← All tracked CVEs
Updated 00:00
High severity
High15d SLAWe fix a high vulnerability within 15 days of publication, under our service-level agreement (SLA). We track 788 CVEs here: in progress, or fixed in the last 30 days.
| CVE | Status | Summary | Distribution | Fixed |
|---|---|---|---|---|
| In progress | JupyterLab overrides.json margin settings not validated, enabling code execution via malicious settings import | secure-packages-26.05 | — | |
| In progress | Mistune 3.3.0–3.3.2 DoS via nested emphasis causes RecursionError in HTMLRenderer | secure-packages-26.05 | — | |
| In progress | Nokogiri <1.19.3 ReDoS in CSS selector tokenizer affecting Node#css/at_css/search | secure-packages-rolling | — | |
| In progress | Hugging Face Transformers load_custom_generate writes remote code before trust_remote_code check, persisting unauthorized files (4.57.0–5.16.1) | secure-packages-26.05 | — | |
| In progress | Tornado <6.5.8 DoS: form-urlencoded parse_qs lacks max_num_fields, stalls event loop | secure-packages-rolling | — | |
| In progress | Tornado <6.5.8 DoS: parse_qs lacks max_num_fields, large unauthenticated form bodies stall event loop | secure-packages-26.05 | — | |
| In progress | DTLS retransmission reuses suspended write state, causing OOB read, heap disclosure, and DoS | secure-packages-26.05 | — | |
| In progress | DTLS retransmission during suspended handshake write causes out-of-bounds read, heap disclosure, and crash/DoS | secure-packages-rolling | — | |
| In progress | OpenSSL QUIC CID retired before ACK enables NEW_CONNECTION_ID flood, causing CFQ backlog, memory exhaustion | secure-packages-26.05 | — | |
| In progress | OpenSSL QUIC NEW_CONNECTION_ID flood enables unbounded RETIRE_CONNECTION_ID CFQ backlog and memory exhaustion | secure-packages-rolling | — | |
| In progress | GridFS identifier query injection in MongoDB Python Driver enables data exfiltration, mass deletion, misrenames | secure-packages-rolling | — | |
| In progress | MongoDB Python GridFS identifier query injection enables data exposure, chunk deletion, and unintended file renames | secure-packages-26.05 | — | |
| In progress | PyMongo URI host decoding bug lets attackers inject extra hosts via percent-encoding | secure-packages-rolling | — | |
| In progress | Host injection in PyMongo connection strings via percent-decoded host delimiters | secure-packages-26.05 | — | |
| In progress | BSON encoding integer overflow in MongoDB Python Driver native extension enables out-of-bounds write | secure-packages-rolling | — | |
| In progress | MongoDB Python Driver BSON encoder integer overflow may cause buffer overflow with large input | secure-packages-26.05 | — | |
| In progress | urllib3 HTTPS proxy TLS config leak from target disables verification, allowing proxy impersonation | secure-packages-25.11 | — | |
| In progress | urllib3 <2.8.0: unbounded memory in chunked parser via unterminated chunk-size line | secure-packages-25.11 | — | |
| In progress | ksmbd multichannel logoff race: session freed before channels drain; locks and cancels mishandled | secure-packages-25.11 | — | |
| In progress | ksmbd logoff teardown race across SMB3 multichannel; pending operations and locks not properly cancelled | secure-packages-26.05 | — | |
| In progress | ksmbd teardown races: undrained multichannel sessions, stuck byte-range locks, and duplicate cancellations | secure-packages-rolling | — | |
| In progress | Hugging Face Transformers <=5.8.0.dev0 path traversal arbitrary file write via chat_template in save_pretrained | secure-packages-26.05 | — | |
| In progress | GHSA-rpj2-4hq8-938g: vcrpy loads cassettes with unsafe PyYAML Loader, enabling arbitrary code execution on load | secure-packages-26.05 | — | |
| In progress | GHSA-x9r9-c232-4q39: Hugging Face Transformers load_custom_generate writes remote Python before trust check, persisting unauthorized disk cache (v4.49–5.8.1) | secure-packages-26.05 | — | |
| In progress | GHSA-63hw-fmq6-xxg2: aiohttp C HTTP parser max_line_size bypass allows oversized lines causing memory DoS | secure-packages-26.05 | — | |
