Advisory Catalog

virtualenv bash activate runs commands from an environment name with a backslash before $

virtualenv: Bash prompt values can change meaning under older compatibility modes

virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax

virtualenv: Xonsh activation literals depend on the script decoding codec

filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files

MLflow FileStore trace IDs allow path traversal and arbitrary file writes

Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips

Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read

Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)

Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)

Pillow: Invalid free in FreeType glyph rendering when a stroker is active

Pillow: MSP RLE decoder expands a tiny file into unbounded memory

Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle

Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0

Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels

Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform

Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS

Pillow: APNG background disposal allocates full canvas before decompression bomb check

Pillow: Out-of-bounds access in _imagingmorph on a zero-width image

Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer

Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images

Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)

Pillow: Infinite loop in MIC n_frames when the embedded TIFF

AIOHTTP: File descriptor exhaustion in multipart requests

aiohttp server lacks an initial request/header timeout

aiohttp: Multiple instances of excessive or unbounded memory/CPU use

LoopX serve-status permissive CORS policy exposes control-plane state and private Markdown files

GitPython: arbitrary file read via attacker-controlled branch name in `Head.checkout()` (incomplete fix of CVE-2026-78679)

GitPython command wrappers omit unsafe protocol and option checks

GitPython parse_actor_and_date() is vulnerable to quadratic backtracking on malformed identity lines

GitPython: separate_git_dir leaks env vars via crafted .gitmodules submodule name

NLTK: WekaClassifier passes an unvalidated caller-controlled model path to the weka JVM, bypassing nltk.pathsec containment

pyload-ng: getUserData/get_userdata exposed at Perms.ANY allow any authenticated account to brute-force the administrator password

pyLoad: Privilege revocation and password change through the REST API do not invalidate the user's session

pyLoad: Api.set_user_permission never invalidates the target's session

pyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=)

pyLoad has an authentication bypass in API key validation (check_apikey cache)

Strawberry GraphQL: Synchronous permission checks can treat an awaitable authorization result as truthy

Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry

MongoDB Python Driver: Out-of-bounds read in BSON decoding via a malformed Regex element

CairoSVG: Quadratic-time DoS parsing a crafted SVG <path>

datamodel-code-generator: Protobuf weak-import path traversal allows files to be written outside the temporary directory

Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): a website visited by the developer can trigger agent runs and server-side tool execution on the local chat endpoint

Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends early

wger: Trainer Privilege Escalation - Improper Privilege Management

wger: cross-tenant admin notes/contracts leak via gym=None bypass (5 views)

WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE

Hydra instantiate target blacklist bypasses permit code execution

Hydra logging configuration permits unsafe callable resolution

Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_method