Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the parameter processing of message-based management requests sent by an authenticated client with MANAGE permission. An attacker can cause excessive computation and pin the processing thread by...

PT-2026-82050

Arbitrary file overwrite via SAVE PROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3...