EUVD-2026-66014

Improper state validation in Parser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79073

Improper state validation in Parser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

patchwork-cli (>=0.0.99.dev0, <=0.0.125.dev0) potentially affected by CVE-2026-55620 via eml-parser (2.0.1)

eml-parser PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on eml-parser and may be impacted: - patchwork-cli =0.0.99.dev0, =0.0.125.dev0 Source cves: CVE-2026-55620 Source advisory: OSV:GHSA-G7GC-GMGP-WGQG...

axa-fr-splitter (>=0.0.2, <=0.1.2), cyvoreos (>=0.2.0.3b0, <=0.2.0.7b0) +3 more potentially affected by CVE-2026-55620 via eml-parser (1.17.5)

eml-parser PYPI version 1.17.5 is affected by a known vulnerability. The following packages have a transitive dependency on eml-parser and may be impacted: - axa-fr-splitter =0.0.2, =0.2.0.3b0, =1.0.7, =1.1.1b0, =0.1.13, =0.3.1 Source cves: CVE-2026-55620 Source advisory: OSV:GHSA-G7GC-GMGP-WGQG...

Excessively Deep Nesting

Overview eml-parser is a Python EML parser library Affected versions of this package are vulnerable to Excessively Deep Nesting through the processing of deeply nested parentheses in Received headers. An attacker can cause excessive CPU consumption by submitting specially crafted EML files with a...

axa-fr-splitter (>=0.0.2, <=0.1.2), cyvoreos (>=0.2.0.3b0, <=0.2.0.7b0) +4 more potentially affected by CVE-2026-55620 via eml-parser (>=1.17.5, <=2.0.1)

eml-parser PYPI version =1.17.5, =0.0.2, =0.2.0.3b0, =1.0.7, =1.1.1b0, =0.1.13, =0.0.99.dev0, =0.0.125.dev0 Source cves: CVE-2026-55620 Source advisory: MEND:CVE-2026-55620...

patchwork-cli (>=0.0.99.dev0, <=0.0.125.dev0) potentially affected by CVE-2026-55619 via eml-parser (2.0.1)

eml-parser PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on eml-parser and may be impacted: - patchwork-cli =0.0.99.dev0, =0.0.125.dev0 Source cves: CVE-2026-55619 Source advisory: OSV:GHSA-M66C-FW79-6359...

axa-fr-splitter (>=0.0.2, <=0.1.2), cyvoreos (>=0.2.0.3b0, <=0.2.0.7b0) +3 more potentially affected by CVE-2026-55619 via eml-parser (1.17.5)

eml-parser PYPI version 1.17.5 is affected by a known vulnerability. The following packages have a transitive dependency on eml-parser and may be impacted: - axa-fr-splitter =0.0.2, =0.2.0.3b0, =1.0.7, =1.1.1b0, =0.1.13, =0.3.1 Source cves: CVE-2026-55619 Source advisory: OSV:GHSA-M66C-FW79-6359...

Excessively Deep Nesting

Overview eml-parser is a Python EML parser library Affected versions of this package are vulnerable to Excessively Deep Nesting in the parsing process of e-mail headers containing deeply nested parentheses. An attacker can cause the application to exhaust the call stack and terminate unexpectedly...

Security Bulletin: Vulnerability in ASF (WMV/WMA) file type detection parser affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in ASF WMV/WMA file type detection parser has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for...

EUVD-2026-65703

emlparser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, emlparser.parser.HeaderParser.headerfetchparse in emlparser/parser.py uses email.utils.getaddresses to parse address-bearing e-mail...

CVE-2026-55619

eml_parser , a Python module for parsing EML files, is vulnerable to a denial of service prior to version 3.0.2 . The flaw resides in eml_parser.parser.HeaderParser.header_fetch_parse, which delegates address parsing to email.utils.getaddresses(). A deeply nested CFWS comment construct in an e-ma...

axa-fr-splitter (>=0.0.2, <=0.1.2), cyvoreos (>=0.2.0.3b0, <=0.2.0.7b0) +4 more potentially affected by CVE-2026-55619 via eml-parser (>=1.17.5, <=2.0.1)

eml-parser PYPI version =1.17.5, =0.0.2, =0.2.0.3b0, =1.0.7, =1.1.1b0, =0.1.13, =0.0.99.dev0, =0.0.125.dev0 Source cves: CVE-2026-55619 Source advisory: MEND:CVE-2026-55619...

patchwork-cli (>=0.0.99.dev0, <=0.0.125.dev0) potentially affected by CVE-2026-55618 via eml-parser (2.0.1)

eml-parser PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on eml-parser and may be impacted: - patchwork-cli =0.0.99.dev0, =0.0.125.dev0 Source cves: CVE-2026-55618 Source advisory: OSV:GHSA-FXGQ-9M89-CXJ9...

axa-fr-splitter (>=0.0.2, <=0.1.2), cyvoreos (>=0.2.0.3b0, <=0.2.0.7b0) +3 more potentially affected by CVE-2026-55618 via eml-parser (1.17.5)

eml-parser PYPI version 1.17.5 is affected by a known vulnerability. The following packages have a transitive dependency on eml-parser and may be impacted: - axa-fr-splitter =0.0.2, =0.2.0.3b0, =1.0.7, =1.1.1b0, =0.1.13, =0.3.1 Source cves: CVE-2026-55618 Source advisory: OSV:GHSA-FXGQ-9M89-CXJ9...

Improper Encoding or Escaping of Output

Overview eml-parser is a Python EML parser library Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output in the URL extraction process. An attacker can cause valid URLs containing HTML entities to be omitted from extraction by encoding characters such as :, /...

axa-fr-splitter (>=0.0.2, <=0.1.2), cyvoreos (>=0.2.0.3b0, <=0.2.0.7b0) +4 more potentially affected by CVE-2026-55618 via eml-parser (>=1.17.5, <=2.0.1)

eml-parser PYPI version =1.17.5, =0.0.2, =0.2.0.3b0, =1.0.7, =1.1.1b0, =0.1.13, =0.0.99.dev0, =0.0.125.dev0 Source cves: CVE-2026-55618 Source advisory: MEND:CVE-2026-55618...

Security Bulletin: Vulnerability in Faraday affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in Faraday has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information. Vulnerabili...

Security Bulletin: Vulnerability in js-yaml affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in js-yaml has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information. Vulnerabili...

CVE-2026-79775

rclone versions = v1.72.0 and = v1.74.4 fixed in v1.75.0 contain multiple denial-of-service vulnerabilities in the archive backend's SquashFS parser, which relies on the github.com/diskfs/go-diskfs dependency. The parser fails to validate attacker-controlled superblock and metadata values before...