edisgo (0.2.0), featureform (>=0.10.2, <=1.10.5) +4 more potentially affected by CVE-2026-27205 via flask (2.2.1)

flask PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - edisgo 0.2.0 - featureform =0.10.2, =0.10.1, =0.0.4, =0.8.3, =0.8.10 Source cves: CVE-2026-27205 Source advisory: OSV:PYSEC-2026-2151...

edisgo (0.2.0), featureform (>=0.10.2, <=1.10.5) +4 more potentially affected by CVE-2026-27205 via flask (2.2.1)

flask PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - edisgo 0.2.0 - featureform =0.10.2, =0.10.1, =0.0.4, =0.8.3, =0.8.10 Source cves: CVE-2026-27205 Source advisory: OSV:GHSA-68RP-WP8R-4726...

Microsoft Error Reporting Local Privilege Elevation Exploit

This Metasploit module takes advantage of a bug in the way Windows error reporting opens the report parser. If you open a report, Windows uses a relative path to locate the rendering program. By creating a specific alternate directory structure, we can coerce Windows into opening an arbitrary...