ANT-2026-PGRNAV88 · Spark · other

other critical Severity Claude critical · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-PGRNAV88: spark rce UserDefinedType.fromJson in python/pyspark/sql/types.py:2002 passes bytes taken from...

ANT-2026-M3T0RBQ8 · torvalds/linux · Heap Buffer Overflow

heap-buffer-overflow high Severity Claude high · Security research firm - · Maintainer - REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-M3T0RBQ8: NFSD: remotely exploitable heap buffer overflow in NFSv4.0 LOCK replay cache The NFSv4.0 seqid replay cache embeds a fixed...

ANT-2026-14WRNADB · linux · use-after-free

use-after-free high Severity Claude high · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-14WRNADB: ksmbd: use-after-free of shareconf via multichannel LOGOFF race SMB3 multichannel: SESSIONLOGO...

ANT-2026-SB4PHA43 · wolfSSL · Cryptographic Nonce Reuse

crypto-failure medium CVE-2026-5446 GHSA-vgv9-mv66-mpc7 Severity Claude high · Security research firm high · Maintainer medium Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-SB4PHA43: ARIA-GCM Nonc...

ANT-2026-9SZMPW41 · MapServer · Heap Buffer Overflow

heap-buffer-overflow medium CVE-2026-33721 Severity Claude medium · Security research firm medium · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-9SZMPW41: Heap buffer overflo...

ANT-2026-3ZHWVDTX · kjur/jsrsasign · Improper Verification of Cryptographic Signature

other high Severity Claude high · Security research firm - · Maintainer - REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-3ZHWVDTX: security off-by-one DSA signature validation error; different than CVE-2026-4599,01,02 In jsrsasign's DSA verification...

ANT-2026-K3APEMB5 · gdal · Heap-buffer-overflow

heap-buffer-overflow high Severity Claude critical · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-K3APEMB5: Heap-buffer-overflow in gdal The...

ANT-2026-6DSMTXZ8 · mastodon · SSRF

ssrf high CVE-2026-46348 GHSA-crr4-7rm4-8gpw Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Doyensec. ANT-2026-6DSMTXZ8: SSRF Bypass via IPv6...

ANT-2026-PVD37V09 · torvalds/linux · Use-After-Free

use-after-free high Severity Claude high · Security research firm - · Maintainer - REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-PVD37V09: LPE via iouring io-wq worker pool In iouring's io-wq worker pool, cancelling a hashed bucket-0 work item whose list predecessor is...

ANT-2026-K8YY7WWS · wolfSSL · improper-cert-validation

improper-cert-validation high CVE-2026-5501 GHSA-hg75-4cmp-f367 Severity Claude high · Security research firm high · Maintainer high Discovered by Claude Mythos Preview SECURITY RESEARCH FIRM ANALYSIS Triage and disclosure were performed by Calif. The writeup below is the document the firm sent t...

ANT-2026-VV0PRKKV · wolfSSL · heap-buffer-overflow

heap-buffer-overflow medium CVE-2026-5447 GHSA-mx4j-fjqx-f8qj Severity Claude high · Security research firm medium · Maintainer medium Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-VV0PRKKV:...

ANT-2026-2NNMB24E · openssh · stack-overflow

stack-overflow low Severity Claude critical · Security research firm low · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-2NNMB24E: stack-overflow in openssh OpenSSH's matchpattern in...

ANT-2026-4PKJCSR8 · gdal · Heap-buffer-overflow

heap-buffer-overflow high Severity Claude critical · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-4PKJCSR8: Heap-buffer-overflow in gdal In GDAL's...

ANT-2026-RXYVE4DZ · freerdp · Heap-buffer-overflow

heap-buffer-overflow critical CVE-2026-40033 CVE-2026-44421 GHSA-mpxh-8fq3-x8mh GHSA-mvpx-xj7r-3p3r GHSA-p6r2-4hgm-m6ff Severity Claude critical · Security research firm critical revised; sealed as high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at...

ANT-2026-8FZYKRTH · LibreOffice · Heap Buffer Overflow

heap-buffer-overflow medium CVE-2026-6039 Severity Claude high · Security research firm high · Maintainer medium Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-8FZYKRTH: Heap buffer overflow i...

