CVE-2026-112893 Pillow: Invalid free in FreeType glyph rendering when a stroker is active

Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid glyph pointer during FreeType rendering with an active stroker. If FTLoadGlyph fails, cleanup may call FTDoneGlyph on an uninitialized or stale glyph variable. An attacker can supply a malformed font as...

CVE-2026-112893

Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid glyph pointer during FreeType rendering with an active stroker. If FTLoadGlyph fails, cleanup may call FTDoneGlyph on an uninitialized or stale glyph variable. An attacker can supply a malformed font as...

CVE-2026-112893 Pillow: Invalid free in FreeType glyph rendering when a stroker is active

Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid glyph pointer during FreeType rendering with an active stroker. If FTLoadGlyph fails, cleanup may call FTDoneGlyph on an uninitialized or stale glyph variable. An attacker can supply a malformed font as...

CVE-2026-112893

Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid glyph pointer during FreeType rendering with an active stroker. If FTLoadGlyph fails, cleanup may call FTDoneGlyph on an uninitialized or stale glyph variable. An attacker can supply a malformed font as...

CVE-2026-112893

The Pillow Python imaging library versions 10.0.0 through 13.0.0 are vulnerable to a memory corruption issue during FreeType rendering when using an active stroker. If the FT_Load_Glyph function fails, the cleanup process may incorrectly call FT_Done_Glyph on an uninitialized or stale glyph varia...

CVE-2026-112307

A flaw was found in sqlparse. The PHP output formatting filter does not properly sanitize dollar-sign sequences when formatting SQL statements into PHP code. An attacker can exploit this vulnerability by supplying crafted SQL input containing embedded expressions, leading to arbitrary code...

CVE-2026-66859

A flaw was found in Apache Thrift. A remote attacker can cause a Denial of Service DoS by triggering an application crash due to improper memory handling in the C GLib bindings. This vulnerability stems from an uninitialized variable and a null pointer dereference during data processing...

CVE-2026-110867

A flaw was found in Renovate. An attacker controlling an externally referenced configuration preset can bypass the environment variable allowlist. By defining restricted environment variables within a shared preset, the attacker can override critical execution settings such as PATH or LDPRELOAD i...

Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor

Threat actors have begun to exploit a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse proxy software, a day after a proof-of-concept PoC went public. According to a researcher who goes by the online alias boredhackerblog, the exploitation activity involve...

CVE-2026-93479

A flaw was found in NGINX. An unauthenticated attacker can exploit this vulnerability by sending specially crafted HTTP requests when the map directive uses regular expression regex matching and references regex capture variables before referencing the map output variable. This can lead to a heap...

Security Bulletin: Multiple vulnerabilities have been found in IBM Guardium Data Protection

Summary Multiple vulnerabilities have been addressed in IBM Guardium Data Protection Vulnerability Details CVEID:CVE-2026-14456 DESCRIPTION: Issue summary: When an OpenSSL QUIC server Listener SSL object processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate...

OPENSUSE-SU-2026:22125-1 Security update for grafana

This update for grafana fixes the following issues: Changes in grafana: Update to version 12.4.10: Security: CVE-2026-17183: Fix exposing data accessible through Grafana's configured datasource credentials bsc1275934 CVE-2026-2303: Drop dependency on vulnerable go.mongodb.org/mongo-driver...

OPENSUSE-SU-2026:22126-1 Security update for gitoxide

This update for gitoxide fixes the following issues: Changes in gitoxide: Update to version 0.60.0: BREAKING: remove the full-screen progress mode: the --progress and --progress-keep-open flags and the prodash-render-tui feature are gone, line progress stays the only progress UI Trace output is n...

CVE-2026-112305

Semaphore UI through 2.19.16 contains a remote code execution vulnerability that allows users with the taskrunner role to override protected Ansible variables by supplying arbitrary keys in the task environment JSON. Attackers can POST tasks setting ansiblesshcommonargs with a ProxyCommand or...

CVE-2026-107567

Use of a less trusted source in the DKIM signing of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail they write signed with the DKIM key of a domain the server hosts, so that it passes DKIM and DMARC for that domain at other receivers. With...

Stirling Tools Stirling PDF input validation vulnerability

Stirling Tools’ Stirling PDF version 2.13.2 to 3.2.0 contains a vulnerability related to input validation errors. This vulnerability stems from an incomplete rejection list in the DatabaseService.validateSqlContent method. It allows administrators to bypass H2 import restrictions using CREATE OR...

Python Packaging Authority virtualenv resource management error vulnerability

The Python Packaging Authority’s virtualenv version 21.14.8 to 21.14.10 has a resource management vulnerability. This vulnerability arises from the app-data seeder, which may cause the environment to link to temporary package files that are deleted after creation. This state can be enabled throug...

Security Bulletin: IBM Virtualization Engine TS7700 is susceptible to multiple vulnerabilities due to the use of IBM® Db2®

Summary IBM Virtualization Engine TS7700 is susceptible to vulnerabilities that could permit remote code execution, privilege escalation, unauthorized access to information, modification of data, or denial of service due to the use of IBM Db2. TS7700 embeds Db2 internally to manage metadata...

EUVD-2026-104406

Use of a less trusted source in the DKIM signing of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail they write signed with the DKIM key of a domain the server hosts, so that it passes DKIM and DMARC for that domain at other receivers. With...

CVE-2026-107567

Progressive Robot hMailServer versions 6.0.0 through 6.3.6 are vulnerable to a Use of Less Trusted Source (CWE-348) issue in the DKIM signing process. A remote unauthenticated attacker can send inbound mail with a forged From header belonging to a hosted domain. If DKIM signing is enabled, the se...