CVE-2026-58470

GNU Wget 1.25.0 and earlier is affected by an integer overflow in parse_content_range() (src/http.c) triggered by server-controlled Content-Range headers, leading to undefined behavior and download desynchronization. The issue is fixed in commit 43d3ba9, and users should upgrade to a version that...

CVE-2026-58470

GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in the parsecontentrange function within src/http.c that allows server-controlled values to cause signed integer arithmetic to overflow. Attackers can supply malicious Content-Range header values to trigg...

EUVD-2026-42082

GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in the parsecontentrange function within src/http.c that allows server-controlled values to cause signed integer arithmetic to overflow. Attackers can supply malicious Content-Range header values to trigg...

CVE-2026-58470 GNU Wget 1.25.0 Integer Overflow via Content-Range Header Parsing

GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in the parsecontentrange function within src/http.c that allows server-controlled values to cause signed integer arithmetic to overflow. Attackers can supply malicious Content-Range header values to trigg...

CVE-2026-58470 GNU Wget 1.25.0 Integer Overflow via Content-Range Header Parsing

GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in the parsecontentrange function within src/http.c that allows server-controlled values to cause signed integer arithmetic to overflow. Attackers can supply malicious Content-Range header values to trigg...

CVE-2026-58470

GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in the parsecontentrange function within src/http.c that allows server-controlled values to cause signed integer arithmetic to overflow. Attackers can supply malicious Content-Range header values to trigg...

CVE-2026-58470

GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in the parsecontentrange function within src/http.c that allows server-controlled values to cause signed integer arithmetic to overflow. Attackers can supply malicious Content-Range header values to trigg...

@abtnode/analytics (>=1.16.13-beta-0086a35d, <=1.17.13-beta-20261020-042751-541e5c03), @abtnode/auth (>=1.3.13, <=1.17.13-beta-20261020-042751-541e5c03) +212 more potentially affected by CVE-2026-56812 via phoenix (>=1.7.2, <=1.7.21)

phoenix NPM version =1.7.2, =1.16.13-beta-0086a35d, =1.3.13, =1.1.12, =1.6.23, =1.16.6-beta-08670107, =1.0.0, =1.16.33-beta-20241105-141729-e4608175, =1.0.0, =1.0.35, =1.16.33-beta-20241105-141729-e4608175, =1.0.2, =1.16.33-beta-20241105-141729-e4608175, =1.16.33-beta-20241105-141729-e4608175,...

PYSEC-2026-1109 AIOHTTP has unicode match groups in regexes for ASCII protocol elements

Summary The parser allows non-ASCII decimals to be present in the Range header. Impact There is no known impact, but there is the possibility that there's a method to exploit a request smuggling vulnerability. ---- Patch:...

AIOHTTP has unicode match groups in regexes for ASCII protocol elements

SummaryThe parser allows non-ASCII decimals to be present in the Range header. ImpactThere is no known impact, but there is the possibility that there's a method to exploit a request smuggling vulnerability.----Patch:...

PYSEC-2026-1942 Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``

Summary An unauthenticated attacker can send a crafted HTTP Range header that triggers quadratic-time processing in Starlette's FileResponse Range parsing/merging logic. This enables CPU exhaustion per request, causing denial‑of‑service for endpoints serving files e.g., StaticFiles or any use of...

Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``

SummaryAn unauthenticated attacker can send a crafted HTTP Range header that triggers quadratic-time processing in Starlette's FileResponse Range parsing/merging logic. This enables CPU exhaustion per request, causing denial‑of‑service for endpoints serving files e.g., StaticFiles or any use of...

PYSEC-2026-1788 Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass

Details There's a parsing logic error in picklescan and modelscan while trying to deal with opcode STACKGLOBAL. Function listglobals when handling STACKGLOBAL at position n, it is expected to track two arguments but in wrong range. The loop only consider the range from 1 to n-1 but forgets to...

Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass

DetailsThere's a parsing logic error in picklescan and modelscan while trying to deal with opcode STACKGLOBAL.Function listglobals when handling STACKGLOBAL at position n, it is expected to track two arguments but in wrong range. The loop only consider the range from 1 to n-1 but forgets to...

PYSEC-2026-1558 LlamaIndex vulnerable to Path Traversal attack through its encode_image function

A path traversal vulnerability exists in run-llama/llamaindex versions 0.11.23 through 0.12.40, specifically within the encodeimage function in genericutils.py. This vulnerability allows an attacker to manipulate the imagepath input to read arbitrary files on the server, including sensitive syste...

@abtnode/analytics (>=1.16.13-beta-0086a35d, <=1.17.13-beta-20261020-042751-541e5c03), @abtnode/auth (>=1.3.13, <=1.17.13-beta-20261020-042751-541e5c03) +212 more potentially affected by CVE-2026-56812 via phoenix (>=1.7.2, <=1.7.21)

phoenix NPM version =1.7.2, =1.16.13-beta-0086a35d, =1.3.13, =1.1.12, =1.6.23, =1.16.6-beta-08670107, =1.0.0, =1.16.33-beta-20241105-141729-e4608175, =1.0.0, =1.0.35, =1.16.33-beta-20241105-141729-e4608175, =1.0.2, =1.16.33-beta-20241105-141729-e4608175, =1.16.33-beta-20241105-141729-e4608175,...

PYSEC-2026-1548 LiteLLM Reveals Portion of API Key via a Logging File

In berriai/litellm before version 1.44.12, the litellm/litellmcoreutils/litellmlogging.py file contains a vulnerability where the API key masking code only masks the first 5 characters of the key. This results in the leakage of almost the entire API key in the logs, exposing a significant amount ...

Synapse Matrix has a partial room state leak via Sliding Sync

ImpactThe Sliding Sync feature on Synapse versions between 1.113.0rc1 and 1.120.0 can leak partial room state changes to users no longer in a room. Non-state events, like messages, are unaffected. PatchesSynapse version 1.120.1 fixes the problem. WorkaroundsDisable Sliding Sync...

Guardrails has an arbitrary code execution vulnerability

An arbitrary code execution vulnerability exists in versions 0.2.9 up to 0.5.10 of the Guardrails AI Guardrails framework because of the way it validates XML files. If a victim user loads a maliciously crafted XML file containing Python code, the code will be passed to an eval function, causing i...

Calibre-Web Cross Site Scripting (XSS)

In janeczku Calibre-Web 0.6.0 to 0.6.21, the editbookcomments function is vulnerable to Cross Site Scripting XSS due to improper sanitization performed by the cleanstring function. The vulnerability arises from the way the cleanstring function handles HTML sanitization...