CVE-2026-24228

creationtimestamp| type| source ---|---|--- 2026-06-16 18:26:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moggebqyog2n 2026-06-16 19:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mogibms44f2a 2026-07-20 04:27:04+00:00| seen|...

CVE-2026-47750

The CVE-2026-47750 issue affects stable-diffusion.cpp in its pickle (.ckpt) parser (src/model.cpp). A heap buffer overflow occurs in the GLOBAL opcode handler due to missing validation while locating newline-delimited fields; a crafted .ckpt from an untrusted source can cause the parser to copy w...

CVE-2026-44932

creationtimestamp| type| source ---|---|--- 2026-06-16 17:53:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogeiujyy724 2026-06-16 18:00:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mogewtkvur2r...

CVE-2024-24909

creationtimestamp| type| source ---|---|--- 2026-06-16 17:38:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogdpbkw632c 2026-06-16 20:45:13+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mogo4kdafl2r 2026-06-25 07:00:40+00:00| seen|...

CVE-2026-47749

stable-diffusion.cpp is a pure C/C++ library for running diffusion model Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more inference. Versions prior to master-584-0a7ae07 are vulnerable to heap buffer overflow in SHORTBINUNICODE parsing for PyTorch checkpoint files. The pickle .ckpt pars...

CVE-2026-47749 stable-diffusion.cpp: Heap buffer overflow in SHORT_BINUNICODE parsing for PyTorch checkpoint files

stable-diffusion.cpp is a pure C/C++ library for running diffusion model Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more inference. Versions prior to master-584-0a7ae07 are vulnerable to heap buffer overflow in SHORTBINUNICODE parsing for PyTorch checkpoint files. The pickle .ckpt pars...

Symlink Attack

Overview langchain-anthropic is an Integration package connecting Claude Anthropic APIs and LangChain Affected versions of this package are vulnerable to Symlink Attack via the file-search middleware and loaders that resolve filesystem paths and search patterns without confining the resolved path...

GHSA-JRPJ-WCV7-9FH9 Astro: XSS via Unescaped Attribute Names in Spread Props

Summary The spreadAttributes function in Astro's server-side rendering pipeline iterates over object keys and passes them directly to addAttribute, which interpolates the key into the HTML output without escaping. When a developer uses the spread syntax ...props on an HTML element and the object...

CVE-2026-6039

A flaw was found in LibreOffice. This vulnerability, a heap buffer overflow, occurs when processing specially crafted DXF Drawing Exchange Format polyline files. An attacker could exploit this by convincing a user to open a malicious DXF file, which may lead to a denial of service DoS due to...

CVE-2026-49772

creationtimestamp| type| source ---|---|--- 2026-06-16 13:01:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mofu6j6ze72f 2026-06-16 13:37:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mofw7xjz7z2v 2026-07-13 22:00:21+00:00| seen|...

CVE-2026-40750

creationtimestamp| type| source ---|---|--- 2026-06-16 13:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mofu63mapu2n 2026-06-16 13:18:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mofv5ajgi62i 2026-06-23 13:18:19+00:00| seen|...

CVE-2026-8443

creationtimestamp| type| source ---|---|--- 2026-06-16 07:00:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mof7zbnval2y 2026-06-16 09:17:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mofhpn2qmv2x...

CVE-2026-7273

creationtimestamp| type| source ---|---|--- 2026-06-16 03:57:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116757774658704043 2026-06-16 04:02:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moew44qmwy2n 2026-06-16 05:00:09+00:00| seen|...

GHSA-PW6J-QG29-8W7F

creationtimestamp| type| source ---|---|--- 2026-06-16 01:11:21+00:00| seen| https://gist.github.com/alon710/23808c1f8380a92515abff40b7e06b99 2026-06-16 01:11:25+00:00| seen| https://gist.github.com/alon710/43bcbcd716ebc4457fa6fbcb1b087336 2026-06-16 01:21:14+00:00| seen|...

CVE-2026-48853

creationtimestamp| type| source ---|---|--- 2026-06-16 00:00:37+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3moeikz22zn2e 2026-06-16 00:00:42+00:00| seen| https://infosec.exchange/users/offseq/statuses/116756842721787890 2026-06-16 00:23:17+00:00| seen|...

PT-2026-49829

Name of the Vulnerable Software and Affected Versions stable-diffusion.cpp versions prior to master-584-0a7ae07 Description The pickle .ckpt parser in src/model.cpp contains a heap buffer overflow in the BINUNICODE opcode handler. This occurs due to sign confusion on the opcode length field, wher...

PT-2026-49749

Name of the Vulnerable Software and Affected Versions stable-diffusion.cpp versions prior to master-584-0a7ae07 Description An out-of-bounds read error exists during PyTorch checkpoint pickle opcode parsing. The pickle .ckpt parser in the src/model.cpp file fails to consistently verify that...

CVE-2026-52697

creationtimestamp| type| source ---|---|--- 2026-06-15 21:57:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moebpnpmxf2p 2026-06-15 22:01:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moebw3cgrk2v...

CVE-2026-49769

creationtimestamp| type| source ---|---|--- 2026-06-15 21:43:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moeaw2yext2a 2026-06-15 22:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3moecq7qnpw26 2026-06-16 06:00:43+00:00| seen|...

CVE-2026-12087

Socket versions before 2.041 for Perl have an out-of-bounds heap read. In Socket.xs, packipmreqsource checks the length of its source argument before the argument is read, so the check tests the byte length carried over from the preceding multiaddr argument instead. Both addresses occupy a 4-byte...