ANT-2026-1BCAFJCC · torvalds/linux · Use-After-Free

use-after-free high CVE-2026-31554 Severity Claude high · Security research firm - · Maintainer high REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-1BCAFJCC: futex: UAF in private-hash teardown via cross-process sysfutexrequeue leading giving LPE A process P can allocat...

ANT-2026-T44WA684 · ImageMagick · heap-buffer-overflow

heap-buffer-overflow high CVE-2026-33901 GHSA-x9h5-r9v2-vcww Severity Claude high · Security research firm high · Maintainer high Discovered by Claude Mythos Preview SECURITY RESEARCH FIRM ANALYSIS Triage and disclosure were performed by Trail of Bits. The writeup below is the document the firm...

ANT-2026-110HTZ5M · jsrsasign · Cryptographically Weak PRNG / Predictable ECDSA Nonce

other high Severity Claude high · Security research firm high · Maintainer - REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-110HTZ5M: jsrsasign npm — ECDSA nonce RNG seeded entirely from Math.random in Node.js The npm wrapper at...

ANT-2026-BDHSQ5GE · hunspell · Stack-buffer-overflow

stack-buffer-overflow high Severity Claude critical · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-BDHSQ5GE: Stack-buffer-overflow in hunspell...

ANT-2026-P23DVQM2 · wolfSSL · crypto-failure

crypto-failure high CVE-2026-5500 GHSA-m77r-vqw2-hffx Severity Claude high · Security research firm high · Maintainer high Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-P23DVQM2: wolfSSL PKCS7...

ANT-2026-NQ9DPCK0 · gdal · Heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-NQ9DPCK0: Heap-buffer-overflow in hfaopen.cpp:3533 Wh...

ANT-2026-N7D3E5WK · rdkit · heap-use-after-free

use-after-free high Severity Claude critical · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-N7D3E5WK: Heap-use-after-free in...

ANT-2026-0Y1VS937 · ffmpeg · Heap Buffer Overflow

heap-buffer-overflow high Severity Claude high · Security research firm - · Maintainer - REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-0Y1VS937: Heap underflow in H.264 xchgmbborder via slicenum/sentinel collision In FFmpeg's H.264 decoder, slicetable h264dec.h is a...

ANT-2026-S6CB3P3P · bind9 · Stack Buffer Overflow

stack-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-S6CB3P3P: 03-bind9-matchnsec3-stack-bof In BIND's...

ANT-2026-0JRYQPCF · wolfSSL · heap-buffer-overflow

heap-buffer-overflow medium CVE-2026-5503 GHSA-65xm-pfx9-g5p3 Severity Claude high · Security research firm high · Maintainer medium Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-0JRYQPCF: wolfSSL...

ANT-2026-3JR8RVFB · Leptonica · Heap Buffer Underflow

heap-buffer-overflow medium Severity Claude medium · Security research firm medium · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-3JR8RVFB: Heap buffer underwrite via negativ...

ANT-2026-Z3GGGKM5 · ava-labs/libevm · Denial of Service / Nil Pointer Dereference

denial-of-service high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Anvil Security. ANT-2026-Z3GGGKM5: Reentrancy guard dereferences nil StateDB...

ANT-2026-M5V8FQ8Z · gdal · Heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-M5V8FQ8Z: Heap-buffer-overflow in jdcolor12.c:154 Whe...

ANT-2026-BT210RQ0 · libtom/libtomcrypt · Cryptographic Logic Flaw

other critical Severity Claude critical · Security research firm - · Maintainer - REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-BT210RQ0: libtomcrypt AES-SIV: universal forgery and plaintext recovery when called without AD In src/encauth/siv/siv.c, ssivS2V and the...

ANT-2026-G1XC2M5V · CGIF · other

other high Severity Claude high · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-G1XC2M5V: cgif/cgiffuzzer/20251218020844unknown/ cgif's LZW encoder computes a conservative upper bound for the...

ANT-2026-EBDTPNVH · jq · Heap Buffer Overflow

heap-buffer-overflow medium CVE-2026-32316 GHSA-q3h9-m34w-h76f Severity Claude medium · Security research firm medium · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-EBDTPNVH:...

ANT-2026-WG9N02WM · libjxl · Heap Buffer Overflow

heap-buffer-overflow medium Severity Claude medium · Security research firm medium · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-WG9N02WM: Heap buffer overflow in fast...

