Path Equivalence

Overview fast-uri is a Dependency-free RFC 3986 URI toolbox Affected versions of this package are vulnerable to Path Equivalence via the serialize / normalize functions, which incorrectly applied RFC 3986 removedotsegments to relative-path references. That algorithm is defined only for merged...

Improper Validation of Specified Quantity in Input

Overview fast-uri is a Dependency-free RFC 3986 URI toolbox Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input via canonicalizeHost, which passes the host directly to new URL'http://' + host without verifying that the WHATWG parser consumed the...

Encoding Error

Overview fast-uri is a Dependency-free RFC 3986 URI toolbox Affected versions of this package are vulnerable to Encoding Error via the decodeValidScheme function, which decoded percent-encoded URI schemes using the deprecated unescape global including the JavaScript-only %uXXXX form before...

Path Equivalence

Overview fast-uri is a Dependency-free RFC 3986 URI toolbox Affected versions of this package are vulnerable to Path Equivalence via the serialize, normalize, and resolve functions when called with the non-default option reference: 'suffix' on a reference that has no authority. A bare colon in th...

Infinite loop

Overview Affected versions of this package are vulnerable to Infinite loop via incorrect initialization of nframes and isanimated in TiffImagePlugin.TiffImageFile, where nframes was set inside open rather than init, allowing it to be overwritten by a MicImageFile subclass. An attacker can supply ...

Infinite loop

Overview Affected versions of this package are vulnerable to Infinite loop via unbounded recursion in PdfParser.getvalue and PdfParser.readindirect in src/PIL/PdfParser.py. Both functions previously defaulted maxnesting to -1, meaning no nesting limit was enforced when parsing PDF structures. An...

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read via incorrect row size calculation for P;2L and P;4L raw decode modes in RawDecode.c and decode.c. When decoding images using these bit-plane palette raw modes, the buffer size is computed using pixel-based bit arithmet...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the decodeAsRGBA and decodeTile functions in src/libImaging/TiffDecode.c when processing a TIFF image whose unpacker row size exceeds the libtiff-decoded row size. An attacker can supply a malformed TIFF...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via ImagingExpand in src/libImaging/Filter.c when processing a zero-dimension image through RankFilter or related filters. An attacker can supply an image with a width or height of zero, triggering undefined...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free via ImagingLibTiffEncode in src/libImaging/TiffDecode.c when a libtiff encode error occurs. The cleanup logic in the error path frees or closes TIFF resources calling TIFFCleanup/TIFFClose or freeclientstate-data without...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via tiffWriteProc in src/libImaging/TiffDecode.c when saving a TIFF image to a BytesIO object. The buffer size calculation uses state-size instead of the current write location state-loc when determining wheth...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the JPEG decoder in src/libImaging/JpegDecode.c when processing a JPEG stream whose declared output width or component count exceeds the dimensions used to size the scanline buffer. Because the buffer is...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in GifImagePlugin.seek when processing a multi-frame GIF image. The decompression bomb check calls Image.decompressionbombcheck but, prior to the fix, assigns the oversized dimensions...

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via missing decompression bomb checks in the seek methods of DcxImagePlugin, MicImagePlugin, and MpoImagePlugin. When a multi-frame image file DCX, MIC, or MPO format is opened and seeked to a...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via repeated string concatenation in the seek function of src/PIL/GifImagePlugin.py when parsing GIF comment extension blocks. Each comment block encountered during frame seeking is appended to a growi...

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read via the decodeStrip and decodeTile functions in src/libImaging/TiffDecode.c, where the TIFF strip and tile decode buffers are reallocated without zeroing the region beyond previously decoded data. When a codec such as...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the ImagingMerge function in src/libImaging/Bands.c when merging image32 4-bytes-per-pixel, single-band images. The function fails to reject bands whose pixelsize is 4, allowing an attacker to trigger a cras...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via ImagingJpegDecode in src/libImaging/JpegDecode.c when processing a JPEG file whose header declares scanlines wider or with more components than the tile extents used to size the scanline buffer. Because th...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free via ImagingScaleAffine in src/libImaging/Geometry.c, which deletes a caller-owned output image when its lookup-table allocation fails. When resize calls ImagingTransform and the internal affine transform encounters a memo...

