← All tracked CVEs
Updated 01:00
High severity
High15d SLAWe fix a high vulnerability within 15 days of publication, under our service-level agreement (SLA). We track 788 CVEs here: in progress, or fixed in the last 30 days.
| CVE | Status | Summary | Distribution | Fixed |
|---|---|---|---|---|
| In progress | GHSA-xrqw-3rrv-vx5w: Transformers <5.10.0 save_pretrained path traversal enables arbitrary file writes via tokenizer_config chat_template | secure-packages-26.05 | — | |
| In progress | GHSA-c3jg-qh8m-j3h2: CairoSVG path tokenizer and marker draining are O(n²), causing untrusted SVG DoS | secure-packages-26.05 | — | |
| In progress | PYSEC-2026-2105: AIOHTTP <3.14: per-request cookies leak via cross-origin redirect under attacker control | secure-packages-26.05 | — | |
| In progress | PYSEC-2026-2110: AIOHTTP pre-3.14.1 C parser max_line_size bypass enables memory exhaustion DoS | secure-packages-26.05 | — | |
| In progress | GHSA-6v7p-g79w-8964: Unpacker reuse after error can cause SEGV crash and enable DoS on untrusted data | secure-packages-26.05 | — | |
| In progress | GHSA-gx64-gj6p-pc4c: JupyterLab image viewer XSS enables server RCE when crafted image opened in new tab | secure-packages-26.05 | — | |
| In progress | PYSEC-2026-2112: AIOHTTP <3.14.1: CookieJar save/load drops host-only attribute on cookies | secure-packages-26.05 | — | |
| In progress | GHSA-5jq2-8x83-x246: pypdf DoS: crafted PDFs with long unterminated object headers cause excessive runtimes | secure-packages-26.05 | — | |
| In progress | PYSEC-2026-2111: AIOHTTP <3.14.1 may decompress compressed requests into memory, enabling DoS zip-bomb attack | secure-packages-26.05 | — | |
| In progress | GHSA-c2m8-h5v5-343r: Tornado StaticFileHandler symlink traversal allows arbitrary file read outside static directory | secure-packages-26.05 | — | |
| In progress | GHSA-chx6-46f5-w4vp: Tornado CurlAsyncHTTPClient lacks body size limit; gzip decompression bomb causes OOM | secure-packages-26.05 | — | |
| In progress | PYSEC-2026-3672: JupyterLab overrides.json import allows code execution due to unvalidated notebook display settings | secure-packages-26.05 | — | |
| In progress | GHSA-xcgm-r5h9-7989: aiohttp WebSocket incomplete frames bypass memory limits, allowing DoS via memory exhaustion | secure-packages-26.05 | — | |
| In progress | PYSEC-2026-2107: AIOHTTP pre-3.14.1 unbounded pipelined request queue allows memory exhaustion DoS | secure-packages-26.05 | — | |
| In progress | PYSEC-2026-3554: python-cryptography verifier accepts wildcard SAN bypassing DNS name constraints; sub-CA scope escape | secure-packages-26.05 | — | |
| In progress | PYSEC-2026-3545: Malformed responses trigger out-of-bounds read in aiohttp C parser causing client DoS | secure-packages-26.05 | — | |
| In progress | PYSEC-2026-2104: AIOHTTP pre-3.14.0 CookieJar.load() arbitrary code execution via untrusted input | secure-packages-26.05 | — | |
| In progress | PYSEC-2026-237: AIOHTTP server_hostname SNI check bypass via connection reuse before 3.14.1 | secure-packages-26.05 | — | |
| In progress | PYSEC-2026-4174: Hugging Face Transformers load_custom_generate caches remote code before trust check, persisting unauthorized files, collisions | secure-packages-26.05 | — | |
| In progress | GHSA-hg6j-4rv6-33pg: aiohttp sends per-request cookies on cross-origin redirects, leaking sensitive data | secure-packages-26.05 | — | |
| In progress | GHSA-2h4p-vjrc-8xpq: Backslash in URI bypasses Mako traversal checks on Windows due to posixpath/os.path mismatch | secure-packages-26.05 | — | |
| In progress | PYSEC-2026-2108: AIOHTTP <3.14.1 memory limit bypass via large incomplete WebSocket frames | secure-packages-26.05 | — | |
| In progress | PYSEC-2026-3671: JupyterLab image viewer XSS via crafted image enables remote code execution on server | secure-packages-26.05 | — | |
| In progress | GHSA-pppj-hq3g-57pj: Improperly validated settings enable code execution via overrides.json in JupyterLab 4.5+ | secure-packages-26.05 | — | |
| In progress | GHSA-cq5v-8q36-5273: Out-of-bounds heap read in aiohttp C parser building error for malformed response causing client DoS | secure-packages-26.05 | — | |
| In progress | PYSEC-2026-3929: save_pretrained path traversal in Transformers <5.10.0 via chat_template keys enables arbitrary file writes | secure-packages-26.05 | — | |
| In progress | GHSA-4fvr-rgm6-gqmc: Unbounded pipelined request queue enables memory exhaustion DoS in aiohttp | secure-packages-26.05 | — | |
| In progress | GHSA-g3cq-j2xw-wf74: Compressed request body fully decompressed in memory during cleanup in aiohttp, enabling zip bomb DoS | secure-packages-26.05 | — | |
| In progress | PYSEC-2026-3540: _uid privilege drop incomplete: supplementary groups retained when run from privileged parent | secure-packages-26.05 | — | |
| In progress | PYSEC-2026-4156: Malformed /FlateDecode in PDFs causes excessive runtimes in pypdf (DoS vulnerability) | secure-packages-26.05 | — | |
| In progress | PYSEC-2026-2113: AIOHTTP <3.14.1 fails to close payload on disconnect during write, causing resource starvation | secure-packages-26.05 | — | |
| In progress | PYSEC-2026-2106: AIOHTTP pre-3.14.0 header injection allows request modification via multipart/payload headers | secure-packages-26.05 | — | |
| In progress | PYSEC-2026-113: Use-after-free in Apache Arrow C++ IPC file pre-buffering with variadic buffers (15–23) | secure-packages-26.05 | — | |
| In progress | PYSEC-2026-3928: Tornado DoS: parse_qs without max_num_fields on form-urlencoded bodies stalls event loop | secure-packages-26.05 | — | |
| In progress | PYSEC-2026-88: TemplateLookup.get_template() // URI path traversal in Mako <1.3.11 enables arbitrary file read | secure-packages-26.05 | — | |
| In progress | PYSEC-2026-3967: PyTorch Lightning <=2.6.5 RCE via load_from_checkpoint _instantiator import bypassing weights_only | secure-packages-26.05 | — | |
| In progress | GHSA-x78j-v8h9-3j2q: virtualenv activate.bat command injection via unescaped prompt on Windows | secure-packages-26.05 | — | |
| In progress | PYSEC-2026-4057: JupyterLab 4.5.0–4.6.3 clipboard paste executes scripts via trusted cell outputs | secure-packages-26.05 | — |