PYSEC-2026-1608 MaterialX Lack of MTLX Import Depth Limit Leads to DoS (Denial-Of-Service) Via Stack Exhaustion

Summary Nested imports of MaterialX files can lead to a crash via stack memory exhaustion, due to the lack of a limit on the "import chain" depth. Details The MaterialX specification supports importing other files by using XInclude tags. When parsing file imports, recursion is used to process...

PYSEC-2026-1682 MS SWIFT WEB-UI RCE Vulnerability

I. Detailed Description: This includes scenarios, screenshots, vulnerability reproduction methods. For account-related vulnerabilities, please provide test accounts. If the reproduction process is complex, you may record a video, upload it to Taopan, and attach the link. 1. Install ms-swift pip...

PYSEC-2026-1607 MaterialX Null Pointer Dereference in MaterialXCore Shader Generation due to Unchecked implGraphOutput

Summary When parsing shader nodes in a MTLX file, the MaterialXCore code accesses a potentially null pointer, which can lead to crashes with maliciously crafted files. Details In source/MaterialXCore/Material.cpp, the following code extracts the output nodes for a given implementation graph: cpp...

CVE-2026-44512

creationtimestamp| type| source ---|---|--- 2026-07-07 14:35:07+00:00| published-proof-of-concept| https://github.com/onnx/onnx/security/advisories/GHSA-hwpq-hmq9-wj77...

CVE-2026-45016

creationtimestamp| type| source ---|---|--- 2026-07-07 14:35:05+00:00| published-proof-of-concept| https://github.com/EGroupware/egroupware/security/advisories/GHSA-c8m7-r2jv-rw63...

CVE-2026-40187

creationtimestamp| type| source ---|---|--- 2026-07-07 14:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq2s2h3gp32g 2026-07-07 14:35:10+00:00| published-proof-of-concept| https://github.com/EGroupware/egroupware/security/advisories/GHSA-8737-2x9g-xjj7...

PYSEC-2026-1824 Any file can be included with the pymdown-snippets extension

Summary Arbitrary file read when using include file syntax. Details By using the syntax --8--"/etc/passwd" or --8--"/proc/self/environ" the content of these files will be rendered in the generated documentation. Additionally, a path relative to a specified, allowed base path can also be used to...

CVE-2026-54709

creationtimestamp| type| source ---|---|--- 2026-07-06 22:35:29+00:00| published-proof-of-concept| https://github.com/dragonflyoss/dragonfly/security/advisories/GHSA-fhf9-m53m-863g...

CVE-2026-53759

creationtimestamp| type| source ---|---|--- 2026-07-06 22:35:27+00:00| published-proof-of-concept| https://github.com/Linuxfabrik/monitoring-plugins/security/advisories/GHSA-r35r-fpx2-jgr4...

CVE-2026-54771

creationtimestamp| type| source ---|---|--- 2026-07-06 22:35:22+00:00| published-proof-of-concept| https://github.com/langroid/langroid/security/advisories/GHSA-gjgq-w2m6-wr5q 2026-07-10 01:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqax4od5hu2i 2026-07-10...

CVE-2026-53624

creationtimestamp| type| source ---|---|--- 2026-07-06 22:35:20+00:00| published-proof-of-concept| https://github.com/gofiber/fiber/security/advisories/GHSA-gv83-gqw6-9j2c...

CVE-2026-54641

creationtimestamp| type| source ---|---|--- 2026-07-06 22:35:18+00:00| published-proof-of-concept| https://github.com/openremote/openremote/security/advisories/GHSA-xqr9-4wvv-gvch...

CVE-2026-54640

creationtimestamp| type| source ---|---|--- 2026-07-06 22:35:16+00:00| published-proof-of-concept| https://github.com/openremote/openremote/security/advisories/GHSA-7v6w-c3f4-9wpq...

CVE-2026-54637

creationtimestamp| type| source ---|---|--- 2026-07-06 22:35:14+00:00| published-proof-of-concept| https://github.com/dragonflyoss/dragonfly/security/advisories/GHSA-chwm-m7g7-685g...

CVE-2026-55426

creationtimestamp| type| source ---|---|--- 2026-07-06 22:35:11+00:00| published-proof-of-concept| https://github.com/Linuxfabrik/monitoring-plugins/security/advisories/GHSA-798h-hpph-m24j...

CVE-2026-55501

creationtimestamp| type| source ---|---|--- 2026-07-06 22:35:05+00:00| published-proof-of-concept| https://github.com/decolua/9router/security/advisories/GHSA-7cfm-pqrj-xgq7 2026-07-10 16:21:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqckkdhmae2e 2026-07-10 22:20:14+00:00|...

CVE-2026-55615

creationtimestamp| type| source ---|---|--- 2026-07-06 21:38:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpz2fhfwf72r 2026-07-06 22:35:09+00:00| published-proof-of-concept| https://github.com/langroid/langroid/security/advisories/GHSA-2pq5-3q89-j7cc 2026-07-09...

CVE-2026-49439

creationtimestamp| type| source ---|---|--- 2026-07-06 18:35:13+00:00| published-proof-of-concept| https://github.com/openremote/openremote/security/advisories/GHSA-xj53-j257-hxvg...

CVE-2026-55787

creationtimestamp| type| source ---|---|--- 2026-07-06 18:35:08+00:00| published-proof-of-concept| https://github.com/flytohub/flyto-core/security/advisories/GHSA-794r-5rp2-fpg8...

CVE-2026-55786

creationtimestamp| type| source ---|---|--- 2026-07-06 18:35:06+00:00| published-proof-of-concept| https://github.com/flytohub/flyto-core/security/advisories/GHSA-h9f9-h6gm-wc85...