PT-2026-122083

Agentfront mcp-from-openapi from 2.2.0 before 2.9.0 contains a server-side request forgery vulnerability that allows attackers to bypass the ssrf.blockedHosts denylist using trailing-dot hostnames. Attackers who control an OpenAPI spec URL or redirect target can append a root dot to a blocked...

PT-2026-121941

i18next-http-backend 4.0.2 contains an incomplete fix in interpolateUrl that allows attackers to redirect translation requests by supplying an ns value starting with a slash. Attackers controlling the namespace value can form a protocol-relative URL in loadPath or addPath templates to load...

PT-2026-122081

hydra-ray-launcher 1.1.0.dev1 before 1.2.2 and 1.4.0.dev4 before 1.4.0rc2 contains an arbitrary module import vulnerability via the ray pkg version OmegaConf resolver passing input to importlib.import module. Attackers controlling configuration values or command-line overrides can supply a ray pk...

PT-2026-122082

mcp-from-openapi from 2.5.0 before 2.9.0 contains a credential exposure vulnerability that allows attackers to capture Authorization and Cookie headers because safeFetch forwards them on cross-origin redirects. Attackers controlling a spec host or abusing an open redirect can redirect fromURL spe...

PT-2026-121839

Name of the Vulnerable Software and Affected Versions AgenticSeek versions prior to commit 409840c Description Remote code execution is possible because the llm server/app.py file hardcodes Flask debug mode while binding to all interfaces. An attacker who can access the server port and obtain the...

PT-2026-121940

@pdfme/common from 5.5.10 before 6.2.6 contains a server-side request forgery vulnerability that allows attackers to bypass the isUrlSafeToFetch denylist in getB64BasePdf. Attackers can supply basePdf URLs using IPv4-mapped IPv6, ::, NAT64 or localhost alias hostnames to read loopback, internal o...

PT-2026-122190

ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occurs in get domains in gdhcp/client.c. It copies a fixed NS MAXDNAME 1025 bytes from a DHCPv6 DOMAIN LIST option 24 value into a 1026-byte stack buffer dns name regardless of the actual option length, then...

UBUNTU-CVE-2026-113730

OGNL is an Object Graph Navigation Library for Java. Prior to 3.4.13,...

UBUNTU-CVE-2026-101356

Incorrect object recycling and re-use vulnerability in Apache Tomcat a...

UBUNTU-CVE-2026-114138

Django REST framework is a toolkit for building Web APIs. Prior to 3.1...

CVE-2026-114137

Django REST framework is a toolkit for building Web APIs. From 3.12.0...

UBUNTU-CVE-2026-114137

Django REST framework is a toolkit for building Web APIs. From 3.12.0...

CVE-2026-114136

Django REST framework is a toolkit for building Web APIs. From 3.6.4 u...

UBUNTU-CVE-2026-114135

Jupyter Server is the backend for Jupyter web applications. From 2.0.0...

PT-2026-122435

Impact Fallow reads the Jest and Vitest configs of the repository that it analyzes. A Jest projects entry or a Vitest test.projects entry can name a path. Fallow followed such an entry to a config file and read that file, also when the file was outside the project root. These forms reached outsid...

PT-2026-122419

Summary On the multi-threaded runtime, there is a race condition between Interval::poll tick and the runtime's time driver. This affects Interval only. Sleep and Timeout are not affected. Details In Tokio v1.54.0, a race condition between tokio::time::Interval::poll tick including .tick.await and...

PT-2026-122085

serialize-javascript from 7.0.1 before 7.1.3 contains a cross-site scripting vulnerability that allows attackers to break out of HTML script elements by ending serialized function source text with an unescaped /script. Attackers controlling a function's source via a spoofed toString can combine...

PT-2026-122224

Name of the Vulnerable Software and Affected Versions Twisted versions prior to 26.10.0rc1 Description An incomplete header-value validation in the Twisted HTTP server allows a bare carriage return CR or line feed LF in a header value to hide a subsequent header from the parser. The function...

PT-2026-122231

Name of the Vulnerable Software and Affected Versions langgraph-checkpoint-postgres versions prior to 3.1.3 langgraph-checkpoint-sqlite versions prior to 3.1.2 Description PostgresStore, AsyncPostgresStore, SqliteStore, and AsyncSqliteStore flatten namespace labels using ".".joinnamespace, which...

PT-2026-122232

The LangGraph CLI is the official command-line interface for LangGraph. From 0.4.15 until 0.4.32, langgraph deploy --verbose passes a temporary registry push token on standard input to docker login --password-stdin, but the CLI subprocess helper prints command input in verbose mode. Anyone who ca...