aebo (>=0.3.0, <=0.9.0), aebo-pi (>=0.1.0, <=0.8.0) +173 more potentially affected by CVE-2026-59199 via pillow (9.0.1)

pillow PYPI version 9.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aebo =0.3.0, =0.1.0, =1.3.0, =1.0.0, =0.4.10, =2.1.0, =0.5.3, =2.6.9, =0.2.3rc4, =1.1.1, =0.5.17, =1.0.0, =22.9.1, =0.3.2b20220226, =0.5.3 and more...

CVE-2026-12523

Summary Cloudflare quiche's HTTP/3 layer was discovered to be vulnerable to resource exhaustion i.e., memory by means of specially crafted HTTP/3 frames. Impact HTTP/3 defines multiple frame types to support HTTP message exchanges and connection management. Each frame has a length and a payload...

EUVD-2026-43748

Summary Cloudflare quiche's HTTP/3 layer was discovered to be vulnerable to resource exhaustion i.e., memory by means of specially crafted HTTP/3 frames. Impact HTTP/3 defines multiple frame types to support HTTP message exchanges and connection management. Each frame has a length and a payload...

nodejs: Node.js HTTP/2 Server: Denial of Service due to continued data acceptance after GOAWAY frame

A flaw in the Node.js HTTP/2 API allows remote attackers to cause a Denial of Service DoS by sending data after a GOAWAY frame, exhausting server resources...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the GOAWAY frame parsing process. An attacker can cause the application to read past the end of a heap buffer by sending a specially crafted HTTP/2 GOAWAY frame lacking a proper null terminator, which may result in...

kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine x86 shadow paging mechanism. This use-after-free vulnerability arises from incorrect handling of Guest Frame Numbers GFNs when guest page tables are modified. A local attacker with control over a guest virtual machine could...

kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine x86 shadow paging mechanism. This use-after-free vulnerability arises from incorrect handling of Guest Frame Numbers GFNs when guest page tables are modified. A local attacker with control over a guest virtual machine could...

EUVD-2026-43607

OpENer 2.3.0 commit 76b95cf has an out-of-bounds read issue in CIP message parsing when handling malformed explicit requests with a forged EPath size. An attacker can send a valid ENIP SendRRData frame carrying a very short CIP payload whose pathsize field claims that many more path words are...

CVE-2026-12478: Out-of-bounds Read

The fix for CVE-2026-0716 commit 6ff7ef0, libsoup 3.6.6 placed the integer overflow guard inside the if masked block, leaving unmasked server-to-client frames unprotected. A malicious WebSocket server can send a crafted unmasked frame with a payload length near UINT64MAX to trigger an OOB read in...

PT-2026-58678

Name of the Vulnerable Software and Affected Versions libsoup versions 3.0 through 3.7.0 Description A heap buffer over-read occurs in the HTTP/2 connection tracking framework when processing an HTTP/2 GOAWAY frame. The issue arises because the library assumes the Additional Debug Data payload is...

PT-2026-63258

Name of the Vulnerable Software and Affected Versions Netty versions 4.1.0.Final through 4.1.135.Final Netty versions 4.2.0.Final through 4.2.15.Final Description A remote unauthenticated peer can cause a memory leak of one direct ByteBuf per HTTP/2 DATA frame in applications that enable HTTP/2...

CVE-2026-15712: Out-of-bounds Read

A heap buffer over-read vulnerability was discovered in libsoup's HTTP/2 connection tracking framework. When the library processes an HTTP/2 GOAWAY frame, it improperly handles the "Additional Debug Data" payload by assuming the data stream is a safely NUL-terminated C-string. Because the parser...

CVE-2026-15712: Out-of-bounds Read

A heap buffer over-read vulnerability was discovered in libsoup's HTTP/2 connection tracking framework. When the library processes an HTTP/2 GOAWAY frame, it improperly handles the "Additional Debug Data" payload by assuming the data stream is a safely NUL-terminated C-string. Because the parser...

CVE-2026-12478: Out-of-bounds Read

The fix for CVE-2026-0716 commit 6ff7ef0, libsoup 3.6.6 placed the integer overflow guard inside the if masked block, leaving unmasked server-to-client frames unprotected. A malicious WebSocket server can send a crafted unmasked frame with a payload length near UINT64MAX to trigger an OOB read in...

CVE-2026-15711: Allocation of Resources Without Limits or Throttling

A vulnerability was found in libsoup's WebSocket frame parsing implementation. The library fails to validate length rules specified in RFC 6455 §5.5, which mandates that all WebSocket control frames e.g., PING, PONG, CLOSE contain a payload of 125 bytes or less. A remote, unauthenticated attacker...

binutils: GNU Binutils Linker heap-based overflow

A head based buffer overflow flaw has been discovered in GNU bin utilities. Impacted is the function bfdelfparseehframe of the file bfd/elf-eh-frame.c of the component Linker. Executing manipulation can lead to heap-based buffer overflow. The attack is restricted to local execution...

apat-frame (>=1.0.12, <=1.0.14), autotrain-advanced (>=0.7.64, <=0.8.25) +8 more potentially affected by CVE-2026-55195 via py7zr (0.21.0)

py7zr PYPI version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - apat-frame =1.0.12, =0.7.64, =0.10.0, =0.0.2, =0.0.5 Source cves: CVE-2026-55195 Source advisory: OSV:PYSEC-2026-2972...

apat-frame (>=1.0.12, <=1.0.14), autotrain-advanced (>=0.7.64, <=0.8.25) +8 more potentially affected by CVE-2026-55206 via py7zr (0.21.0)

py7zr PYPI version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - apat-frame =1.0.12, =0.7.64, =0.10.0, =0.0.2, =0.0.5 Source cves: CVE-2026-55206 Source advisory: OSV:PYSEC-2026-2973...

apat-frame (>=1.0.12, <=1.0.14), autotrain-advanced (>=0.7.64, <=0.8.25) +8 more potentially affected by CVE-2026-23879 via py7zr (0.21.0)

py7zr PYPI version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - apat-frame =1.0.12, =0.7.64, =0.10.0, =0.0.2, =0.0.5 Source cves: CVE-2026-23879 Source advisory: OSV:PYSEC-2026-2974...

PYSEC-2026-3406 vLLM: image EXIF Rotation & PNG tRNS Transparency Not Normalized, Causing Mismatch Between Model Input and Expectations

Summary Issue 1: EXIF orientation not normalized → The image orientation processed by the model differs from how humans view it, introducing interpretation bias. Issue 2: PNG tRNS not explicitly flattened before converting to RGB → After conversion, transparent/semi-transparent pixels are rendere...