Advisory Catalog

pypdf: Possible large memory usage for streams with multiple filters

pypdf: Possible infinite loop when hitting EOF in standard xref table

pypdf: Possible infinite loop when removing tree items

pypdf: Possible infinite loop in PdfWriter.find_outline_item

pypdf: Possible large memory usage when parsing content streams

pypdf: Possible large memory usage when parsing arrays and dictionaries

pypdf: Possible long runtimes/large memory usage when retrieving form fields

pypdf: Unvalidated JPEG image data loading

Pydantic AI Harness tool-call limit bypass in nested CodeMode calls

vLLM : DoS via unvalidated mm_processor_kwargs in multimodal image processors (Isaac, InternVL, H2OVL, etc.)

vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution

vLLM: Forged multimodal UUID + P0/P1 processor-cache eviction drift: unauthenticated remote crash of the whole vLLM engine

virtualenv activation scripts run code from a path that contains a placeholder name

virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote

djust: Arbitrary absolute-path file read in the find_handlers_for_template MCP tool

virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST

Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit

virtualenv bash activate runs commands from an environment name with a backslash before $

virtualenv: Deletion recovery can change a symlink target's mode

virtualenv: Bash prompt values can change meaning under older compatibility modes

virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax

virtualenv: Generated files can follow existing destination links

virtualenv: Seeded files retain permissions from an older cache

virtualenv: Seed replacement does not contain metadata deletion paths

virtualenv: Xonsh activation literals depend on the script decoding codec

virtualenv: Pip seeding with download omits wheel digest verification

virtualenv: Builtin creation follows linked environment directories

virtualenv: Venv configuration readback can reinterpret path boundaries

uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised

certifi bundles emSign root CAs with compromised intermediate CA keys

virtualenv: Downloaded wheel selection and caching precede verification

virtualenv: Temporary app-data can leave dangling seed package links

filelock: SoftReadWriteLock follows a lock tree swapped in after its first acquire and writes lock records into directories of the user running the lock

filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files