Advisory Catalog

vLLM: Forged multimodal UUID + P0/P1 processor-cache eviction drift: unauthenticated remote crash of the whole vLLM engine

virtualenv activation scripts run code from a path that contains a placeholder name

virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote

virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST

markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options (regression since 14.0)

virtualenv bash activate runs commands from an environment name with a backslash before $

virtualenv: Bash prompt values can change meaning under older compatibility modes

virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax

virtualenv: Xonsh activation literals depend on the script decoding codec

MCP TypeScript server SDK: Shared transport or server instances delivered one HTTP client's messages to another

MCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation

MCP TypeScript SDK: Experimental tasks were not tied to the session that created them

ApostropheCMS: Unauthenticated resource exhaustion via pre-auth aposBigUpload processing in @apostrophecms/import-export

ApostropheCMS: Authenticated projection-exclusion prototype-member deletion in @apostrophecms/db-connect causes process-wide denial of service

follow-redirects array-form headers bypass cross-origin credential stripping

@angular/router: Denial of Service via RouterLink Query Parameter Retention in Server-Side Rendering (SSR)

ApostropheCMS: Unauthenticated CSV import requests leave rejected uploads in the system temporary directory

launch-editor: `fs.existsSync()` existence check can be bypassed on Windows

filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files

@angular/router: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR)

MLflow FileStore trace IDs allow path traversal and arbitrary file writes

Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips

Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read

Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)

Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)

Pillow: Invalid free in FreeType glyph rendering when a stroker is active

Pillow: MSP RLE decoder expands a tiny file into unbounded memory

Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle

Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0

Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels

Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform

Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS

Pillow: APNG background disposal allocates full canvas before decompression bomb check

Pillow: Out-of-bounds access in _imagingmorph on a zero-width image

Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer

Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images

Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)

Pillow: Infinite loop in MIC n_frames when the embedded TIFF

markdown-it: Quadratic complexity in smartquotes with unmatched closing quotes

follow-redirects sensitiveHeaders regex escaping can expose credential headers

AIOHTTP: File descriptor exhaustion in multipart requests

aiohttp server lacks an initial request/header timeout

aiohttp: Multiple instances of excessive or unbounded memory/CPU use

LoopX serve-status permissive CORS policy exposes control-plane state and private Markdown files

MSAL Node authorization code flow may disclose parameters to an attacker-controlled endpoint

undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor

undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation

undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering

undici vulnerable to Denial of Service via unbounded memory in the EventSource parser

undici vulnerable to Denial of Service via unhandled error on excessive content-encodings