2 matches found
CVE-2026-70377: Memory Allocation with Excessive Size Value
imagecli's pipeline operation Scale::apply in src/imageops.rs computes output width/height as dimension as f32 ratio as u32 with no upper-bound validation on the CLI-supplied ratio, which is parsed via nom::number::complete::float with no range check. Any application embedding imagecli as a libra...
7.5CVSS5.8AI score0.0046EPSS
SaveExploits0References2
PT-2023-2097
Name of the Vulnerable Software and Affected Versions redis-py versions prior to 4.5.3 Description The issue is related to the redis-py library, which leaves a connection open after canceling an async Redis command at an inopportune time, specifically in the case of a pipeline operation. This can...
6.5CVSS7.5AI score0.01034EPSS
SaveExploits0References46
20