Advisory Catalog

pypdf: Possible large memory usage when retrieving Roman page labels

basic-ftp: Quadratic-time CPU denial of service in Client.list() Unix directory-listing parser (RE_LINE backtracking)

Angular Server-Side Rendering (SSR): Denial of Service via Numeric URL Matrix Parameters

league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scan

Astro: Malformed port in the Host header can crash the Node adapter

@nestjs/platform-fastify: Path-scoped middleware bypass via absolute-form request targets

Socket.IO: Engine.IO Protocol Revision Mismatch DoS

adm-zip: Duplicate ZIP entry names: getEntry() and extractAllTo() resolve to different content

adm-zip: Unhandled error event in async DEFLATE decompression crashes Node.js process (DoS)

JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboard

simple-git allows command execution through unblocked Git configuration includes

adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation

Electron: Sandboxed preload code cache can be poisoned by a compromised renderer

PHPCSUtils: Remote code execution via eval() in AbstractArrayDeclarationSniff::getActualArrayKey()

Electron: File and HTTP protocol handlers allow cross-origin reads without corsEnabled

Electron: Windows opened from a sandboxed top-level document do not inherit its sandbox restrictions

Electron drops inherited HTML sandbox restrictions for popups opened through OpenURLFromTab

urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory

urllib3: HTTPS proxy TLS configuration may be ignored or overridden

Socket.IO: Prototype Pollution via Unsafe Client Session Lookup

Nest: Remote process termination via a deeply nested microservice message pattern

Angular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPE

brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion

brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion

PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion

PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set

PyJWT accepts public JWK containers as HMAC secrets

PyJWT BOM Bypass

PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard

PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt / verify_signature=False)

PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)

@grpc/grpc-js: In certain configurations, getAuthContext can return unauthorized certificates as though they were authorized

Apple Multiple Products Out-of-Bounds Write Vulnerability

Axios: Prototype Pollution Gadget in axios toFormData Options

Axios: maxRedirects: 0 is not enforced by the fetch adapter, allowing redirect-based SSRF

Axios: ReDoS (O(N²)) in shouldBypassProxy host normalization, reachable via untrusted redirect Location

Axios: Node HTTP adapter prototype-pollution gadget allows request socket hijack via inherited createConnection

Axios: ReDoS in fromDataURI data: URL parser freezes the Node event loop (DoS)

Axios: Denial of Service via Unhandled 'error' Event in HTTP/2 ClientHttp2Session Initialization

Axios: HTTP/2 adapter bypasses configured DNS lookup and proxy controls

code-ollama: `grep_search` Command Injection via Unescaped `$()` Shell Substitution (CWE-78)

MONAI through 1.6.0 contains an eval injection vulnerability in _get_fake_spatial_shape() in monai/bundle/scripts.py. The function validates shape expressions with a helper that walks the AST and only collects ast.Name nodes, rejecting any name other than 'p' or 'n', before passing the string to eva

In MONAI 1.6.0, PersistentDataset (monai/data/dataset.py) explicitly rejects the combination track_meta=True with weights_only=True, forcing users who cache MetaTensors (the default tensor type in MONAI >= 1.0) to run torch.load(hashfile, weights_only=False). Related cache helpers in monai/data/util

MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration engine that resolves _target_ values to arbitrary importable callables without an allow list and passes $ expressions to Python eval(). Attackers can publish a malicious bundle with crafted configuration c

vm2: Host Promise rejection from an exposed constructor can terminate the vm2 host process

Nodemailer: Nested structured recipient arrays bypass the parser depth limit and cause stack exhaustion DoS

Nodemailer: Quadratic backtracking in the addressparser free-text fallback allows remote denial of service

GitPython submodule update path traversal can write outside the repository

vLLM is an inference and serving engine for large language models. In versions from 0.22.1 through 0.28.0, the operator-supplied model revision pin (--revision / --code-revision) is not propagated to several Hugging Face artifact loads for the FunAudioChat and Tarsier2 architectures: the WhisperFeat

vLLM versions 0.22.0 through 0.23.0 fail to validate stop_token_ids against vocabulary bounds in Rust HTTP and gRPC frontends, allowing out-of-vocabulary token IDs to reach MinTokensLogitsProcessor. Attackers can submit requests with min_tokens greater than zero and out-of-vocabulary stop_token_ids