Medium
CVE-2026-113721
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,997
Reset filters
Medium
CVE-2026-114603
OpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-api
Medium
CVE-2026-96636
Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)
Medium
CVE-2026-96641
Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise
Medium
CVE-2026-112396
Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer
Medium
CVE-2026-113724
virtualenv: Deletion recovery can change a symlink target's mode
Medium
CVE-2026-113716
virtualenv: Builtin creation follows linked environment directories
Medium
CVE-2026-112898
Pillow: Image.quantize() with empty palette leaks uninitialized stack memory
Low
CVE-2026-113731
djust: Arbitrary absolute-path file read in the find_handlers_for_template MCP tool
Medium
CVE-2026-111059
Mercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTML
Medium
CVE-2026-104250
unstructured: Stored XSS via unescaped HTML generation
Medium
CVE-2026-104102
copyparty FTP: upload outside defined volumes (limited path traversal)
Medium
CVE-2026-59951
MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustion
Medium
CVE-2026-112394
Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size
An out-of-bounds read vulnerability in Pillow allows certain decoders to read heap memory past the end of a buffer when processing specific image dimensions. This may disclose adjacent memory into decoded pixel data or cause an application crash.
High
CVE-2026-112392
Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images
Applying rank, median, minimum, or maximum filters to zero-width or zero-height images in Pillow triggers a NULL pointer dereference in ImagingExpand, causing Python worker processes to crash and enabling denial of service.
High
CVE-2026-112405
Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0
A NULL pointer dereference vulnerability in Pillow allows remote attackers to cause a denial of service (process crash) via crafted image files processed through the IPTC loader and Image.merge routine.
Critical
CVE-2026-112900
Pillow: Argument Injection in Ghostscript call, potentially leading into RCE
Pillow lacks sanitization when constructing Ghostscript commands from input filenames, permitting command-line argument injection that can be escalated to remote code execution.
High
CVE-2026-112397
Pillow: Out-of-bounds access in _imagingmorph on a zero-width image
Pillow is vulnerable to an out-of-bounds write when processing zero-width PPM or PGM images during morphology operations. Opening a specially crafted image can cause an application crash and potential memory corruption.
Medium
CVE-2026-102832
JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked
A vulnerability in JupyterLab allows a command link trust prompt to mark a currently active document as trusted instead of the clicked one, potentially allowing buttons in untrusted documents to execute without confirmation.
High
CVE-2026-111064
aiohttp server lacks initial request and header timeout
A vulnerability in aiohttp allows an attacker to keep an idle connection open indefinitely before sending data because the keepalive timeout was not enforced during the initial portion of a request.
Critical
CVE-2026-111057
Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass
A missing comma in Mercury's blocklist leaves the /api/terminals endpoint unprotected, allowing unauthenticated network attackers to spawn an interactive OS-level root shell.
Critical
CVE-2026-111058
Mercury: Unauthenticated Remote Code Execution via /api/kernels
An unauthenticated remote code execution vulnerability in Mercury allows network clients to execute arbitrary Python code as the server process user on default deployments due to anonymous access to kernel endpoints.
High
CVE-2026-108372
LoopX serve-status permissive CORS policy exposes control-plane state and private Markdown files
LoopX serve-status uses an overly permissive CORS policy with wildcard headers on unauthenticated loopback read endpoints. This allows malicious websites visited by the operator to exfiltrate control-plane state and private Markdown files from registered goal repositories without user interaction.
Critical
CVE-2026-96620
Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution
An argument injection vulnerability in the Claude Agent SDK for Python allows arbitrary command execution at CLI startup when an application passes untrusted input as a session ID. Users are advised to upgrade to the latest package version.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.