ANT-2026-6SNS6KMP · GitoxideLabs/gitoxide · Remote Code Execution

rce high GHSA-f26g-jm89-4g65 Severity Claude high · Security research firm - · Maintainer high Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-6SNS6KMP: RCE when updating a Git submodule of a malicious repository Updating a Git submodu...

ANT-2026-7ZJGE8XJ · UPX · Heap Buffer Overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-7ZJGE8XJ: Heap buffer overflow in unshlib1 readx d...

ANT-2026-AYWQW7P2 · openssl · Use-After-Free

use-after-free critical CVE-2026-45447 GHSA-f684-cpcq-j565 Severity Claude high · Security research firm high · Maintainer critical REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-AYWQW7P2: PKCS7verify frees caller-owned indata BIO wh...

ANT-2026-RXSADDFE · ffmpeg · Heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-RXSADDFE: Heap-buffer-overflow in g2meet.c:486 While...

ANT-2026-P2DWB2SK · mastodon · Signature-bypass

signature-bypass high CVE-2026-46349 GHSA-chgx-jx3p-rf73 Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Doyensec. ANT-2026-P2DWB2SK: LD-Signature...

ANT-2026-VS18SA90 · nginx · Arbitrary File Write

arbitrary-file-write critical CVE-2026-27654 Severity Claude critical · Security research firm critical · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-VS18SA90: unauthenticated remot...

ANT-2026-9WB9SMM6 · libass · heap-buffer-overflow

heap-buffer-overflow high GHSA-pjjp-65r7-ppgm Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-9WB9SMM6: Heap-buffer-overflow in...

ANT-2026-5ETTYD84 · libjpeg-turbo · use-after-free

use-after-free low Severity Claude high · Security research firm low revised; sealed as high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-5ETTYD84: use-after-free at...

ANT-2026-CM0TCREP · torvalds/linux · Use-After-Free

use-after-free high CVE-2026-43074 Severity Claude high · Security research firm - · Maintainer high REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-CM0TCREP: UAF in epgetupwardsdepthproc giving unprivileged LPE During epollctlA, EPOLLCTLADD, B, the nesting-depth check...

ANT-2026-4YJK1P9J · ffmpeg · Heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-4YJK1P9J: Heap-buffer-overflow in dhav.c:286 While...

ANT-2026-1FT5E1XF · lcms · Stack-buffer-overflow

stack-buffer-overflow low Severity Claude high · Security research firm high · Maintainer low Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-1FT5E1XF: Stack-buffer-overflow in cmslut.c:1373 Wh...

ANT-2026-9VJ9JJXQ · junrar · Path Traversal

path-traversal medium GHSA-j273-m5qq-6825 Severity Claude high · Security research firm - · Maintainer medium Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-9VJ9JJXQ: Arbitrary file write due to backslash path traversal Arbitrary file...

ANT-2026-ZQ8AY22X · CraftCMS · privilege-escalation

privilege-escalation high GHSA-cc7p-2j3x-x7xf Severity Claude high · Security research firm - · Maintainer high Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-ZQ8AY22X: Privilege Escalation/Bypass through...

ANT-2026-BTRNT5A3 · supabase/supabase · broken-access-control

broken-access-control high Severity Claude high · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-BTRNT5A3: Server action accepts client-controlled CRM backend targets submitFormAction is exporte...

ANT-2026-BRQZSDGZ · minio · path-traversal

path-traversal medium GHSA-xh8f-g2qw-gcm7 Severity Claude critical · Security research firm high · Maintainer medium Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Doyensec. ANT-2026-BRQZSDGZ: minio: path-traversa...

ANT-2026-GY2SF1XW · grok · Heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-GY2SF1XW: Heap-buffer-overflow in...

ANT-2026-ZZY4987K · wolfSSL · integer-overflow

integer-overflow high CVE-2026-5477 GHSA-grqc-3vmg-p68x Severity Claude high · Security research firm high · Maintainer high Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-ZZY4987K: wolfCrypt...

ANT-2026-ZRDQDR79 · util-linux · heap-use-after-free

use-after-free medium CVE-2026-13595 GHSA-qpmf-9p9c-455w Severity Claude critical · Security research firm high · Maintainer medium Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-ZRDQDR79:...