UBUNTU-CVE-2026-46604

The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset...

CVE-2026-46604

The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset...

mangadownloadlib (>=1.0.0, <=1.0.1), ml-trainer-sdk (>=0.1.0, <=0.4.1.10) +1 more potentially affected by CVE-2026-29509 via patool (>=4.0.0, <=4.0.4)

patool PYPI version =4.0.0, =1.0.0, =0.1.0, =0.20250314.0, =0.20260227.0 Source cves: CVE-2026-29509 Source advisory: SNYK:PYTHON-PATOOL-17816662...

JLSEC-2026-635

Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavutil/imgutils.c:353:9 in imagecopyplane...

EUVD-2026-39909

The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset...

CVE-2026-46604 Panic decoding image with out-of-bounds strip offset in x/image/tiff in golang.org/x/image

The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset...

CVE-2026-46604

The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset...

CVE-2026-46604 Panic decoding image with out-of-bounds strip offset in x/image/tiff in golang.org/x/image

The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset...

CVE-2026-46604

The TIFF decoder is vulnerable to a panic condition when processing an invalid image containing an out-of-bounds strip offset . This vulnerability affects multiple software components, including rclone , keybase-client , mattermost , listmonk , mattermost-fips , rclone-fips , seaweedfs-fips , git...

CVE-2026-46604

The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, external-dns, flux-image-automation-controller-fips, traefik-fips, upwind-agent, cloud-provider-aws, frankenphp-8.4, knative-serving, trivy-operator-fips, zarf-fips, kyverno, cloudbeat-fips, k3s, skaffold-fips, cilium-cli,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, external-dns, flux-image-automation-controller-fips, traefik-fips, upwind-agent, cloud-provider-aws, frankenphp-8.4, knative-serving, trivy-operator-fips, zarf-fips, kyverno, cloudbeat-fips, k3s, skaffold-fips, cilium-cli,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-orbital, crossplane-provider-keycloak, flux-image-automation-controller-fips, gomplate, knative-serving, prometheus-podman-exporter, steampipe, sops, packer, crossplane-provider-aws-sesv2, chainloop-control-plane,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, kyverno-policy-reporter-plugins-kyverno, crossplane-provider-azure-orbital, scorecard, trivy-operator-fips, grype-fips, external-dns, flux-image-automation-controller-fips, gptscript, traefik-fips, crossplane-provider-azure-spring, gomplate,...

GHSA-VGWF-H737-FF37 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, scorecard, grype-fips, external-dns, flux-image-automation-controller-fips, gptscript, traefik-fips, upwind-agent, gomplate, argo-events, frankenphp-8.4, cloud-provider-aws, knative-serving, prometheus-podman-exporter, kyverno, chainctl,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, scorecard, grype-fips, external-dns, flux-image-automation-controller-fips, gptscript, traefik-fips, upwind-agent, gomplate, argo-events, frankenphp-8.4, cloud-provider-aws, knative-serving, prometheus-podman-exporter, kyverno, chainctl,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, kyverno-policy-reporter-plugins-kyverno, crossplane-provider-azure-orbital, scorecard, trivy-operator-fips, grype-fips, external-dns, flux-image-automation-controller-fips, gptscript, traefik-fips, crossplane-provider-azure-spring, gomplate,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: kine, flux, terragrunt, aactl, crossplane-provider-azure-authorization, cilium, wal-g, act, terraform-provider-azurerm, melange, external-dns, glab, terraform-provider-tls, cluster-api-azure-controller, docker-machine-driver-harvester, step, kubernetes-dashboard,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: kine, flux, zarf, aactl, osv-scanner, kaf, cilium, prometheus, containerd, external-dns, snyk-cli, mattermost, prometheus-operator, spire-server, opentelemetry-collector, flux-image-automation-controller, nerdctl, kubernetes-dashboard, skaffold, k3s, istio, helm,...

CVE-2026-46601

A flaw was found in the golang.org/x/image/webp library's WebP decoder. A remote attacker could exploit this vulnerability by providing a specially crafted WebP image containing a VP8 chunk with mismatched dimensions. This could cause the decoder to panic, leading to a denial of service DoS for...