Infinite loop

Overview Affected versions of this package are vulnerable to Infinite loop via PdfParser.rewritepages in src/PIL/PdfParser.py when processing a PDF file whose /Parent chain contains a cycle. The function walks the /Parent chain of every pre-existing page upward, stopping only when it reaches a no...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the apply function in src/imagingmorph.c when a MorphOp operation is applied to an image with zero width or zero height. The missing bounds check allows an attacker to trigger a crash by supplying an empty image ...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification via the MSP image decoder in src/PIL/MspImagePlugin.py, where a malicious MSP file with run-length encoded rows can cause the decoder to expand more data than the image widt...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via repeated string concatenation in the seek function of src/PIL/GifImagePlugin.py when parsing GIF comment extension blocks. An attacker can supply a GIF file containing many comment blocks, causing...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the TIFF image encoder in TiffImagePlugin.py and src/encode.c, where the ColorMap length is not validated against the BitsPerSample tag value. Prior to the fix, the encoder hardcoded a requirement of 768 entries...

Use of Uninitialized Variable

Overview Affected versions of this package are vulnerable to Use of Uninitialized Variable via fontrenderimpl in src/imagingft.c, where a FTGlyph object can be freed via FTDoneGlyph during the rendering loop when a stroker is active, and then freed a second time in the glypherror cleanup path due...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via the nextobjectid function in src/PIL/PdfParser.py when saving a multi-frame image as a multi-page PDF using im.savefp, "PDF", saveall=True. The function computes the next PDF object ID by calling m...

Use of Uninitialized Resource

Overview Affected versions of this package are vulnerable to Use of Uninitialized Resource via the TIFF strip and tile decoder in src/libImaging/TiffDecode.c, when decoding TIFF images using codecs such as JPEG or Group 4 that successfully decode fewer rows than the declared strip or tile length...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion via linearizepagetree in src/PIL/PdfParser.py, where a PDF file containing a deeply nested page tree causes unbounded recursion that exhausts the call stack. An attacker can supply a malicious PDF with an...

Regular Expression Denial of Service (ReDoS)

Overview Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the XBM image parser in src/PIL/XbmImagePlugin.py when processing a malformed XBM file. The previous implementation read up to 512 bytes of the file header and applied a regular expression...

Use of Uninitialized Variable

Overview Affected versions of this package are vulnerable to Use of Uninitialized Variable in the topalette function in src/libImaging/Convert.c when quantize is called with an empty palette. An attacker can trigger an unhandled error condition by supplying a palette with zero entries, causing th...

Incorrect Authorization

Overview parse-server is a version of the Parse backend that can be deployed to any infrastructure that can run Node.js. Affected versions of this package are vulnerable to Incorrect Authorization via RestWrite.prototype.execute in src/RestWrite.js, where authorization checks for User update...

Incorrect Authorization

Overview parse-server is a version of the Parse backend that can be deployed to any infrastructure that can run Node.js. Affected versions of this package are vulnerable to Incorrect Authorization in the handleSession function within src/RestWrite.js when creating a session, where class-level...

Malicious Package

Overview tailwind-animate-kit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview tailwindcss-visual-kit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Malicious Package

Overview tailwindcss-effect-lab is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Malicious Package

Overview sc-announcer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview tailwind-kinetic is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview tailwind-animaflow-kit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Malicious Package

Overview animatecss-tailwind-helper is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview animatecss-tailwind-binary is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview animate-twcss-pack is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview animatecss-tailwind-vectrix is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview tailwind-animatecss-kit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious Package

Overview chatgpt-pro-setup-tool is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Malicious Package

Overview codex-setup is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious Package

Overview @an1mshnpmb9c84920/pipe-compat-m19r8 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization a...

Malicious Package

Overview chatgpt-desktop-setup is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview chatgpt-pro-activator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @an1mshnpmb9c84920/gat-scope-target-125ec19a is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

Malicious Package

Overview claude-desktop-setup is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...