CVE-2026-118938

In Trail of Bits fickling through 0.1.12, a pickle STACKGLOBAL operand carrying a dotted qualname for example "Values.readfile" is resolved by pickle's findclass through getattribute to an arbitrary attribute path rather than to a module-level function. Fickling records only the leading component...

CVE-2026-16760

In Trail of Bits fickling through 0.1.12, the processimport method in fickle.py adds an imported name to the likelysafeimports set whenever the source module is present in sys.stdlibmodulenames and the name is absent from the UNSAFEIMPORTS denylist, without inspecting what the name resolves to or...

CVE-2026-59993

Picotls is a TLS protocol library that allows users select different crypto backends based on their use case. In affected revisions through 44bc503, when picotls is used as a "client-side TLS stack", a peer can send a "HelloRetryRequest" followed by a "spoofed Hello message" that causes a...

CVE-2026-62297

ag-psd is a JavaScript library for reading and writing Photoshop Document files. Before the allocation-limit remediation attempt in version 31.0.0, "readPsd" commits image and layer buffers from attacker-declared PSD geometry before validating the declarations against the actual available data or...

CVE-2026-62979

jack lets users share media libraries through their Radarr/Sonarr stack, peer-to-peer. Prior to 0.1.0, "middleware/handle-error.ts" serializes raw "FetchError" objects into HTTP responses. "lib/servers/base.ts" attaches outbound request headers on upstream non-success responses and...

CVE-2026-62967

ZTNET is a ZeroTier web UI for private controllers with multiuser and organization support. Prior to 0.8.0, any authenticated low-privilege user can permanently deactivate another account, including an administrator, through "POST /api/auth/user/invalidateUser". In...

CVE-2026-62966

ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. Prior to version 3.11.2, the multipart parser in "src/WebRequest.cpp" frees "itemBuffer" and sets it to NULL when "BOUNDARYORDATA" matches the closing boundary of a file part, before...

CVE-2026-62965

SABnzbd is an open source automated Usenet download tool. Prior to 5.1.0Beta3, orphan-job management in "sabnzbd/api.py" accepts the user-controlled "value" parameter without path confinement before "os.path.join" with "downloaddir". An absolute path discards that base directory. An attacker with...

CVE-2026-62958

libriscv is a RISC-V sandbox and emulator. Prior to 1.18, a crafted ELF binary can cause out-of-bounds reads in the host emulator. "Memory::binaryloader" checks "PTLOAD" program-header bounds, but "Memory::serializeexecutesegment" trusts section-header "shoffset" and "shsize" when locating ".text...

CVE-2026-62968

Dream Displays provides in-game screens for streaming videos in Minecraft. From 1.5.0 until 1.8.2, user-controlled input can influence arguments passed to "yt-dlp" under specific conditions. Unintended command-line options may be interpreted by "yt-dlp", potentially altering its behavior. This...

CVE-2026-62860

Picsou is a self-hosted personal finance dashboard. In the affected login implementation, the "/api/auth/login" endpoint reveals whether a username exists through a timing discrepancy. In "backend/src/main/java/com/picsou/controller/AuthController.java", "AuthController.login" throws...

CVE-2026-54610

LibreDWG is a free C library to read and write DWG files. Prior to 0.14, "bitTVtoutf8" in "src/bits.c" can write to the caller-provided "src" buffer despite accepting const input. On an "iconv" error other than "E2BIG", the function frees its output buffer and passes the original input alias to...

CVE-2026-62250

LibreDWG is a free C library to read and write DWG files. Prior to 0.14.8413, a crafted pre-R13 DWG can make "decodepreR13entities" in "src/decode.c" enter a nonterminating loop that allocates a new object each iteration. "decodepreR13" in "src/decoder11.c" computes "size" from the raw...

CVE-2026-62254

LibreDWG is a free C library to read and write DWG files. Prior to 0.14, a specially crafted R13-R2000 DWG can trigger algorithmic resource exhaustion in "decodeR13R2000" in "src/decode.c". The class-decoding loop performs "realloc" on every iteration without a sanity check on "numclasses"...

CVE-2026-62864

Ring is a Clojure web applications library inspired by Python's WSGI and Ruby's Rack. Prior to 1.15.5, "wrap-nested-params" in the "ring.middleware.nested-params" namespace uses a backtracking regular expression to match parameter names from URL query strings and HTTP request bodies. An attacker...

CVE-2026-62863

MoLing is a computer-use and browser-use based MCP server. Prior to 0.5.0, when MoLing runs in SSE mode using "-l", its "/sse" and "/message" HTTP endpoints do not authenticate requests and the "mcp-go" dependency sets "Access-Control-Allow-Origin: ". A malicious web page can open a cross-origin...

