37710 matches found
EUVD-2025-32577
The HTMLSectionSplitter class in langchain-text-splitters version 0.3.8 is vulnerable to XML External Entity XXE attacks due to unsafe XSLT parsing. This vulnerability arises because the class allows the use of arbitrary XSLT stylesheets, which are parsed using lxml.etree.parse and lxml.etree.XSL...
USN-7803-1: poppler vulnerability
It was discovered that poppler incorrectly handled certain PDF files. If a user or automated system were tricked into opening a specially crafted document, a remote attacker could use this issue to cause poppler to crash, leading to a denial of service...
USN-7803-1 poppler vulnerability
It was discovered that poppler incorrectly handled certain PDF files. If a user or automated system were tricked into opening a specially crafted document, a remote attacker could use this issue to cause poppler to crash, leading to a denial of service...
EUVD-2025-32415
Not used...
EUVD-2025-32414
Not used...
EUVD-2025-32413
Not used...
EUVD-2025-32410
Not used...
EUVD-2025-32409
Not used...
EUVD-2025-32407
Not used...
EUVD-2025-32412
Not used...
EUVD-2025-32408
Not used...
EUVD-2025-32411
Not used...
[SECURITY] Fedora 42 Update: mupdf-1.26.3-4.fc42
MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...
EUVD-2025-32379
Two unauthenticated diagnostic endpoints allow arbitrary backend-initiated network connections to an attacker‑supplied destination. Both endpoints are exposed with permission = 'any', enabling unauthenticated SSRF for internal network scanning and service interaction. This issue affects...
EUVD-2025-32378
OpenSupports exposes an endpoint that allows the list of 'supervised users' for any account to be edited, but it does not validate whether the actor is the owner of that list. A Level 1 staff member can modify the supervision relationship of a third party the target user, who can then view the...
EUVD-2025-29386
Malicious code in bioql PyPI...
EUVD-2025-15386
Malicious code in bioql PyPI...
EUVD-2025-12675
Malicious code in bioql PyPI...