| In progress | PYSEC-2026-4183: PyJWT <2.15.0 OKP private JWK x/d mismatch enables sender-constrained token misuse | secure-packages-26.05 | — | |
| In progress | GHSA-p58f-9548-mpm2: virtualenv bash/zsh and fish activate scripts double-quote shlex.quote, enabling path-based command injection | secure-packages-rolling | — | |
| In progress | GHSA-x78j-v8h9-3j2q: virtualenv Windows activate.bat executes arbitrary commands from unescaped prompt input | secure-packages-rolling | — | |
| In progress | GHSA-94p9-xgh2-xp45: No sha256 verification for network-fetched wheels; virtualenv may cache and seed tampered wheels | secure-packages-rolling | — | |
| In progress | PYSEC-2026-4183: PyJWT 2.1.0–2.15.0 OKPAlgorithm.from_jwk x/d mismatch enables stolen token misuse | secure-packages-rolling | — | |
| In progress | PYSEC-2026-4013: Double-quoted shlex placeholders in activate/activate.fish allow execution via path metacharacters | secure-packages-rolling | — | |
| In progress | GHSA-c3jg-qh8m-j3h2: CairoSVG path parsing and marker handling are O(n^2), enabling DoS on large SVGs | secure-packages-rolling | — | |
| In progress | GHSA-mpf4-983q-p7j4: Tornado urlencoded parsing without max_num_fields allows single-request event-loop DoS | secure-packages-rolling | — | |
| In progress | GHSA-c2m8-h5v5-343r: Tornado StaticFileHandler symlink traversal allows unauthenticated arbitrary file read via symlinks in static root | secure-packages-rolling | — | |
| In progress | PYSEC-2026-3928: parse_qs without max_num_fields stalls Tornado event loop with massive form fields | secure-packages-rolling | — | |
| In progress | GHSA-chx6-46f5-w4vp: Unbounded decompressed response accumulation in Tornado CurlAsyncHTTPClient triggers OOM DoS | secure-packages-rolling | — | |
| In progress | GHSA-xf7x-x43h-rpqh: SchemaRepairer.resolve_schema circular $ref causes unbounded CPU loop DoS | secure-packages-rolling | — | |
| In progress | PYSEC-2026-3804: Hugging Face Accelerate <=1.14.0 path traversal in checkpoint loading enables arbitrary file read, DoS | secure-packages-rolling | — | |
| In progress | GHSA-4j2p-28q2-5m79: Hugging Face Accelerate ≤1.14.0 path traversal via weight_map enables arbitrary file read, DoS via pipes | secure-packages-rolling | — | |
| In progress | GHSA-v4x9-3549-crwv: Integer overflow in MongoDB Python Driver BSON encoder can cause out-of-bounds write with large input | secure-packages-rolling | — | |
| In progress | GHSA-vp6j-j7w5-5xjj: PyMongo connection string host parsing decodes %2C/%3A, enabling host injection | secure-packages-rolling | — | |
| In progress | GHSA-v4x9-3549-crwv: MongoDB Python BSON encoder integer overflow permits out-of-bounds write with large input | secure-packages-26.05 | — | |
| In progress | GHSA-vp6j-j7w5-5xjj: PyMongo host parsing decodes percent-encoded delimiters, enabling seed list host injection | secure-packages-26.05 | — | |
| In progress | GHSA-f2ff-p2ww-7p4p: sqlparse group_comments O(n²) on comment-only input causes DoS, bypasses token cap | secure-packages-rolling | — | |
| In progress | GHSA-prg7-hcfm-mfcr: sqlparse ReDoS: quadratic lexer regex for dollar-quoted literals and multiline comments | secure-packages-rolling | — | |
| In progress | PYSEC-2026-3699: sqlparse CPU DoS from quadratic TokenList.__init__ stringification on deeply nested SQL | secure-packages-rolling | — | |
| In progress | PYSEC-2026-3698: sqlparse ReDoS: dollar-quoted literal backreference and multiline comment regex cause CPU exhaustion | secure-packages-rolling | — | |
| In progress | PYSEC-2026-3697: Comment-only SQL causes O(n^2) in sqlparse group_comments; DoS bypasses MAX_GROUPING_TOKENS cap | secure-packages-rolling | — | |
| In progress | GHSA-pwgv-4x5q-6m9f: sqlparse DoS: TokenList.__init__ str(self) triggers O(n*depth) on nested groups | secure-packages-rolling | — | |
| In progress | GHSA-94p9-xgh2-xp45: Virtualenv fails to verify downloaded wheel integrity, enabling cache poisoning via compromised index | secure-packages-25.11 | — |