CVE-2026-119343

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 3.0.0, POST /api/v1/ai/tools/create-pdf-from-html-agent accepts attacker-controlled htmlContent and passes it to WeasyPrint without CustomHtmlSanitizer, unlike the sanitized...

CVE-2026-40573

NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. Prior to version 0.25-beta.1, the "Nova" interpreter runs in Ring 0 with unrestricted kernel-memory access. Loading a malicious ".nv" script through the shell permits a local user to execute code with kernel privileges...

CVE-2026-62849

ThingLinks is an enterprise IoT platform. Prior to 1.4.0, an unauthenticated SQL injection vulnerability in the "TDengine TDS APIs" allows request-controlled JSON field values submitted to "/anyUser/tds/insertTableData" to reach unsafe SQL construction in the "TDS mapper". A remote unauthenticate...

CVE-2026-119342

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. From 2.13.1 until 2.13.2, the POST /api/v1/convert/svg/pdf endpoint renders attacker-supplied SVG through Apache Batik, and a scheme-less root-relative image reference bypasses...

CVE-2026-62853

ThingLinks is an enterprise IoT platform. Prior to 1.4.0, the "/groovyScriptTest/registerScript" endpoint accepts user-supplied Groovy script content and passes it to an unsandboxed "Groovy compilation and loading" flow. An authenticated attacker can provide code that is compiled and instantiated...

CVE-2026-117645

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in phoenixframework phoenixhtml allows an attacker who controls attribute names to inject attributes and script into rendered HTML via Phoenix.HTML.attributesescape/1. attributesescape/1 in...

CVE-2026-119341

Tesseract is an open source OCR engine. Prior to 5.5.4, ReadAdaptedClass in src/classify/adaptive.cpp raw-reads an ADAPTCLASSSTRUCT from a pre-adapted-template .a file without neutralizing TempProtos and Config pointer fields before any destructor path. When the legacy engine is selected,...

CVE-2026-62847

Metalama is a Roslyn-based open-source patterns and architecture toolkit for C. Prior to 2025.1.18, 2026.0.25 and 2026.1.19, Metalama.Framework and Metalama.Tool load and execute compile-time assemblies, auxiliary executable tools and embedded helper assemblies from predictable temporary...

CVE-2026-119340

Tesseract is an open source OCR engine. Prior to 5.5.4, GENERIC2DARRAY::DeSerializeSize in src/ccstruct/matrix.h reads matrix dimensions as signed int32t values and compares them only with UINT16MAX, allowing negative values to reach ResizeNoInit. Negative dimensions or a 65535 by 65535 product c...

CVE-2026-117666

Improper Validation of Certificate with Host Mismatch vulnerability in deadtrickster sslverifyfun allows an adversary in the middle to impersonate a TLS peer via a certificate that carries a partial-label wildcard. trymatchwildcard/4 in src/sslverifyhostname.erl anchors only the text before and...

CVE-2026-62848

Metalama is a Roslyn-based open-source patterns and architecture toolkit for C. From 2023.0.101-rc until 2025.1.18, 2026.0.25 and 2026.1.19, the Windows Visual Studio integration deserializes local named-pipe messages without restricting which CLR types can be instantiated. The pipe connects...

CVE-2026-62300

Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service. In daemon deployments up to and including version 1.1.0, "POST /pins" in "src/filecoin-pinning-server.ts" checks a caller-supplied CID with "CID.parse" and passes it to "pinStore.pin", but does not...

CVE-2026-119339

Tesseract is an open source OCR engine. Prior to 5.5.4, WeightMatrix::DeSerialize trusts a mode byte from a traineddata LSTM network and calls WeightMatrix::DeSerializeOld when kDoubleFlag is clear. In default FASTFLOAT builds, DeSerializeOld invokes ASSERTHOST instead of returning an error, so...

CVE-2026-58412

Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service. Prior to 1.1.0, the upload GitHub Action's fork detection in "upload-action/src/build.js" checks only "event.pullrequest". In the documented two-workflow pattern, an untrusted fork pull-request workflo...

CVE-2026-119338

Tesseract is an open source OCR engine. From 5.4.0 until 5.5.4, AppendLinePolygon in src/api/pagerenderer.cpp destroys the caller-owned right-to-left Pta accumulator while receiving it by value, leaving linetoprtlpts and linebottomrtlpts dangling. On an upright Hebrew or Arabic page at the defaul...

CVE-2026-119337

RAGFlow is an open-source RAG Retrieval-Augmented Generation engine. From 0.25.2 until 0.27.3, POST /api/v1/agents/chat/completions invokes completionopenai and returns through the openai-compatible branch before UserCanvasService.accessible checks whether the caller may access the requested agen...

