Advisory Catalog

python-cryptography: Duplicate self-signed intermediates can cause exponential path-building

cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing

AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)

AIOHTTP: HTTP request smuggling via WebSocket upgrade

GitPython: Arbitrary file truncation via git rev-list --output argument injection in unguarded Commit.count

AWS CLI: Disabled SSH host key verification in Amazon AWS CLI EMR helper commands

GitPython: Incomplete unsafe_git_archive_options denylist omits --add-file / --add-virtual-file, enabling arbitrary file read via Repo.archive()

GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file overwrite and arbitrary file read

NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection

Transformers save_pretrained path traversal allows arbitrary file writes through chat template names

Keras: HDF5 links can disclose local file contents

gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_files inline mode

sentence-transformers local model loading bypasses trust_remote_code and executes custom Python

Thumbor has path traversal via post-validation URL decoding bypass in file_loader

Thumbor proportion filter allows unbounded post-transform resize leading to remote DoS

Thumbor has Regex Denial of Service (ReDoS) in `convolution` filter

Thumbor convolution filter allows divide-by-zero in C extension leading to remote DoS

Thumbor has HMAC validation bypass via multiple .replace() calls when removing URL signature

Thumbor treats ALLOWED_SOURCES string patterns as unescaped regex, allowing hostname bypass via wildcard dot

Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download / nltk.data.load) defeats ENFORCE mode

Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex

Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True)

Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True)

OnionShare follows symlinks in shared directories, allowing unintended disclosure of local files

OnionShare Receive mode writes uploaded files even when file uploads are disabled

AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate