Advisory Catalog

Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching

A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The manipulation leads to deserialization. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The project w

MindSQL is vulnerable to Code Injection through its ask_db function

pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback

Copyparty ftp/sftp: Sharing a single file did not fully restrict source-folder access

dbt-common's commonprefix() doesn't protect against path traversal

Django has a Race Condition vulnerability

Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence

wger: IDOR via user-unscoped cache keys on routine API actions exposes workout data

pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams

Apache Superset allows authenticated users to view sensitive data without explicit permissions

datapizza-ai has unsafe deserialization via pickle.loads() in RedisCache

datapizza-ai: Server-Side Template Injection in ChatPromptTemplate via Jinja2 Template Handler

Fickling has a detection bypass via stdlib network-protocol constructors

Flask session does not add `Vary: Cookie` header when accessed in some ways

Open Babel has NULL pointer dereference in MOL2 OBAtom::SetFormalCharge

Open Babel has an out-of-bounds read in CIF transform3d::DescribeAsString

Hugging Face Smolagents has a Server-Side Request Forgery issue

A security flaw has been discovered in admesh up to 0.98.5. This issue affects the function stl_check_normal_vector of the file src/normals.c. Performing a manipulation results in heap-based buffer overflow. The attack must be initiated from a local position. The exploit has been released to the pub

MindsDB affected by a SSRF vulnerability

LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages

pip Path Traversal vulnerability

Llama Stack exposes secret in initialization log

Moonraker affected by LDAP search filter injection

FastAPI Api Key has a timing side-channel in verify_key that allows statistical key validity detection

Weblate leaks information via screenshots

Chainlit contains an authorization bypass vulnerability

AcademySoftwareFoundation OpenColorIO has an out-of-bounds vulnerability

LIEF is vulnerable to segmentation fault

pypdf has possible long runtimes for malformed startxref

pypdf has possible long runtimes for missing /Root object with large /Size values

loggingredactor converts non-string types to string types in logs

AIOHTTP Vulnerable to Cookie Parser Warning Storm

AIOHTTP has unicode match groups in regexes for ASCII protocol elements

badkeys vulnerable to ASCII control character injection on console via malformed input

pretix has Broken Access Control Allowing Cross-User File Access via UUID

pretix has Broken Access Control Allowing Cross-User File Access via UUID

PyMdown Extensions has a ReDOS bug in its Figure Capture extension

Weblate has improper validation upon invitation acceptance

Mayan EDMS has an Open Redirect through the /authentication/ file

Mayan EDMS is vulnerable to XSS through the /authentication/ file

Calibre-Web Has a Stored Cross-Site Scripting (XSS) Vulnerability via the 'username' Field During User Creation

pretix has Email Content Injection Through Maliciously Formatted Names

Spotipy has a XSS vulnerability in its OAuth callback server

Overhang Tutor Discloses Sensitive Information due to Improper Cache-Control

OMERO.web uses jquery-form library, which may be vulnerable to XSS attack

An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch.profiler.profile (PythonTracer) to crash or hang during finalization, leading to a Denial of Service (DoS).

OpenEXR Makes Use of Uninitialized Memory

Open redirect endpoint in Datasette

Weblate leaks the IP of project member inviting user to be reviewer in Audit log