gradio-molgallery2d (1.1.0), gradio-molgallery3d (1.1.0) +2 more potentially affected by CVE-2024-8966 via gradio (4.8.0)

gradio PYPI version 4.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gradio-molgallery2d 1.1.0 - gradio-molgallery3d 1.1.0 - pytorchwildlife =1.0.1.1, =0.0.1, =0.0.2.dev240104122303 Source cves: CVE-2024-8966 Source...

gradio-molgallery2d (1.1.0), gradio-molgallery3d (1.1.0) +2 more potentially affected by CVE-2024-12217 via gradio (4.8.0)

gradio PYPI version 4.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gradio-molgallery2d 1.1.0 - gradio-molgallery3d 1.1.0 - pytorchwildlife =1.0.1.1, =0.0.1, =0.0.2.dev240104122303 Source cves: CVE-2024-12217 Source...

gradio-molgallery2d (1.1.0), gradio-molgallery3d (1.1.0) +2 more potentially affected by CVE-2026-49119 via gradio (4.8.0)

gradio PYPI version 4.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gradio-molgallery2d 1.1.0 - gradio-molgallery3d 1.1.0 - pytorchwildlife =1.0.1.1, =0.0.1, =0.0.2.dev240104122303 Source cves: CVE-2026-49119 Source...

gradio-molgallery2d (1.1.0), gradio-molgallery3d (1.1.0) +2 more potentially affected by CVE-2026-49119 via gradio (4.8.0)

gradio PYPI version 4.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gradio-molgallery2d 1.1.0 - gradio-molgallery3d 1.1.0 - pytorchwildlife =1.0.1.1, =0.0.1, =0.0.2.dev240104122303 Source cves: CVE-2026-49119 Source...

gradio-molgallery2d (1.1.0), gradio-molgallery3d (1.1.0) +2 more potentially affected by CVE-2026-10783 via gradio (4.8.0)

gradio PYPI version 4.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gradio-molgallery2d 1.1.0 - gradio-molgallery3d 1.1.0 - pytorchwildlife =1.0.1.1, =0.0.1, =0.0.2.dev240104122303 Source cves: CVE-2026-10783 Source...

gradio-molgallery2d (1.1.0), gradio-molgallery3d (1.1.0) +2 more potentially affected by CVE-2026-48545 via gradio (4.8.0)

gradio PYPI version 4.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gradio-molgallery2d 1.1.0 - gradio-molgallery3d 1.1.0 - pytorchwildlife =1.0.1.1, =0.0.1, =0.0.2.dev240104122303 Source cves: CVE-2026-48545 Source...

openjdk: Enhance Path Factories Redux (Oracle CPU 2026-04)

A flaw was found in openjdk. When compiling XPath expressions, the internal XML security manager is not properly initialized, failing to restrict external entity resolution. A remote attacker could exploit this vulnerability by supplying specially crafted XML input to trigger XML External Entity...

openjdk: Enhance key generation (Oracle CPU 2026-04)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0....

gradio-molgallery2d (1.1.0), gradio-molgallery3d (1.1.0) +2 more potentially affected by CVE-2026-28416 via gradio (4.8.0)

gradio PYPI version 4.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gradio-molgallery2d 1.1.0 - gradio-molgallery3d 1.1.0 - pytorchwildlife =1.0.1.1, =0.0.1, =0.0.2.dev240104122303 Source cves: CVE-2026-28416 Source...

gradio-molgallery2d (1.1.0), gradio-molgallery3d (1.1.0) +2 more potentially affected by CVE-2026-28415 via gradio (4.8.0)

gradio PYPI version 4.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gradio-molgallery2d 1.1.0 - gradio-molgallery3d 1.1.0 - pytorchwildlife =1.0.1.1, =0.0.1, =0.0.2.dev240104122303 Source cves: CVE-2026-28415 Source...

gradio-molgallery2d (1.1.0), gradio-molgallery3d (1.1.0) +2 more potentially affected by CVE-2026-28414 via gradio (4.8.0)

gradio PYPI version 4.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gradio-molgallery2d 1.1.0 - gradio-molgallery3d 1.1.0 - pytorchwildlife =1.0.1.1, =0.0.1, =0.0.2.dev240104122303 Source cves: CVE-2026-28414 Source...

gradio-molgallery2d (1.1.0), gradio-molgallery3d (1.1.0) +2 more potentially affected by CVE-2026-28414 via gradio (4.8.0)

gradio PYPI version 4.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gradio-molgallery2d 1.1.0 - gradio-molgallery3d 1.1.0 - pytorchwildlife =1.0.1.1, =0.0.1, =0.0.2.dev240104122303 Source cves: CVE-2026-28414 Source...

gradio-molgallery2d (1.1.0), gradio-molgallery3d (1.1.0) +2 more potentially affected by CVE-2026-28416 via gradio (4.8.0)

gradio PYPI version 4.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gradio-molgallery2d 1.1.0 - gradio-molgallery3d 1.1.0 - pytorchwildlife =1.0.1.1, =0.0.1, =0.0.2.dev240104122303 Source cves: CVE-2026-28416 Source...

gradio-molgallery2d (1.1.0), gradio-molgallery3d (1.1.0) +2 more potentially affected by CVE-2026-28415 via gradio (4.8.0)

gradio PYPI version 4.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gradio-molgallery2d 1.1.0 - gradio-molgallery3d 1.1.0 - pytorchwildlife =1.0.1.1, =0.0.1, =0.0.2.dev240104122303 Source cves: CVE-2026-28415 Source...

libvpx:vpx_dec_fuzzer_vp8: Use-of-uninitialized-value in vp8_multiframe_quality_enhance

Project: https://chromium.googlesource.com/webm/libvpx Detailed Report: https://oss-fuzz.com/testcase?key=5346190351990784 Project: libvpx Fuzzing Engine: libFuzzer Fuzz Target: vpxdecfuzzervp8 Job Type: libfuzzermsanlibvpx Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

MAL-2025-68996 Malicious code in itchy-silver-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d1a7d1262342785e60ad468998bdd2775130836041d7a73f933a6226c1ec27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Division by zero

Overview Affected versions of this package are vulnerable to Division by zero via the CLAHEImage function in MagickCore/enhance.c. An attacker can cause the process to crash or exhaust system resources by supplying crafted parameters or very small images that result in zero tile dimensions, leadi...

ImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS)

Summary A single root cause in the CLAHE implementation — tile width/height becoming zero — produces two distinct but related unsafe behaviors. Vulnerabilities exists in the CLAHEImage function of ImageMagick’s MagickCore/enhance.c. 1. Unsigned integer underflow → out-of-bounds pointer arithmetic...

Malicious code in vite-plugin-enhance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8e3c636dfa64944d7dbd44dcd69bf2d040855dec38d508810590f76a1deb54e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in vite-plugin-enhance

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...