PT-2026-1346

Name of the Vulnerable Software and Affected Versions Craft versions 5.0.0-RC1 through 5.8.20 Craft versions 4.0.0-RC1 through 4.16.16 Description Craft is a platform for creating digital experiences. The software is susceptible to potential authenticated Remote Code Execution through malicious...

EUVD-2025-23029

Malicious code in bioql PyPI...

CVE-2022-43242

Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via mcluma in motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted video file...

GHSA-XRPJ-F9V6-2332 CSV injection in Craft CMS

Withdrawn Duplicate of GHSA-h7vq-5qgw-jwwq...

CVE-2019-11068

libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded...

CVE-2018-7876

In libming 0.4.8, a memory exhaustion vulnerability was found in the function parseSWFACTIONRECORD in util/parser.c, which allows remote attackers to cause a denial of service via a crafted file...