← All tracked CVEs
Updated 12:00
Critical severity
Critical7d SLAWe fix a critical vulnerability within 7 days of publication, under our service-level agreement (SLA). We track 174 CVEs here: in progress, or fixed in the last 30 days.
| CVE | Status | Summary | Distribution | Fixed |
|---|---|---|---|---|
| In progress | Chromecast use-after-free in Chrome <155.0.8059.39 enables RCE outside sandbox via crafted HTML | secure-packages-rolling | — | |
| In progress | Chrome Media out-of-bounds write <155.0.8059.39 enables RCE outside sandbox via HTML | secure-packages-rolling | — | |
| In progress | iOS Chrome <155.0.8059.39 input validation bug enables RCE outside sandbox via HTML | secure-packages-rolling | — | |
| In progress | Chrome Media integer overflow pre-155.0.8059.39 enables RCE outside sandbox via crafted HTML | secure-packages-rolling | — | |
| In progress | ANGLE use-after-free in Chrome Android <155.0.8059.39 enables RCE outside sandbox via HTML | secure-packages-rolling | — | |
| In progress | SimpleEval <1.0.5 sandbox escape via object attribute leakage and unsafe callback access | secure-packages-rolling | — | |
| In progress | Apache Thrift c_glib: certificate host mismatch validation vulnerability before 0.24.0 | secure-packages-rolling | — | |
| In progress | Heap-based buffer overflow in Apache Thrift C++ bindings prior to version 0.24.0 | secure-packages-rolling | — | |
| In progress | Out-of-bounds read vulnerability in Apache Thrift c_glib bindings before 0.24.0 | secure-packages-rolling | — | |
| In progress | Out-of-bounds read due to improper input quantity validation in Apache Thrift C++ <0.24.0 | secure-packages-rolling | — | |
| In progress | AnyIO <4.14.2 validates IDNs via IDNA 2003, enabling TLS certificate spoofing | secure-packages-26.05 | — | |
| In progress | import_module_class logic flaw bypasses trust_remote_code in sentence-transformers, enabling local RCE | secure-packages-26.05 | — | |
| In progress | GitPython <3.1.59 mis-serializes multi-line config, activating injected directives and RCE | secure-packages-rolling | — | |
| In progress | PYSEC-2026-132: SimpleEval pre-1.0.5 allows dangerous module access via object attributes and callbacks | secure-packages-rolling | — | |
| In progress | GHSA-44vg-5wv2-h2hg: SimpleEval allows access to os/sys via attribute chains on passed names and callbacks | secure-packages-rolling | — | |
| In progress | GHSA-284h-m62q-gf8w: GitPython writer splits decoded multiline config into new directive, enabling core.hooksPath RCE | secure-packages-rolling | — | |
| In progress | PYSEC-2026-3786: GitPython <3.1.59 config write corrupts multi-line values, enabling directive injection and RCE via hooks | secure-packages-rolling | — | |
| In progress | PYSEC-2026-4164: sentence-transformers trust_remote_code bypass allows RCE via local model path import logic | secure-packages-26.05 | — | |
| In progress | PYSEC-2026-4145: PyJWT PEM detection bypass lets public key become HMAC secret; HS256 forgery with mixed algs | secure-packages-26.05 | — | |
| In progress | PYSEC-2026-103: ONNX <=1.20.1 hub.load silent=True suppresses trust checks, enabling zero-click supply chain attacks | secure-packages-26.05 | — | |
| In progress | GHSA-82r6-8w77-94w6: AnyIO TLS IDN flaw accepts IDNA2003 certs for non-ASCII domains on hijacked connections | secure-packages-26.05 | — | |
| In progress | PYSEC-2026-4025: AnyIO connect_tcp/TLSStream IDN TLS validation accepts IDNA 2003 spoofed certificates | secure-packages-26.05 | — | |
| In progress | GHSA-jhr6-gm9c-rqjv: sentence-transformers import_module_class trust bypass via os.path.exists check enables arbitrary code execution | secure-packages-26.05 | — | |
| In progress | GHSA-ffc3-869f-jxw9: is_pem_format bypass enables HS256 forgery with public key under mixed algorithms allowlist | secure-packages-26.05 | — |