CVE-2026-35483 text-generation-webui has a Path Traversal in load_template() — .jinja/.yaml/.yml file read without authentication

text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, an unauthenticated path traversal vulnerability in loadtemplate allows reading files with .jinja, .jinja2, .yaml, or .yml extensions from anywhere on the server filesystem. For .jinja files the...

CVE-2026-5380

An issue that could allow an authorized user to view the clear-text secrets for a subset of credential types and fields has been resolved. This is an instance of CWE-522: Insufficiently Protected Credentials, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N 5.3...

CVE-2026-5732

Incorrect boundary conditions, integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 149.0.2, Firefox ESR 140.9.1, Thunderbird 149.0.2, and Thunderbird 140.9.1...

biome-text (>=3.0.0, <=3.2.1), farm (>=0.6.2, <=0.8.0) +5 more potentially affected by CVE-2026-33865 +1 more via mlflow (1.13.1)

mlflow PYPI version 1.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - biome-text =3.0.0, =0.6.2, =0.7.0, =0.0.1, =1.1.0, =1.0.0, =0.4.5.dev2, =0.6.5 Source cves: CVE-2026-33865, CVE-2026-33866 Source advisory:...

DEBIAN-CVE-2026-5732

Incorrect boundary conditions, integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 149.0.2, Firefox ESR 140.9.1, Thunderbird 149.0.2, and Thunderbird 140.9.1...

CVE-2026-5732

Incorrect boundary conditions, integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 149.0.2, Firefox ESR 140.9.1, Thunderbird 149.0.2, and Thunderbird 140.9.1...

UBUNTU-CVE-2026-5732

Incorrect boundary conditions, integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 149.0.2, Firefox ESR 140.9.1, Thunderbird 149.0.2, and Thunderbird 140.9.1...

CVE-2026-5732 Incorrect boundary conditions, integer overflow in the Graphics: Text component

Incorrect boundary conditions, integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 149.0.2, Firefox ESR 140.9.1, Thunderbird 149.0.2, and Thunderbird 140.9.1...

CVE-2026-5732

Incorrect boundary conditions, integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 149.0.2, Firefox ESR 140.9.1, Thunderbird 149.0.2, and Thunderbird 140.9.1...

CVE-2026-5732

Incorrect boundary conditions, integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 149.0.2, Firefox ESR 140.9.1, Thunderbird 149.0.2, and Thunderbird 140.9.1...

CVE-2026-5732

Mozilla Firefox , Firefox ESR , and Thunderbird are affected by an integer overflow and incorrect boundary conditions within the Graphics: Text component. This vulnerability could potentially allow an attacker to execute arbitrary code remotely . Impacted versions include Firefox &lt; 149.0.2, Fi...

CVE-2026-5732

Incorrect boundary conditions, integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 149.0.2, Firefox ESR 140.9.1, Thunderbird 149.0.2, and Thunderbird 140.9.1...

CVE-2026-5732 Incorrect boundary conditions, integer overflow in the Graphics: Text component

Incorrect boundary conditions, integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 149.0.2, Firefox ESR 140.9.1, Thunderbird 149.0.2, and Thunderbird 140.9.1...

WordPress Text to Speech (TTS) by Mementor plugin <= 1.9.8 - Use of Hardcoded Password to Unauthenticated Remote Database Access vulnerability

Use of Hardcoded Password to Unauthenticated Remote Database Access vulnerability discovered by Kazuma Matsumoto - GMO Cybersecurity by IERAE, Inc. in WordPress Plugin Text to Speech – TTSWP versions = 1.9.8...

data-generation-tool (>=1.0.1, <=1.1.1), openrlhf (>=0.4.0, <=0.4.2) +2 more potentially affected by CVE-2026-1839 via transformers (4.43.3)

transformers PYPI version 4.43.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - data-generation-tool =1.0.1, =0.4.0, =0.0.1, =0.1.1, =0.2.1 Source cves: CVE-2026-1839 Source advisory: OSV:GHSA-69W3-R845-3855...

accord-nlp (>=0.1.0, <=0.1.8), allennlp (2.9.1) +17 more potentially affected by CVE-2026-1839 via transformers (4.16.2)

transformers PYPI version 4.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - accord-nlp =0.1.0, =0.3.2b20220222, =0.4.3b20220616, =0.3.2b20220222, =1.0.0, =1.5.0, =1.5.0.dev202203021257, =0.2.1, =0.11.0, =0.13.0 ...

allennlp (>=2.5.0.dev20210603, <=2.5.1.dev20210621), allennlp-models (2.5.0) +22 more potentially affected by CVE-2026-1839 via transformers (4.6.1)

transformers PYPI version 4.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =2.5.0.dev20210603, =0.0.10, =3.1.0, =2.0.0, =0.0.1, =0.0.1, =2.0.0a0, =0.9.0, =0.0.29, =0.16.0rc0, =1.0.5, =0.0.8, =0.0.9 and...

auto-obsidian (>=0.1.0, <=0.1.3), autogluon (0.5.3) +10 more potentially affected by CVE-2026-1839 via transformers (4.23.1)

transformers PYPI version 4.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - auto-obsidian =0.1.0, =0.5.3b20221025, =0.1.0, =0.0.8, =0.0.14 Source cves: CVE-2026-1839 Source advisory: OSV:GHSA-69W3-R845-3855...

allennlp (>=2.5.0.dev20210603, <=2.5.1.dev20210621), allennlp-models (2.5.0) +22 more potentially affected by CVE-2026-1839 via transformers (4.6.1)

transformers PYPI version 4.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =2.5.0.dev20210603, =0.0.10, =3.1.0, =2.0.0, =0.0.1, =0.0.1, =2.0.0a0, =0.9.0, =0.0.29, =0.16.0rc0, =1.0.5, =0.0.8, =0.0.9 and...

Mozilla Firefox ESR < 140.9.1

The version of Firefox ESR installed on the remote Windows host is prior to 140.9.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-27 advisory. - Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0....