796181 matches found
GHSA-FWXR-J5W2-587M LiquidJS: ownPropertyOnly bypass for inherited array indices in first/last/join/reverse/slice/compact, `.first`/`.last`, negative index, and for-loop iteration
Summary LiquidJS’s ownPropertyOnly option is intended to prevent templates from reading inherited or prototype properties from scope data. With ownPropertyOnly: true, direct access such as: liquid a0 correctly blocks an inherited array index. However, the same inherited value is still disclosed...
EUVD-2026-93770
ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write...
ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write
Summary When decoding a tiled TIFF with fax compression T4/T6/MH, DecodeTilesChunky allocates each tile buffer from TileWidth ceilTileWidthbpp/8TileLength bytes but constructs the fax decompressor with frame.Width: TiffDecompressorsFactory ignores the isTiled/tileWidth/tileHeight parameters...
GHSA-V76P-62QX-WWQ2 ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write
Summary When decoding a tiled TIFF with fax compression T4/T6/MH, DecodeTilesChunky allocates each tile buffer from TileWidth ceilTileWidthbpp/8TileLength bytes but constructs the fax decompressor with frame.Width: TiffDecompressorsFactory ignores the isTiled/tileWidth/tileHeight parameters...
safety
!NOTE Приходите и присоединяйтесь к SafetyCLI. Мы нанимаем специалистов на различные позиции. Содержание Содержание Введение Ключевые возможности Начало работы GitHub Action Интерфейс командной строки 1. Установка 2. Вход или регистрация 3. Запуск первого сканирования Основные команды Соглашение...
ImageSharp: CCITT fax decompression (T4/Modified Huffman): unbounded WriteBits overflows strip buffer — heap OOB write in SixLabors.ImageSharp
Summary When decoding a fax-compressed strip TIFF Compression=3 / Group 3 1D, or Compression=2 / Modified Huffman, the CCITT decompressors write decoded runs through BitWriterUtils.WriteBits/WriteBit/WriteZeroBit, which advance and write bits via Unsafe.Add with read-modify-write semantics —...
EUVD-2026-93560
ImageSharp: CCITT fax decompression T4/Modified Huffman: unbounded WriteBits overflows strip buffer — heap OOB write in SixLabors.ImageSharp...
GHSA-JJ3Q-CWQJ-842R ImageSharp: CCITT fax decompression (T4/Modified Huffman): unbounded WriteBits overflows strip buffer — heap OOB write in SixLabors.ImageSharp
Summary When decoding a fax-compressed strip TIFF Compression=3 / Group 3 1D, or Compression=2 / Modified Huffman, the CCITT decompressors write decoded runs through BitWriterUtils.WriteBits/WriteBit/WriteZeroBit, which advance and write bits via Unsafe.Add with read-modify-write semantics —...
Twisted: IMAP wildcardToRegexp() ReDoS
Summary wildcardToRegexp in twisted/mail/imap4.py converts IMAP LIST/LSUB wildcard patterns to Python regular expressions. It substitutes the two IMAP wildcards → ?:.? and % → ?:?:^\/? but passes every other character through unchanged to re.compile. This means that an authenticated IMAP client...
GHSA-8PQF-F4M5-798G Twisted: IMAP wildcardToRegexp() ReDoS
Summary wildcardToRegexp in twisted/mail/imap4.py converts IMAP LIST/LSUB wildcard patterns to Python regular expressions. It substitutes the two IMAP wildcards → ?:.? and % → ?:?:^\/? but passes every other character through unchanged to re.compile. This means that an authenticated IMAP client...
EUVD-2026-93873
Twisted: IMAP wildcardToRegexp ReDoS...
EUVD-2026-92800
Langflow: IP Spoofing Bypass via X-Forwarded-For Allowing Remote Configuration Write...
GHSA-4F6C-2VVP-GW82 Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write
Description: Summary An IP spoofing vulnerability in the Model Context Protocol MCP configuration installation endpoint POST /api/v1/mcp/project/projectid/install allowed authenticated remote attackers to bypass the "local-only" access restriction. By sending a spoofed X-Forwarded-For: 127.0.0.1...
Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write
Description: Summary An IP spoofing vulnerability in the Model Context Protocol MCP configuration installation endpoint POST /api/v1/mcp/project/projectid/install allowed authenticated remote attackers to bypass the "local-only" access restriction. By sending a spoofed X-Forwarded-For: 127.0.0.1...
EUVD-2026-92772
Ghost: Authorization Bypass in Comments Feature...
Ghost: Authorization Bypass in Comments Feature
Impact An input validation issue allowed members to access comments they were not authorized to access. Vulnerable versions This vulnerability is present in Ghost from v5.9.0 up to v6.44.1. Patches v6.44.1 contains a fix for this issue. How to update For self-hosters using Docker, find Docker's...
NPM: Ghost: Authorization Bypass in Comments Feature
NPM: Ghost: Authorization Bypass in Comments Feature vulnerability discovered by ? in WordPress Npm ghost versions = 5.9.0, 6.44.1...
GHSA-6Q6J-F24J-P477 Ghost: Authorization Bypass in Comments Feature
Impact An input validation issue allowed members to access comments they were not authorized to access. Vulnerable versions This vulnerability is present in Ghost from v5.9.0 up to v6.44.1. Patches v6.44.1 contains a fix for this issue. How to update For self-hosters using Docker, find Docker's...
Ghost: Server-Side Request Forgery in Webhook Trigger
Impact An SSRF vulnerability in the webhooks feature allowed staff users to probe internal hosts from the Ghost server. Vulnerable versions This vulnerability is present in Ghost from v1.18.0 up to v6.27.0. Patches v6.27.0 contains a fix for this issue. How to update For self-hosters using Docker...