Medium
CVE-2026-114603
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 691
Reset filters
Medium
CVE-2026-96641
Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise
Medium
CVE-2026-113716
virtualenv: Builtin creation follows linked environment directories
Medium
CVE-2026-112901
Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes
Low
CVE-2026-113731
djust: Arbitrary absolute-path file read in the find_handlers_for_template MCP tool
Medium
CVE-2026-62268
borg extract might modify out-of-tree files when extracting maliciously crafted archives
Medium
CVE-2026-112394
Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size
An out-of-bounds read vulnerability in Pillow allows certain decoders to read heap memory past the end of a buffer when processing specific image dimensions. This may disclose adjacent memory into decoded pixel data or cause an application crash.
High
CVE-2026-112392
Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images
Applying rank, median, minimum, or maximum filters to zero-width or zero-height images in Pillow triggers a NULL pointer dereference in ImagingExpand, causing Python worker processes to crash and enabling denial of service.
Critical
CVE-2026-112900
Pillow: Argument Injection in Ghostscript call, potentially leading into RCE
Pillow lacks sanitization when constructing Ghostscript commands from input filenames, permitting command-line argument injection that can be escalated to remote code execution.
Medium
CVE-2026-113794
pypdf: Possible infinite loop when hitting EOF in standard xref table
An attacker can trigger an infinite loop in pypdf by supplying a crafted, incomplete PDF file that terminates inside the xref table.
Low
CVE-2026-111749
AIOHTTP: Cookie from Subdomain Can Remove Host-Only Scope from Existing Cookies
A vulnerability in aiohttp allows a subdomain to remove the Host-Only flag from existing parent domain cookies, potentially weakening cookie scoping protections.
Medium
CVE-2026-102832
JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked
A vulnerability in JupyterLab allows a command link trust prompt to mark a currently active document as trusted instead of the clicked one, potentially allowing buttons in untrusted documents to execute without confirmation.
Medium
ghsa-pcc4-rvhr-2pr8
Graphify Fortran extractor: incomplete cpp #include hardening allows arbitrary host-file read/exfiltration when indexing an untrusted repo
Incomplete cpp #include hardening in the Graphify Fortran extractor allows arbitrary host files to be read and exfiltrated into the knowledge graph when indexing an untrusted repository.
Critical
CVE-2026-111058
Mercury: Unauthenticated Remote Code Execution via /api/kernels
An unauthenticated remote code execution vulnerability in Mercury allows network clients to execute arbitrary Python code as the server process user on default deployments due to anonymous access to kernel endpoints.
High
CVE-2026-108372
LoopX serve-status permissive CORS policy exposes control-plane state and private Markdown files
LoopX serve-status uses an overly permissive CORS policy with wildcard headers on unauthenticated loopback read endpoints. This allows malicious websites visited by the operator to exfiltrate control-plane state and private Markdown files from registered goal repositories without user interaction.
Medium
CVE-2026-107841
pacioli: A submit consent marker licensed cancellation of caller-named pre-existing documents
An authorization bypass in pacioli's document-layer consent gate allows nested operations to cancel caller-specified pre-existing documents without human consent markers or denial audit entries.
High
ghsa-889w-m37p-88m5
pyLoad: Api.set_user_permission never invalidates the target's session
High
ghsa-fr26-jjhm-638c
pyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=)
Medium
CVE-2026-75597
pyLoad: Unauthenticated access to /web/<path:filename> bypasses authentication on sensitive templates and leaks internal error details via exception attribute typo
Medium
CVE-2026-107716
Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry
High
CVE-2026-61442
PraisonAI: Platform member PATCH routes allow owner resource rewrites and project lead reassignment delete bypass
Medium
CVE-2026-61440
PraisonAI: Platform members can rewrite shared labels and owner issue labels without owner/admin authorization
Medium
CVE-2026-60090
PraisonAI: PGVector and Cassandra knowledge stores interpolate vector dimensions into DDL
Low
CVE-2026-107293
Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False`
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.