craft-text-detector (>=0.1.8, <=0.3.2), deeptext (0.1.3) +3 more potentially affected by CVE-2019-5064 via opencv-python (3.4.8.29)

opencv-python PYPI version 3.4.8.29 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - craft-text-detector =0.1.8, =0.1.0, =0.1.2 - s2c 0.0.6 Source cves: CVE-2019-5064 Source advisory: OSV:PYSEC-2026-2828...

craft-text-detector (>=0.1.8, <=0.3.2), deeptext (0.1.3) +3 more potentially affected by CVE-2019-9423 via opencv-python (3.4.8.29)

opencv-python PYPI version 3.4.8.29 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - craft-text-detector =0.1.8, =0.1.0, =0.1.2 - s2c 0.0.6 Source cves: CVE-2019-9423 Source advisory: OSV:PYSEC-2026-2811...

craft-text-detector (>=0.1.8, <=0.3.2), deeptext (0.1.3) +3 more potentially affected by CVE-2019-19624 via opencv-python (3.4.8.29)

opencv-python PYPI version 3.4.8.29 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - craft-text-detector =0.1.8, =0.1.0, =0.1.2 - s2c 0.0.6 Source cves: CVE-2019-19624 Source advisory: OSV:PYSEC-2026-2824...

craft-text-detector (>=0.1.8, <=0.3.2), deeptext (0.1.3) +3 more potentially affected by CVE-2019-16249 via opencv-python (3.4.8.29)

opencv-python PYPI version 3.4.8.29 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - craft-text-detector =0.1.8, =0.1.0, =0.1.2 - s2c 0.0.6 Source cves: CVE-2019-16249 Source advisory: OSV:PYSEC-2026-2833...

craft-text-detector (>=0.1.8, <=0.3.2), deeptext (0.1.3) +3 more potentially affected by CVE-2019-5063 via opencv-python (3.4.8.29)

opencv-python PYPI version 3.4.8.29 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - craft-text-detector =0.1.8, =0.1.0, =0.1.2 - s2c 0.0.6 Source cves: CVE-2019-5063 Source advisory: OSV:PYSEC-2026-2826...

craft-text-detector (>=0.1.8, <=0.3.2), deeptext (0.1.3) +3 more potentially affected by CVE-2019-15939 via opencv-python (3.4.8.29)

opencv-python PYPI version 3.4.8.29 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - craft-text-detector =0.1.8, =0.1.0, =0.1.2 - s2c 0.0.6 Source cves: CVE-2019-15939 Source advisory: OSV:PYSEC-2026-2822...

craft-text-detector (>=0.1.8, <=0.3.2), deeptext (0.1.3) +3 more potentially affected by CVE-2019-14493 via opencv-python (3.4.8.29)

opencv-python PYPI version 3.4.8.29 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - craft-text-detector =0.1.8, =0.1.0, =0.1.2 - s2c 0.0.6 Source cves: CVE-2019-14493 Source advisory: OSV:PYSEC-2026-2806...

Cross-site Request Forgery (CSRF)

Overview admidio/admidio is a free open source user management system for websites of organizations and groups. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the modules/plugins.php process. An attacker can trigger unauthorized plugin installation,...

PT-2026-59434

An issue was discovered in OpenCV before 4.1.1 OpenCV-Python before 4.1.1.26. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp...

PT-2026-59460

An issue was discovered in OpenCV 4.1.0 OpenCV-Python 4.1.0.25. There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp...

PT-2026-59446

In modules/imgcodecs/src/grfmt pxm.cpp, the length of buffer AutoBuffer src is small than expected, which will cause copy buffer overflow later. If the image is from remote, may lead to remote code execution or denial of service. This affects OpenCV 3.3 corresponding to OpenCV-Python 3.3.0.9 and...

PT-2026-59444

OpenCV Open Source Computer Vision Library through 3.3 corresponding to OpenCV-Python 3.3.0.9 has an out-of-bounds read error in the cv::RBaseStream::readBlock function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the...

PT-2026-59442

OpenCV 4.1.1 has an out-of-bounds read in hal baseline::v load in core/hal/intrin sse.hpp when called from computeSSDMeanNorm in modules/video/src/dis flow.cpp...

PT-2026-59471

OpenCV 4.1.1 has an out-of-bounds read in hal baseline::v load in core/hal/intrin sse.hpp when called from computeSSDMeanNorm in modules/video/src/dis flow.cpp...

PT-2026-59475

An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1 OpenCV-Python before 3.4.7.28 and 4.x before 4.1.1.26. There is an out of bounds read/write in the function HaarEvaluator::OptFeature::calc in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service...

PT-2026-59436

An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1 OpenCV-Python before 3.4.7.28 and 4.x before 4.1.1.26. There is an out of bounds read in the function cv::predictOrdered in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service...

PT-2026-59456

An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1 OpenCV-Python before 3.4.7.28 and 4.x before 4.1.1.26. There is an out of bounds read in the function cv::predictOrdered in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service...

PT-2026-59474

An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1 OpenCV-Python before 3.4.7.28 and 4.x before 4.1.1.26. There is an out of bounds read in the function cv::predictOrdered in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service...

SUSE SLED15: jackson-annotations / jackson-core / jackson-databind / etc (SUSE-SU-2026:2801-1)

"The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2801-1 advisory. This update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformats- binary...

org.dspace.modules:jspui (1.8.1), org.dspace.modules:lni (1.8.1) +25 more potentially affected by CVE-2026-49830 via org.dspace:dspace-api (1.8.1)

org.dspace:dspace-api MAVEN version 1.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:jspui 1.8.1 - org.dspace.modules:lni 1.8.1 - org.dspace.modules:oai 1.8.1 - org.dspace.modules:swo...