CVE-2026-55098

Arc is an open, SQL-native time-series database for telemetry. Prior to the repository-verified 26.06.2 repair, the remediation of "CVE-2026-47735" leaves a cross-database authorization bypass through DuckDB table-valued I/O functions. In "internal/database/sandbox.go", "alloweddirectories" uses...

CVE-2026-62333

OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x line and in affected 2.0 and 2.1 prereleases, "MemoryMerkleAir" does not forbid Merkle expansion rows at "parentheight" = 0 or below while "expanddirection" != 0. A malicious prove...

CVE-2026-62334

OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x line and in affected 2.0 and 2.1 prereleases, "OpenVmHalo2Verifier.verify" constructs raw proof calldata from user-controlled "proofData", performs a "staticcall" to "addressthis",...

CVE-2026-119336

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.4.2 until 6.5, the root-run advanced/Scripts/updatecheck.sh cron job applies truncate -s 0 and chmod 644 to /etc/pihole/versions while following symbolic links in a directory...

CVE-2026-119335

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. Prior to 6.5, advanced/Scripts/utils.sh getFTLPID attempts to validate the pihole-owned /run/pihole-FTL.pid file with expr "$FTLPID" : "^:digit:", but this rejects only values whose...

CVE-2026-62335

OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x line and in affected 2.0 and 2.1 prereleases, "OpenVmHalo2Verifier.verify" accepts "appExeCommit" and "appVmCommit" as "bytes32" values without checking that either is less than th...

CVE-2026-119334

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. Prior to 6.5, gravity.sh checks file:// adlist readability with sudo -u pihole test -r but then allows curl, sometimes running as root, to normalize URL dot segments and open a...

CVE-2026-62337

SNARK Verifier is a generic SNARK verifier. Prior to 0.2.5, the Halo 2 aggregation circuit can mishandle proof points encoded as the point at infinity. "EcPointLoader::multiscalarmultiplication" places a "Value::Assigned" base paired with "Value::ConstantONE" into its unscaled variable-base list...

CVE-2026-119333

draw.io Desktop is the official Electron build of draw.io. Prior to 31.5.2, the Windows application launched powershell and attrib by bare executable name from src/main/electron.js. When draw.io Desktop was not already running, opening a diagram from File Explorer made the diagram directory the...

CVE-2026-61618

SNARK Verifier is a generic SNARK verifier. Prior to 0.2.5, KZG accumulator public-instance limbs are decoded without consistently enforcing canonical limb bounds before elliptic-curve coordinate reconstruction. "PlonkProof::read" selects scalars using "accumulatorindices" and passes them to...

CVE-2026-119332

Ladybird is a truly independent web browser. Prior to 209579c96473c75bd5eba9701fcadb841a045964, FinalizationRegistry::cleanup in Libraries/LibJS/Runtime/FinalizationRegistry.cpp removed a dead record from mrecords, retained an iterator to the next FinalizationRecord, and then invoked...

CVE-2026-61620

HoneySQL turns Clojure data structures into SQL. From 2.0.0 until 2.7.1392, applications that pass user input or other arbitrary data into the HoneySQL "DSL" by calling "keyword" or "symbol" on that input can produce SQL strings that facilitate SQL injection when executed unchanged by a "JDBC"...

CVE-2026-119331

Ladybird is a truly independent web browser. Prior to the c0d68bddf3e3616e5173835f0f4c155ee9700d91 commit, CSSStyleSheet.cssRules, insertRule, and deleteRule in Libraries/LibWeb/CSS/CSSStyleSheet.cpp did not enforce the stylesheet origin-clean flag with the required SecurityError, even though...

CVE-2026-116252

pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname argument unchanged. libpq treats a --dbname value containing "=" or a postgresql:// URI as a full connection string, whose keywords override the host, port and other settings pgAdmin had supplied. A databas...

CVE-2026-116251

pgAdmin 4 did not invalidate a user's existing sessions when their password changed, either through the user's own change password dialog or through an administrator resetting it in User Management. A session established before the change, for example on another device or by someone who had...

CVE-2026-116250

In server mode pgAdmin 4 validates a path a user gives for a file in their storage directory with checkaccesspermission and then opened it by name. Several places opened it with a plain open or handed the path to a utility that opened it later: the servers.json export and import and the import fi...

CVE-2026-116249

In server mode pgAdmin 4 resolves a server's password file, SSL certificate, key, CRL and SSH tunnel identity file relative to the user's storage directory, but getcompletefilepath only stripped leading slashes before joining the two. A path such as "..//.pgpass", set through the server dialog, t...

CVE-2026-116248

In pgAdmin 4 server mode only administrators are meant to share a server with all users; the server dialog shows the Shared switch only to them. The create and update endpoints of the server API, however, stored the "shared" flag and shared username they were sent, so any user able to register a...