CVE-2026-62297

The ag-psd JavaScript library for Photoshop Document files is vulnerable to a denial of service (DoS) due to uncontrolled memory allocation. The psdReader.js implementation's readPsd() function sizes off-heap typed arrays using width, height, channels, depth, and per-layer rectangles before valid...

CVE-2026-62979

The jack application (a tool for sharing Radarr/Sonarr media libraries) is vulnerable to sensitive information exposure in versions prior to 0.1.0 . The root cause is that middleware/handle-error.ts serializes raw FetchError objects into HTTP responses. Because the extras field in lib/errors/Fetc...

EUVD-2026-114471

jack lets users share media libraries through their Radarr/Sonarr stack, peer-to-peer. Prior to 0.1.0, middleware/handle-error.ts serializes raw FetchError objects into HTTP responses. lib/servers/base.ts attaches outbound request headers on upstream non-success responses and schema-validation...

CVE-2026-62979 jack: upstream error responses expose backend and peer credentials

jack lets users share media libraries through their Radarr/Sonarr stack, peer-to-peer. Prior to 0.1.0, middleware/handle-error.ts serializes raw FetchError objects into HTTP responses. lib/servers/base.ts attaches outbound request headers on upstream non-success responses and schema-validation...

CVE-2026-62979 jack: upstream error responses expose backend and peer credentials

jack lets users share media libraries through their Radarr/Sonarr stack, peer-to-peer. Prior to 0.1.0, middleware/handle-error.ts serializes raw FetchError objects into HTTP responses. lib/servers/base.ts attaches outbound request headers on upstream non-success responses and schema-validation...

CVE-2026-62979

jack lets users share media libraries through their Radarr/Sonarr stack, peer-to-peer. Prior to 0.1.0, "middleware/handle-error.ts" serializes raw "FetchError" objects into HTTP responses. "lib/servers/base.ts" attaches outbound request headers on upstream non-success responses and...

CVE-2026-62979 jack: upstream error responses expose backend and peer credentials

jack lets users share media libraries through their Radarr/Sonarr stack, peer-to-peer. Prior to 0.1.0, middleware/handle-error.ts serializes raw FetchError objects into HTTP responses. lib/servers/base.ts attaches outbound request headers on upstream non-success responses and schema-validation...

CVE-2026-62967

Prior to version 0.8.0 , ZTNET (a ZeroTier web UI) is vulnerable to a privilege bypass in the src/pages/api/auth/user/invalidateUser.ts handler. The root cause is a missing authorization check where getServerSession verifies only the existence of a session but fails to validate that the session.u...

CVE-2026-62967 ZTNET privilege bypass: any user can deactivate arbitrary accounts via /api/auth/user/invalidateUser

ZTNET is a ZeroTier web UI for private controllers with multiuser and organization support. Prior to 0.8.0, any authenticated low-privilege user can permanently deactivate another account, including an administrator, through POST /api/auth/user/invalidateUser. In...

CVE-2026-62967 ZTNET privilege bypass: any user can deactivate arbitrary accounts via /api/auth/user/invalidateUser

ZTNET is a ZeroTier web UI for private controllers with multiuser and organization support. Prior to 0.8.0, any authenticated low-privilege user can permanently deactivate another account, including an administrator, through POST /api/auth/user/invalidateUser. In...

CVE-2026-62967

ZTNET is a ZeroTier web UI for private controllers with multiuser and organization support. Prior to 0.8.0, any authenticated low-privilege user can permanently deactivate another account, including an administrator, through "POST /api/auth/user/invalidateUser". In...

EUVD-2026-114470

ZTNET is a ZeroTier web UI for private controllers with multiuser and organization support. Prior to 0.8.0, any authenticated low-privilege user can permanently deactivate another account, including an administrator, through POST /api/auth/user/invalidateUser. In...

Deserializer

Deserializer About the Project Deserializer is an advanced Abstract Syntax Tree AST static analysis engine designed to identify insecure object reconstruction and state persistence sinks across the Python ecosystem, with strong focus on AI, LLM, Robotics, Data Science, Machine Learning and Deep...

CVE-2026-62966

ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. Prior to version 3.11.2, the multipart parser in "src/WebRequest.cpp" frees "itemBuffer" and sets it to NULL when "BOUNDARYORDATA" matches the closing boundary of a file part, before...

CVE-2026-62966 ESPAsyncWebServer multipart parser has null-pointer write

ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. Prior to version 3.11.2, the multipart parser in src/WebRequest.cpp frees itemBuffer and sets it to NULL when BOUNDARYORDATA matches the closing boundary of a file part, before confirming...

CVE-2026-62966 ESPAsyncWebServer multipart parser has null-pointer write

ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. Prior to version 3.11.2, the multipart parser in src/WebRequest.cpp frees itemBuffer and sets it to NULL when BOUNDARYORDATA matches the closing boundary of a file part, before confirming...

CVE-2026-62966

The ESPAsyncWebServer library (for ESP32, ESP8266, RP2040, and RP2350) contains a null pointer write vulnerability in the multipart parser within src/WebRequest.cpp prior to version 3.11.2 . The flaw occurs because _itemBuffer is freed and set to NULL when a file part boundary is matched, but _it...

EUVD-2026-114469

ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. Prior to version 3.11.2, the multipart parser in src/WebRequest.cpp frees itemBuffer and sets it to NULL when BOUNDARYORDATA matches the closing boundary of a file part, before confirming...

CVE-2026-100380

CVE-2026-100380: Reflected XSS in language-validation errors Reporter: Marco Paciaroni BomboBombone. Wikibase included unescaped language-validation error text in the SetLabel page. Rejected input could be returned as executable HTML before the request reached the label-saving operation. Affected...

agentic-workflow-injection

Agentic workflow injection: fixtures and a coverage comparison Reproducible vulnerable/fixed fixtures for the class of bug published as CVE-2026-44246 nnU-Net, agentic workflow injection, CVSS 7.2, CWE-1427, plus the measured output of three detectors against them. It exists because there was...