PT-2026-118041

Vikunja: API token scopes bypassed via task expand parameter comments, reactions, time entry counts in code.vikunja.io/api. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positi...

UBUNTU-CVE-2026-98786

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: guard dcsink dereferences in MST mode validation dmdpmstisportsupportmode reads aconnector-dcsink-dsccaps... for the DSC branch-throughput check, and getconvfrlbw's HDMI-PCON FRL-bandwidth path reads...

PT-2026-117673

Name of the Vulnerable Software and Affected Versions Pillow versions 9.2.0 through 12.11.0 Description When saving a GIF with a long comment, the library performs quadratic copying. The get global header function repeatedly copies portions of comment data while assembling the global header, whic...

Red Hat: CVE-2026-112401: pillow: pillow: Denial of Service via crafted GIF comments

Pillow is a Python imaging library. From 5.4.0 until 13.0.0, Pillow performs quadratic copying while parsing GIF comments. GifImageFile.seek repeatedly appends immutable bytes for comment sub-blocks and multiple comment extensions, and frame zero is parsed during Image.open. An attacker can submi...

CVE-2026-109431: Missing Authorization

Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains a missing authorization check vulnerability in engine-rest task sub-resources that allows authenticated attackers with no permission grants to access task comments and attachments by calling singular read and delete endpoints that...

CVE-2026-111766: Uncontrolled Resource Consumption

markdown-it is a Markdown parser. Prior to 14.3.3 and 15.0.3, when the html option or commonmark preset is enabled and the constructs occur inside a paragraph, attacker-controlled Markdown containing repeated unterminated inline HTML comments, processing instructions, declarations, or CDATA...

PT-2026-118247

Name of the Vulnerable Software and Affected Versions Go versions prior to 1.26.10 Go versions prior to 1.27.3 webpki-roots versions prior to 1.0.10 Description Eight intermediate CA certificates from eMudhra were compromised due to a flawed key-generation ceremony using a FIPS 140-2 Level 3 HSM....

PT-2026-117669

Name of the Vulnerable Software and Affected Versions Pillow versions prior to 13.0.0 Description The JPEG decoder in Pillow fails to verify the actual output width and component count after a scaling request is made. When an application uses draft or thumbnail to request downscaling of an 8-bit...

PT-2026-117656

Name of the Vulnerable Software and Affected Versions Pillow versions prior to 13.0.0 Description The FlashPix JPEG-tile decoder in the Pillow imaging library contains a flaw where decoded scanlines can be written beyond the allocated tile buffer. This occurs because FlashPix FPX JPEG decoding...

AgenticVulHunter: Bringing Local Agentic Vulnerability Hunting to Your Terminal

Finding vulnerabilities early, before they can affect the production system, is important for reducing the risk of any software attacks. However, detecting vulnerabilities during secure code review is still difficult because the vulnerable code logic may depend on lines found across different...

PT-2026-117659

Name of the Vulnerable Software and Affected Versions Pillow versions 5.4.0 through 12.11.0 Description Pillow performs quadratic copying when parsing GIF comments. The GifImageFile. seek function repeatedly appends immutable bytes for comment sub-blocks and multiple comment extensions, and frame...

openSUSE 16 Security Update : bcel (openSUSE-SU-2026:22109-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22109-1 advisory. - CVE-2026-94114: Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser bsc1284400. - CVE-2026-105111: Class2HTML...

CVE-2026-98786

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: guard dcsink dereferences in MST mode validation dmdpmstisportsupportmode reads aconnector-dcsink-dsccaps... for the DSC branch-throughput check, and getconvfrlbw's HDMI-PCON FRL-bandwidth path reads...

PT-2026-117251

The Subscribe to Comments WordPress plugin before 2.3.3 does not sanitise newline characters from a notification sender-name setting before using it in e-mail headers, allowing users with Author-level access and above to inject arbitrary e-mail headers, such as a hidden Bcc, and to spoof the send...

PT-2026-117634

Name of the Vulnerable Software and Affected Versions markdown-it versions prior to 14.3.3 markdown-it versions prior to 15.0.3 Description When the html option or commonmark preset is enabled, the parser can be forced into quadratic processing time when encountering repeated unterminated inline...

PT-2026-117447

Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains a missing authorization check vulnerability in engine-rest task sub-resources that allows authenticated attackers with no permission grants to access task comments and attachments by calling singular read and delete endpoints that...

PT-2026-120331

This update for sequoia-sq fixes the following issues: Changes in sequoia-sq: - Use crypto-openssl also for tests Update to version 1.5.0: tool: Release v1.5.0. tool: Fix link to README. tool: Set a version for the sqz dependency. Enable optimizations when building rust-crypto crates. Update NEWS...

PT-2026-117317

vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Unauthenticated attackers could access comments associated with non-public content through public user profiles. Users are recommended to upgrade to version 2.0.3, which fixes the issue...

PT-2026-117686

Name of the Vulnerable Software and Affected Versions Pillow versions 2.6.0 through 12.11.0 Description Argument injection occurs when invoking Ghostscript for EPS input. The EpsImagePlugin.Ghostscript function passes a caller-controlled input filename after the -f flag without converting it to a...

PT-2026-117647

Name of the Vulnerable Software and Affected Versions Pillow versions 2.0.0 through 12.9.9 Description A heap buffer overflow and stale-heap disclosure exist in the tiffWriteProc function when saving compressed TIFF data through libtiff to a target lacking a usable fileno, such as BytesIO. The...