424722 matches found
PT-2026-117653
Name of the Vulnerable Software and Affected Versions Pillow versions prior to 13.0.0 Description Rank-based filters in the Pillow Python imaging library can dereference invalid image storage when processing a zero-size image. The ImagingExpand function allocates a non-empty output but faults...
PT-2026-117655
Name of the Vulnerable Software and Affected Versions Pillow versions prior to 13.0.0 Description A flaw exists in the Python imaging library where the ImageMorph.MorphOp.apply function can access memory before a row buffer when processing images with a width of zero. This occurs because the PPM...
PT-2026-117677
Name of the Vulnerable Software and Affected Versions Pillow versions 5.1.0 through 12.9.9 Description Pillow can exhaust system resources when parsing an existing PDF during an append operation. The PdfParser follows page-tree child references without tracking cycles or duplications and follows...
PT-2026-117683
Name of the Vulnerable Software and Affected Versions Pillow versions prior to 13.0.0 Description The TIFF encoder in Pillow can perform an out-of-bounds read when processing images with retained TIFF metadata where the plane size is inconsistent with BitsPerSample. An attacker can provide a...
PT-2026-117660
Name of the Vulnerable Software and Affected Versions Pillow versions prior to 13.0.0 Description A double free of image memory can occur when the ImagingScaleAffine function encounters a selective allocation failure. This happens during the fast path processing of Transform.EXTENT or pure...
PT-2026-117685
Name of the Vulnerable Software and Affected Versions Pillow versions 9.1.0 through 12.x Description Pillow can disclose uninitialized stack memory when the Image.quantize function uses an empty palette. This occurs because the ImagingPaletteCacheUpdate function leaves a local cache array...
PT-2026-117432
Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that allows users with webhook permissions to reach internal addresses via DNS rebinding. Attackers can return a public address during WebhookService::isSafeEndpoint validation and an internal address when Guzzle...
PT-2026-131972
TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 11.2.11-tuxcare.1...
PT-2026-131973
TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 5.1.0-tuxcare.1...
PT-2026-130894
TuxCare rebuilt @angular/platform-browser to address 1 CVE. Fixed in 15.2.1-tuxcare.6...
PT-2026-117303
A vulnerability was determined in DeepPavlov up to 1.7.0. This affects the function MultiTaskPipelinePreprocessor. init of the file deeppavlov/models/preprocessors/multitask preprocessor.py. This manipulation of the argument preprocessor causes code injection. The attack is possible to be carried...
PT-2026-133119
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 5 CVEs. Fixed in 2.7.0-tuxcare.1...
PT-2026-133124
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 8 CVEs. Fixed in 2.18.5-tuxcare.1...
PT-2026-118034
ageLANServer: Unbounded JSON Array Allocation in AoE3 Cloud getFileURL Endpoint Leads to Remote Denial of Service in github.com/luskaner/ageLANServer/server...
PT-2026-131413
TuxCare rebuilt @angular/platform-browser-dynamic to address 14 CVEs. Fixed in 7.2.1-tuxcare.3...
PT-2026-131405
TuxCare rebuilt @angular/platform-browser-dynamic to address 9 CVEs. Fixed in 18.2.14-tuxcare.11...
PT-2026-131407
TuxCare rebuilt @angular/platform-browser-dynamic to address 14 CVEs. Fixed in 12.2.17-tuxcare.7...
PT-2026-131414
TuxCare rebuilt @angular/platform-browser-dynamic to address 15 CVEs. Fixed in 15.2.1-tuxcare.2...
PT-2026-131403
TuxCare rebuilt @angular/platform-browser-dynamic to address 1 CVE. Fixed in 12.2.0-tuxcare.2...
PT-2026-131401
TuxCare rebuilt @angular/platform-browser-dynamic to address 1 CVE. Fixed in 5.2.7-tuxcare.2...
PT-2026-131404
TuxCare rebuilt @angular/platform-browser-dynamic to address 2 CVEs. Fixed in 6.1.10-tuxcare.8...
PT-2026-131412
TuxCare rebuilt @angular/platform-browser-dynamic to address 17 CVEs. Fixed in 18.1.2-tuxcare.2...
