mangadownloadlib (>=1.0.0, <=1.0.1), ml-trainer-sdk (>=0.1.0, <=0.4.1.10) +1 more potentially affected by CVE-2026-29509 via patool (>=4.0.0, <=4.0.4)

patool PYPI version =4.0.0, =1.0.0, =0.1.0, =0.20250314.0, =0.20260227.0 Source cves: CVE-2026-29509 Source advisory: SNYK:PYTHON-PATOOL-17816662...

JLSEC-2026-635

Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavutil/imgutils.c:353:9 in imagecopyplane...

EUVD-2026-39909

The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset...

CVE-2026-46604 Panic decoding image with out-of-bounds strip offset in x/image/tiff in golang.org/x/image

The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset...

CVE-2026-46604

The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset...

CVE-2026-46604 Panic decoding image with out-of-bounds strip offset in x/image/tiff in golang.org/x/image

The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset...

CVE-2026-46604

The TIFF decoder is vulnerable to a panic condition when processing an invalid image containing an out-of-bounds strip offset . This vulnerability affects multiple software components, including rclone , keybase-client , mattermost , listmonk , mattermost-fips , rclone-fips , seaweedfs-fips , git...

CVE-2026-46604

The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: harbor-fips, argo-cd, minio-fips, traefik-fips, grafana, coder-fips, skaffold, k9s, opentofu, chisel-fips, prometheus-mongodb-exporter, argocd-image-updater, nemo, reports-server, drone, gitlab-workhorse-ce-fips, opentofu-fips, trivy-operator, kubernetes,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: act, chainctl, harbor-fips, argo-cd, minio-fips, traefik-fips, terraform-fips, wolfictl, grafana, guac, skaffold, witness, redpanda-console, k9s, opentofu, terragrunt-fips, splunk-otel-collector-fips, prometheus-mongodb-exporter, prometheus-podman-exporter,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: act, terraform-provider-tls, cosign-fips, crossplane-provider-azure-managedidentity, chainctl, harbor-fips, flux-kustomize-controller, argo-cd, minio-fips, kyverno-notation-aws-fips, terraform-fips, traefik-fips, rootlesskit-fips, atlantis-fips, tekton-chains-fips,...

GHSA-VGWF-H737-FF37 vulnerabilities

Vulnerabilities for packages: act, chainctl, harbor-fips, argo-cd, minio-fips, traefik-fips, terraform-fips, rootlesskit-fips, wolfictl, longhorn-manager-fips, grafana, guac, coder-fips, skaffold, witness, redpanda-console, k9s, longhorn-manager, docker-cli-buildx-fips, opentofu, terragrunt-fips,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: harbor-fips, argo-cd, minio-fips, traefik-fips, grafana, coder-fips, skaffold, k9s, opentofu, chisel-fips, prometheus-mongodb-exporter, argocd-image-updater, nemo, reports-server, drone, gitlab-workhorse-ce-fips, opentofu-fips, trivy-operator, kubernetes,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: act, terraform-provider-tls, cosign-fips, crossplane-provider-azure-managedidentity, chainctl, harbor-fips, flux-kustomize-controller, argo-cd, minio-fips, kyverno-notation-aws-fips, terraform-fips, traefik-fips, rootlesskit-fips, atlantis-fips, tekton-chains-fips,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, minio-fips, crossplane-provider-aws-elasticsearch-fips, crossplane-provider-aws-organizations-fips, kyverno-notation-aws-fips, rootlesskit-fips, crossplane-provider-azure-web, crossplane-provider-aws-dynamodb, gitlab-cng-fip...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: teleport, cilium, trivy-operator, zot, k8sgpt, kubernetes-dashboard, aactl, flux-image-automation-controller, prometheus-operator, caddy, crossplane-provider-azure-sql, glab, syft, grype, wolfictl, docker, tekton-chains, minio, buildah, fscrypt, step,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: kine, cilium, trivy-operator, zot, spire-server, zarf, flux-source-controller, kubernetes, rancher-agent, kubernetes-dashboard, aactl, flux-image-automation-controller, trivy, prometheus-operator, external-dns, helm, kaf, cert-manager, opentelemetry-collector,...

CVE-2026-46601

A flaw was found in the golang.org/x/image/webp library's WebP decoder. A remote attacker could exploit this vulnerability by providing a specially crafted WebP image containing a VP8 chunk with mismatched dimensions. This could cause the decoder to panic, leading to a denial of service DoS for...

CVE-2026-44696

OpenProject is open-source, web-based project management software. Prior to 17.4.0, OpenProject's rich text markdown rendering pipeline uses Sanitize::Config::RELAXED:css for inline style sanitization. This configuration permits essentially all CSS properties in style attributes on permitted HTML...

libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations,...