Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/05 12:00 a.m.•9 views

CVE-2026-70377: Memory Allocation with Excessive Size Value

imagecli's pipeline operation Scale::apply in src/imageops.rs computes output width/height as dimension as f32 ratio as u32 with no upper-bound validation on the CLI-supplied ratio, which is parsed via nom::number::complete::float with no range check. Any application embedding imagecli as a libra...

7.5CVSS5.8AI score0.0046EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/03/26 12:00 a.m.•11 views

PT-2023-2097

Name of the Vulnerable Software and Affected Versions redis-py versions prior to 4.5.3 Description The issue is related to the redis-py library, which leaves a connection open after canceling an async Redis command at an inopportune time, specifically in the case of a pipeline operation. This can...

6.5CVSS7.5AI score0.01034EPSS
SaveExploits0References46
Rows per page
Query Builder