PT-2026-133187
TuxCare rebuilt @babel/plugin-transform-destructuring to address 1 CVE. Fixed in 7.29.0-tuxcare.1...
PT-2026-133148
TuxCare rebuilt @babel/plugin-transform-react-jsx-source to address 1 CVE. Fixed in 7.16.7-tuxcare.3...
PT-2026-133201
TuxCare rebuilt @storybook/preact-webpack5 to address 1 CVE. Fixed in 7.0.7-tuxcare.1...
PT-2026-133196
TuxCare rebuilt @babel/plugin-transform-destructuring to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...
PT-2026-133200
TuxCare rebuilt @babel/plugin-transform-destructuring to address 2 CVEs. Fixed in 7.23.0-tuxcare.1...
PT-2026-133179
TuxCare rebuilt minimatch to address 3 CVEs. Fixed in 5.1.1-tuxcare.1...
PT-2026-133185
TuxCare rebuilt markdown-it to address 2 CVEs. Fixed in 12.3.0-tuxcare.2...
PT-2026-132908
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the pure Python parser accepts ambiguous HTTP request framing. An unauthenticated attacker can consequently smuggle requests when an application uses AIOHTTP NO EXTENSIONS or otherwise runs without a...
PT-2026-117333
Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.2.0 through 4.18.4 Apache Camel versions 4.19.0 through 4.22.0 Description A path traversal issue exists in the Apache Camel SMB component. The remote-file consumers build absolute remote paths by concatenating a...
PT-2026-133188
TuxCare rebuilt @babel/plugin-transform-destructuring to address 1 CVE. Fixed in 7.12.18-tuxcare.2...
PT-2026-133149
TuxCare rebuilt @babel/plugin-transform-react-jsx-source to address 1 CVE. Fixed in 7.25.7-tuxcare.4...
PT-2026-133151
TuxCare rebuilt @babel/plugin-transform-react-jsx-source to address 1 CVE. Fixed in 7.18.9-tuxcare.3...
PT-2026-131765
TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 5.2.11-tuxcare.9...
PT-2026-131762
TuxCare rebuilt @angular/service-worker to address 11 CVEs. Fixed in 6.0.1-tuxcare.4...
PT-2026-131760
TuxCare rebuilt @angular/service-worker to address 20 CVEs. Fixed in 16.2.11-tuxcare.1...
PT-2026-131312
TuxCare rebuilt @angular/platform-server to address 1 CVE. Fixed in 15.2.10-tuxcare.4...
PT-2026-131310
TuxCare rebuilt @angular/platform-server to address 2 CVEs. Fixed in 12.2.17-tuxcare.9...
PT-2026-131319
TuxCare rebuilt @angular/platform-server to address 1 CVE. Fixed in 18.1.2-tuxcare.3...
PT-2026-131797
TuxCare rebuilt @angular/service-worker to address 3 CVEs. Fixed in 10.2.5-tuxcare.12...
PT-2026-131402
TuxCare rebuilt @angular/platform-browser-dynamic to address 2 CVEs. Fixed in 8.0.3-tuxcare.4...
PT-2026-117244
A weakness has been identified in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This affects the function mysqli query of the file farmers/add.php. Executing a manipulation of the argument f no/f id/f name/f locallity/f ac/f phon...
PT-2026-131406
TuxCare rebuilt @angular/platform-browser-dynamic to address 14 CVEs. Fixed in 13.4.0-tuxcare.7...
PT-2026-131411
TuxCare rebuilt @angular/platform-browser-dynamic to address 10 CVEs. Fixed in 5.1.0-tuxcare.2...
PT-2026-131415
TuxCare rebuilt @angular/platform-browser-dynamic to address 12 CVEs. Fixed in 8.0.3-tuxcare.5...
PT-2026-131408
TuxCare rebuilt @angular/platform-browser-dynamic to address 10 CVEs. Fixed in 11.2.14-tuxcare.7...
PT-2026-131410
TuxCare rebuilt @angular/platform-browser-dynamic to address 7 CVEs. Fixed in 4.3.5-tuxcare.3...