CVE-2026-11297

Insufficient validation of untrusted input in Reader Mode in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to bypass navigation restrictions via a malicious file. Chromium security severity: Low...

CVE-2026-11297

Insufficient validation of untrusted input in Reader Mode in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to bypass navigation restrictions via a malicious file. Chromium security severity: Low...

CVE-2026-11297

Insufficient validation of untrusted input in Reader Mode in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to bypass navigation restrictions via a malicious file. Chromium security severity: Low...

CVE-2026-11297

Insufficient validation of untrusted input in Reader Mode in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to bypass navigation restrictions via a malicious file. Chromium security severity: Low...

CVE-2026-11297

Google Chrome on Android versions prior to 149.0.7827.53 is vulnerable to a security issue in Reader Mode caused by insufficient validation of untrusted input. A local attacker can exploit this flaw to bypass navigation restrictions using a malicious file. Exploitation details for this specific C...

Use of Weak Hash

Overview gptcache is a GPTCache, a powerful caching library that can be used to speed up and lower the cost of chat applications that rely on the LLM service. GPTCache works as a memcache for AIGC applications, similar to how Redis works for traditional applications. Affected versions of this...

GHSA-XFQJ-4CR9-9GR5 GPTCache: File and image cache keys collide because BufferedReader.peek() only reads the buffered prefix

A vulnerability was detected in zilliztech GPTCache up to 0.1.44. Affected by this issue is the function BufferedReader.peek of the file gptcache/processor/pre.py of the component Cache Key Handler. Performing a manipulation of the argument inputdata"image" results in use of weak hash. The attack...

GPTCache: File and image cache keys collide because BufferedReader.peek() only reads the buffered prefix

A vulnerability was detected in zilliztech GPTCache up to 0.1.44. Affected by this issue is the function BufferedReader.peek of the file gptcache/processor/pre.py of the component Cache Key Handler. Performing a manipulation of the argument inputdata"image" results in use of weak hash. The attack...

CVE-2026-10812 zilliztech GPTCache Cache Key pre.py BufferedReader.peek weak hash

A vulnerability was detected in zilliztech GPTCache up to 0.1.44. Affected by this issue is the function BufferedReader.peek of the file gptcache/processor/pre.py of the component Cache Key Handler. Performing a manipulation of the argument inputdata"image" results in use of weak hash. The attack...

Important: Red Hat Security Advisory: libsndfile security update

An update for libsndfile is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

Important: Red Hat Security Advisory: libsndfile security update

An update for libsndfile is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: libsndfile security update

An update for libsndfile is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

depthflow (0.9.1), f5-tts (1.1.7) +10 more potentially affected by CVE-2026-10783 via gradio (5.35.0)

gradio PYPI version 5.35.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - depthflow 0.9.1 - f5-tts 1.1.7 - iflow-mcp-pdfmathtranslate-pdf2zh 1.9.11 - mseep-pdf2zh 1.9.11 - paper-reader 0.1.0 - particleanalyzer =0.1.28,...

GPTCache security vulnerability

GPTCache is a library open-sourced by Zilliz for creating semantic caching for large model queries. Versions of GPTCache 0.1.44 and earlier contain security vulnerabilities. These vulnerabilities stem from the use of a weak hash function in the BufferedReader.peek function of the Cache Key Handle...

PT-2026-46824

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 149.0.7827.53 Description Insufficient validation of untrusted input in Reader Mode allows a local attacker to bypass navigation restrictions through the use of a malicious file. Recommendations Updat...

CVE-2025-14774

ABB T-MAC Plus 4.0-24 is affected by an Incorrect Authorization vulnerability. The CVSS metrics indicate adjacent access with low attack complexity and no user interaction, but no exploitable details or patch information are provided in the documents. Impact is reported as HIGH for integrity and ...

CVE-2025-14774 Communication analysis between the Card Reader and TP2CardReaderService daemon

Incorrect Authorization vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24...

Adobe Reader PDF Viewer Buffer Overflow

The vulnerability of Adobe Reader, a PDF viewer software, and Adobe Acrobat, a PDF editing program, is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

chalice (>=1.22.4, <=1.24.0), dpckan (>=0.0.1.9001, <=0.1.0) +6 more potentially affected by CVE-2026-8643 via pip (21.1.3)

pip PYPI version 21.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice =1.22.4, =0.0.1.9001, =0.9.4, =1.0.0, =2.0.0, =2.1.0 - tikit 0.1.7 - wanikani-notifier 0.1.0 - yelpdataset2sql 0.0.2 Source cves: CVE-2026-8643...

chalice (>=1.22.4, <=1.24.0), dpckan (>=0.0.1.9001, <=0.1.0) +6 more potentially affected by CVE-2026-8643 via pip (21.1.3)

pip PYPI version 21.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice =1.22.4, =0.0.1.9001, =0.9.4, =1.0.0, =2.0.0, =2.1.0 - tikit 0.1.7 - wanikani-notifier 0.1.0 - yelpdataset2sql 0.0.2 Source cves: CVE-2026-8643...