PYSEC-2026-1115 ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay

Impact A cryptographic semantic binding flaw in ALTCHA libraries allows challenge payload splicing, which may enable replay attacks. The HMAC signature does not unambiguously bind challenge parameters to the nonce, allowing an attacker to reinterpret a valid proof-of-work submission with a modifi...

Authlib: JWS/JWT accepts unknown crit headers (RFC violation → possible authz bypass)

SummaryAuthlib’s JWS verification accepts tokens that declare unknown critical header parameters crit, violating RFC 7515 “must‑understand” semantics. An attacker can craft a signed token with a critical header for example, bork or cnf that strict verifiers reject but Authlib accepts. In...

copyparty allows Regex Denial of Service (ReDoS) in the upload listing

SummaryThe filter parameter for the "Recent uploads" page allows arbitrary Regexes. If this feature is enabled which is the default, an attacker can craft a filter which deadlocks the server. PoChttps://127.0.0.1:3923/?ru=.++x ImpactThe server becomes fully inaccessible for a long time...

PYSEC-2026-1608 MaterialX Lack of MTLX Import Depth Limit Leads to DoS (Denial-Of-Service) Via Stack Exhaustion

Summary Nested imports of MaterialX files can lead to a crash via stack memory exhaustion, due to the lack of a limit on the "import chain" depth. Details The MaterialX specification supports importing other files by using XInclude tags. When parsing file imports, recursion is used to process...

PYSEC-2026-1682 MS SWIFT WEB-UI RCE Vulnerability

I. Detailed Description: This includes scenarios, screenshots, vulnerability reproduction methods. For account-related vulnerabilities, please provide test accounts. If the reproduction process is complex, you may record a video, upload it to Taopan, and attach the link. 1. Install ms-swift pip...

MaterialX Null Pointer Dereference in getShaderNodes due to Unchecked nodeGraph->getOutput return

SummaryWhen parsing shader nodes in a MTLX file, the MaterialXCore code accesses a potentially null pointer, which can lead to crashes with maliciously crafted files. DetailsIn src/MaterialXCore/Material.cpp, in function getShaderNodes, the following code fetches the output nodes for a given...

PYSEC-2026-1607 MaterialX Null Pointer Dereference in MaterialXCore Shader Generation due to Unchecked implGraphOutput

Summary When parsing shader nodes in a MTLX file, the MaterialXCore code accesses a potentially null pointer, which can lead to crashes with maliciously crafted files. Details In source/MaterialXCore/Material.cpp, the following code extracts the output nodes for a given implementation graph: cpp...

jupyterlab-git has a command injection vulnerability in "Open Git Repository in Terminal"

OverviewOn many platforms, a third party can create a Git repository under a name that includes a shell command substitution ^1 string in the syntax $. These directory names are allowed in macOS and a majority of Linux distributions ^2. If a user starts jupyter-lab in a parent directory of this...

CVE-2026-44512

creationtimestamp| type| source ---|---|--- 2026-07-07 14:35:07+00:00| published-proof-of-concept| https://github.com/onnx/onnx/security/advisories/GHSA-hwpq-hmq9-wj77...

CVE-2026-45016

creationtimestamp| type| source ---|---|--- 2026-07-07 14:35:05+00:00| published-proof-of-concept| https://github.com/EGroupware/egroupware/security/advisories/GHSA-c8m7-r2jv-rw63...

copra-theorem-prover (>=1.0.0, <=1.1.11), openvoiceplus (>=0.0.1, <=0.0.2) +1 more potentially affected by CVE-2024-8966 via gradio (3.48.0)

gradio PYPI version 3.48.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - copra-theorem-prover =1.0.0, =0.0.1, =1.0.0, =1.1.6 Source cves: CVE-2024-8966 Source advisory: OSV:PYSEC-2026-1410...

copra-theorem-prover (>=1.0.0, <=1.1.11), openvoiceplus (>=0.0.1, <=0.0.2) +1 more potentially affected by CVE-2024-8021 via gradio (3.48.0)

gradio PYPI version 3.48.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - copra-theorem-prover =1.0.0, =0.0.1, =1.0.0, =1.1.6 Source cves: CVE-2024-8021 Source advisory: OSV:PYSEC-2026-1411...

copra-theorem-prover (>=1.0.0, <=1.1.11), openvoiceplus (>=0.0.1, <=0.0.2) +1 more potentially affected by CVE-2024-12217 via gradio (3.48.0)

gradio PYPI version 3.48.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - copra-theorem-prover =1.0.0, =0.0.1, =1.0.0, =1.1.6 Source cves: CVE-2024-12217 Source advisory: OSV:PYSEC-2026-1418...

copra-theorem-prover (>=1.0.0, <=1.1.11), openvoiceplus (>=0.0.1, <=0.0.2) +1 more potentially affected by CVE-2024-48052 via gradio (3.48.0)

gradio PYPI version 3.48.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - copra-theorem-prover =1.0.0, =0.0.1, =1.0.0, =1.1.6 Source cves: CVE-2024-48052 Source advisory: OSV:PYSEC-2026-1408...

Starlette Denial of service (DoS) via multipart/form-data

SummaryStarlette treats multipart/form-data parts without a filename as text form fields and buffers those in byte strings with no size limit. This allows an attacker to upload arbitrary large form fields and cause Starlette to both slow down significantly due to excessive memory allocations and...

Mobile Security Framework (MobSF) has a Zip Slip Vulnerability in .a Static Library Files

SummaryUpon reviewing the MobSF source code, I identified a flaw in the Static Libraries analysis section. Specifically, during the extraction of .a extension files, the measure intended to prevent Zip Slip attacks is improperly implemented.Since the implemented measure can be bypassed, the...

copra-theorem-prover (>=1.0.0, <=1.1.11), openvoiceplus (>=0.0.1, <=0.0.2) +1 more potentially affected by CVE-2024-4940 via gradio (3.48.0)

gradio PYPI version 3.48.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - copra-theorem-prover =1.0.0, =0.0.1, =1.0.0, =1.1.6 Source cves: CVE-2024-4940 Source advisory: OSV:PYSEC-2026-1414...

CVE-2026-40187

creationtimestamp| type| source ---|---|--- 2026-07-07 14:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq2s2h3gp32g 2026-07-07 14:35:10+00:00| published-proof-of-concept| https://github.com/EGroupware/egroupware/security/advisories/GHSA-8737-2x9g-xjj7...

copra-theorem-prover (>=1.0.0, <=1.1.11), openvoiceplus (>=0.0.1, <=0.0.2) +1 more potentially affected by CVE-2024-4325 via gradio (3.48.0)

gradio PYPI version 3.48.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - copra-theorem-prover =1.0.0, =0.0.1, =1.0.0, =1.1.6 Source cves: CVE-2024-4325 Source advisory: OSV:PYSEC-2026-1413...

copra-theorem-prover (>=1.0.0, <=1.1.11), openvoiceplus (>=0.0.1, <=0.0.2) +1 more potentially affected by CVE-2024-34511 via gradio (3.48.0)

gradio PYPI version 3.48.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - copra-theorem-prover =1.0.0, =0.0.1, =1.0.0, =1.1.6 Source cves: CVE-2024-34511 Source advisory: OSV:PYSEC-2026-1407...