PT-2026-118460

Fat Free CRM before 0.26.0 contains an insecure direct object reference vulnerability that allows authenticated users to modify or delete other users' comments because CommentsControllerupdate and destroy use an unscoped Comment.find without authorization checks. Attackers can send PUT or DELETE...

PT-2026-120323

Summary With html: true, markdown-it takes quadratic time to parse repeated unterminated HTML constructs inside a paragraph. This affects HTML comments , ?, , and . When the terminator is absent, matching fails. Parsing eventually reaches the next opener and scans an overlapping suffix again...

PT-2026-118669

Name of the Vulnerable Software and Affected Versions X2000R version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 Description An arbitrary file write issue exists in the boa formUploadFile functionality. An authenticated attacker can send a specially crafted HTTP request to write files to the system,...

PT-2026-120151

Name of the Vulnerable Software and Affected Versions @modelcontextprotocol/server versions 2.0.0 through 2.2.0 Description An MCP server accessed over HTTP may deliver responses and notifications from one client to another. This occurs when clients share a single stateless transport, McpServer...

PT-2026-120307

Summary A link reference definition whose label or title is never closed is On² in markdown-it 15.0.2 with default options. Continuation lines are pulled lazily with str += lineContent in src/rules block/reference.ts, and the subsequent charCodeAt and slice calls flatten the V8 cons-string, copyi...

Linux Distros Unpatched Vulnerability : CVE-2026-112401

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. From 5.4.0 until 13.0.0, Pillow performs quadratic copying while parsing GIF comments. GifImageFile.seek repeatedly appends...

CVE-2022-47952

Suggested description lxc-user-nic in lxc through 5.0.1 is installed setuid root, and may allow local users to infer whether any file exists, even within a protected directory tree, because "Failed to open" often indicates that a file does not exist, whereas "does not refer to a network namespace...

curl:curl_fuzzer_proto_ws: Heap-buffer-overflow in SHA256_Update_thunk

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5102160812244992 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzerprotows Job Type: libfuzzerasancurl Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x7a2289c2c801...

DEBIAN-CVE-2026-112891

Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow performs quadratic copying when saving a GIF with a long comment. getglobalheader repeatedly copies portions of comment data while assembling the global header, including comments retained from an untrusted input image. An attack...

CVE-2026-112891

Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow performs quadratic copying when saving a GIF with a long comment. getglobalheader repeatedly copies portions of comment data while assembling the global header, including comments retained from an untrusted input image. An attack...

DEBIAN-CVE-2026-112401

Pillow is a Python imaging library. From 5.4.0 until 13.0.0, Pillow performs quadratic copying while parsing GIF comments. GifImageFile.seek repeatedly appends immutable bytes for comment sub-blocks and multiple comment extensions, and frame zero is parsed during Image.open. An attacker can submi...

CVE-2026-112401

Pillow is a Python imaging library. From 5.4.0 until 13.0.0, Pillow performs quadratic copying while parsing GIF comments. GifImageFile.seek repeatedly appends immutable bytes for comment sub-blocks and multiple comment extensions, and frame zero is parsed during Image.open. An attacker can submi...

CVE-2026-112891 Pillow: Quadratic GIF comment copying during save

Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow performs quadratic copying when saving a GIF with a long comment. getglobalheader repeatedly copies portions of comment data while assembling the global header, including comments retained from an untrusted input image. An attack...

CVE-2026-112891 Pillow: Quadratic GIF comment copying during save

Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow performs quadratic copying when saving a GIF with a long comment. getglobalheader repeatedly copies portions of comment data while assembling the global header, including comments retained from an untrusted input image. An attack...

CVE-2026-112891

The Pillow Python imaging library (versions 9.2.0 through 13.0.0 ) is vulnerable to a quadratic copying issue when saving a GIF file containing a long comment. The root cause is located in the _get_global_header() function, which repeatedly copies portions of comment data from an untrusted input ...

CVE-2026-112891

Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow performs quadratic copying when saving a GIF with a long comment. getglobalheader repeatedly copies portions of comment data while assembling the global header, including comments retained from an untrusted input image. An attack...

CVE-2026-112891 Pillow: Quadratic GIF comment copying during save

Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow performs quadratic copying when saving a GIF with a long comment. getglobalheader repeatedly copies portions of comment data while assembling the global header, including comments retained from an untrusted input image. An attack...

CVE-2026-112891

Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow performs quadratic copying when saving a GIF with a long comment. getglobalheader repeatedly copies portions of comment data while assembling the global header, including comments retained from an untrusted input image. An attack...

CVE-2026-112401

Pillow is a Python imaging library. From 5.4.0 until 13.0.0, Pillow performs quadratic copying while parsing GIF comments. GifImageFile.seek repeatedly appends immutable bytes for comment sub-blocks and multiple comment extensions, and frame zero is parsed during Image.open. An attacker can submi...

CVE-2026-112401

The Pillow Python imaging library is vulnerable to a Denial of Service (DoS) condition due to inefficient algorithmic complexity (CWE-407) during GIF comment parsing. Specifically, in versions 5.4.0 through 12.9.0 , the GifImageFile._seek() method performs quadratic copying by repeatedly appendin...