engine: libFuzzer Fuzz Target: fuzzconvert Job Type: libfuzzerasanopenbabel Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address...

freeradius:fuzzer_json: Heap-buffer-overflow in fr_utf8_char

Detailed Report: https://oss-fuzz.com/testcase?key=6558953457909760 Project: freeradius Fuzzing Engine: libFuzzer Fuzz Target: fuzzerjson Job Type: libfuzzerasanfreeradius Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x750350ce0153 Crash State: frutf8char frjpathparse...

gdal:s101_fuzzer: Heap-buffer-overflow in DDFField::InitializeParts

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6507413682585600 Project: gdal Fuzzing Engine: afl Fuzz Target: s101fuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7c23efeecf7c Crash State:...

wolftpm:fuzz_asn_cert: Null-dereference READ in ubsan_GetStackTrace

Project: https://github.com/wolfSSL/wolfTPM.git Detailed Report: https://oss-fuzz.com/testcase?key=6447765076115456 Project: wolftpm Fuzzing Engine: libFuzzer Fuzz Target: fuzzasncert Job Type: libfuzzerubsanwolftpm Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x00000000000...

gpac:fuzz_scene: Heap-use-after-free in gf_sg_reset

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6445442706767872 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzscene Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x74d0b7de0100 Crash...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement

Detailed Report: https://oss-fuzz.com/testcase?key=6218596761272320 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

wolftpm:fuzz_asn_cert: Heap-buffer-overflow in TPM2_ASN_DecodeRsaPubKey

Project: https://github.com/wolfSSL/wolfTPM.git Detailed Report: https://oss-fuzz.com/testcase?key=6202677062336512 Project: wolftpm Fuzzing Engine: libFuzzer Fuzz Target: fuzzasncert Job Type: libfuzzerasanwolftpm Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

poppler:pdf_fuzzer: Use-of-uninitialized-value in Splash::compositeBackground

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=5851544489623552 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target:...