Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Inclusion of Functionality from Untrusted Control Sphere in pip (CVE-2026-6357)

Summary IBM Watson Speech Services Cartridge is vulnerable to an Inclusion of Functionality from Untrusted Control Sphere in pip. Pip is used in our Speech Service Runtimes. This vulnerability has been addressed. Please read the details for remediation below. Vulnerability Details...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in pip (CVE-2026-1703)

Summary IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in pip due to a flaw that allows files to be extracted outside the installation directory when pip is installing and extracting a maliciously crafted wheel archive. Pip is used in our Speech Service Runtimes. This...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Out-of-bounds Read in Onnx (CVE-2026-19319)

Summary IBM Watson Speech Services Cartridge is vulnerable to an Out-of-bounds Read in Onnx, due to a flaw in the adaptgemm76 function when processing specific input. Onnx is used in our Speech runtimes. This vulnerability has been addressed. Please read the details for remediation below...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to input validation bypass and data integrity issues in UltraJSON (CVE-2026-54911)

Summary IBM Watson Speech Services Cartridge is vulnerable to input validation bypass and data integrity issues in UltraJSON, due to a flaw that allows the encoder/decoder to accept malformed or truncated UTF-8 byte sequences, silently rewriting them into different Unicode characters instead of...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to memory corruption issues in PyTorch (CVE-2025-3001)

Summary IBM Watson Speech Services Cartridge is vulnerable to memory corruption issues in PyTorch due to flaws in function torch.lstmcell. PyTorch is used in our Speech runtimes. This vulnerability has been addressed. Please read the details for remediation below. Vulnerability Details...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to memory corruption issues in PyTorch (CVE-2025-3000)

Summary IBM Watson Speech Services Cartridge is vulnerable to memory corruption issues in PyTorch due to a flaw in the function torch.jit.script. PyTorch is used in our Speech runtimes. This vulnerability has been addressed. Please read the details for remediation below. Vulnerability Details...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Uncontrolled Resource Consumption in pyasn1 (CVE-2026-59884, CVE-2026-59885, CVE-2026-59886)

Summary IBM Watson Speech Services Cartridge is vulnerable to an Uncontrolled Resource Consumption in pyasn1, due to issues with BER, CER, and DER encoder/decoder processes. Pyasn1 is used in our Speech runtimes. These vulnerabilities have been addressed. Please read the details for remediation...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an OS Command Injection in Pillow (CVE-2026-55798)

Summary IBM Watson Speech Services Cartridge is vulnerable to an OS Command Injection in Pillow, due to a flaw that allows WindowsViewer.getcommands to inject arbitrary cmd.exe commands in an f-string without escaping. Pillow is used in our Speech runtimes. This vulnerability has been addressed...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple memory allocation issues in Pillow (CVE-2026-54059, CVE-2026-54060, CVE-2026-55379, CVE-2026-55380).

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple memory allocation issues in Pillow. Pillow is used in our Speech runtimes. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-54059 DESCRIPTION: Pillo...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple memory and Out-of-bounds Read issues in Pillow-manylinux.

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Pillow. Pillow is used in our Speech runtimes. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-54058 DESCRIPTION: Pillow is a Python...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a NULL Pointer Dereference in ONNX. (CVE-2026-44512)

Summary IBM Watson Speech Services Cartridge is vulnerable to a NULL Pointer Dereference in Open Neural Network Exchange ONNX, due toa flaw that allows processing of an untrusted model with an Upsample node that has zero inputs, causing an unrecoverable denial of service. ONNX is used as part of...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a path traversal in NLTK. (CVE-2026-54293)

Summary IBM Watson Speech Services Cartridge is vulnerable to a path traversal in NLTK Natural Language Toolkit, due to a flaw where an unsafe-path regex check is performed, allowing an attacker to potentialy read arbitrary files from the filesystem. NLTK is used as part of our Speech runtimes...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a D.O.S. in Unpacker. (CVE-2026-17493)

Summary IBM Watson Speech Services Cartridge is vulnerable to a D.O.S. in Unpacker, that can be initiated by untrusted input from external sources, where the Unpacker is used repeatedly after an error occurs, potentially causing the process to crash with a SEGV. Unpacker is used as part of our...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Use After Free condition in cryptography wheels OpenSSL (CVE-2026-82418)

Summary IBM Watson Speech Services Cartridge is vulnerable to a Use After Free condition, due to versions of OpenSSL included in wheels prior to cryptograph 48.01 which could allow specially crafted PKCS7 or S/MIME signed messages to trigger a use-after-free during PKCS7 signature verification...

3lc (>=2.3.84, <=2.11.2), a-data-processing (0.0.1) +295 more potentially affected by CVE-2026-96637 via pillow (10.2.0)

pillow PYPI version 10.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 3lc =2.3.84, =0.2.3, =1.6.0, =0.21.0, =0.0.2, =0.0.1, =0.0.1, =24.2.0, =0.0.7, =1.0.3.dev0, =1.1.0 and more Source cves: CVE-2026-96637 Source...

agent-tieba

agent-tieba · Agent Reward Center Anonymous Injective Rewar...

Gitmails

Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2026-87952

Authentication Bypass by Capture-replay vulnerability in Drupal SAML SSO - Service Provider allows Remote Services with Stolen Credentials. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0...