← All tracked CVEs
Updated 13:01
Medium severity
Medium45d SLAWe fix a medium vulnerability within 45 days of publication, under our service-level agreement (SLA). We track 889 CVEs here: in progress, or fixed in the last 30 days.
| CVE | Status | Summary | Distribution | Fixed |
|---|---|---|---|---|
| In progress | send_from_directory NUL: ADS path hang on Windows NTFS due to safe_join bug (<3.1.9) | secure-packages-26.05 | — | |
| In progress | Windows NTFS: Werkzeug safe_join before 3.1.9 allows NUL: ADS path causing hang | secure-packages-25.11 | — | |
| In progress | JupyterLab/JupyterLite language pack Plural-Forms regex flaw enables injected JS execution | secure-packages-26.05 | — | |
| In progress | JupyterLab PyPI Extension Manager uninstall allows pip option injection, enabling SSRF and local file leak | secure-packages-26.05 | — | |
| In progress | virtualenv pre-21.7.11 prompt injection alters pyvenv.cfg keys, hijacking base interpreter | secure-packages-rolling | — | |
| In progress | virtualenv <=21.7.10 prompt injection allows pyvenv.cfg key spoofing, base interpreter hijack | secure-packages-26.05 | — | |
| In progress | virtualenv pre-21.7.11 pyvenv.cfg injection via prompt enables base interpreter hijack | secure-packages-25.11 | — | |
| In progress | Mako Windows path mismatch allows directory traversal, file disclosure via attacker-controlled template URIs pre-1.4.2 | secure-packages-rolling | — | |
| In progress | Mako <1.4.2 Windows path traversal via posixpath/ntpath mismatch enables file disclosure, template execution | secure-packages-26.05 | — | |
| In progress | PyJWT 2.11–2.13 options mutation persists disabled claim validation after verify_signature false | secure-packages-26.05 | — | |
| In progress | multidict C items-view union/subtraction leak references, causing unbounded memory growth (6.7–6.9.1) | secure-packages-rolling | — | |
| In progress | Multidict C extension items-view union/subtraction reference leak causes unbounded memory DoS (6.7.0–6.9.1) | secure-packages-26.05 | — | |
| In progress | Chrome <155.0.8059.39 WebAppInstalls UI misrepresentation enables remote UI spoofing via crafted HTML (Low severity) | secure-packages-rolling | — | |
| In progress | DevTools reference resolution bug exposes sensitive data via crafted HTML in compromised renderer | secure-packages-rolling | — | |
| In progress | Chrome <155.0.8059.39 Paint UI misrepresentation allows remote UI spoofing via crafted HTML | secure-packages-rolling | — | |
| In progress | Missing authorization in Chrome Chromoting on Windows pre-155.0.8059.39 enables remote info disclosure | secure-packages-rolling | — | |
| In progress | Chrome <155.0.8059.39 Media uninitialized resource enabled remote cross-origin data leak via crafted HTML | secure-packages-rolling | — | |
| In progress | Chrome <155.0.8059.39 Viz input validation allows compromised renderer to bypass system access via crafted HTML | secure-packages-rolling | — | |
| In progress | Missing authorization in Chrome Permissions pre-155.0.8059.39 allows compromised renderer to spoof UI | secure-packages-rolling | — | |
| In progress | Chrome iOS <155.0.8059.39 local physical-access information leak vulnerability | secure-packages-rolling | — | |
| In progress | Chrome Windows ANGLE uninitialized resource enables remote out-of-sandbox memory read via crafted HTML | secure-packages-rolling | — | |
| In progress | iOS Chrome <155.0.8059.39 input validation flaw leaks data via crafted network traffic | secure-packages-rolling | — | |
| In progress | Chrome <155.0.8059.39 API authorization bug leaks data via crafted extension, social engineering | secure-packages-rolling | — | |
| In progress | iOS Chrome <155.0.8059.39 address bar spoofing by remote attacker via crafted HTML | secure-packages-rolling | — | |
| In progress | WebAudio race condition in Chrome <155.0.8059.39 leaks cross-origin data via crafted HTML | secure-packages-rolling | — | |
| In progress | Chrome Windows Proxy info leak pre-155.0.8059.39 via crafted traffic by adjacent attacker | secure-packages-rolling | — | |
| In progress | Uninitialized ANGLE in Chrome Windows leaks out-of-sandbox memory via crafted HTML pre-155.0.8059.39 | secure-packages-rolling | — | |
| In progress | CSRF in Android Chrome ReadingList before 155.0.8059.39 enables origin policy bypass via crafted HTML. | secure-packages-rolling | — | |
| In progress | Missing Google Lens authorization in Chrome <155.0.8059.39 leaks cross-origin data | secure-packages-rolling | — | |
| In progress | Incorrect authorization in Google Chrome Sync pre-155.0.8059.39 allows remote sensitive data exposure via crafted traffic | secure-packages-rolling | — | |
| In progress | Android Chrome <155.0.8059.39 GPU uninitialized resource leaks sandbox memory via crafted HTML page | secure-packages-rolling | — | |
| In progress | Chrome pre-155.0.8059.39 Compositing validation flaw allows address bar spoofing | secure-packages-rolling | — | |
| In progress | Pre-155 Chrome FileSystem UI misrepresentation enables social engineering bypass of system access restrictions | secure-packages-rolling | — | |
| In progress | Incorrect reference resolution in Chrome Android Offline leaks sensitive info via crafted HTML (pre-155.0.8059.39) | secure-packages-rolling | — | |
| In progress | Chrome Mac <155.0.8059.39 Dawn uninitialized resource allows remote memory read outside sandbox via crafted HTML | secure-packages-rolling | — | |
| In progress | UI misrepresentation vulnerability in Chrome <155.0.8059.39 allows HTML-based social engineering spoofing | secure-packages-rolling | — | |
| In progress | Chromoting UI misrepresentation on Windows Chrome <155.0.8059.39 via crafted traffic, social engineering | secure-packages-rolling | — | |
| In progress | Chrome Android Omnibox info leak via social-engineered crafted network traffic pre-155.0.8059.39 | secure-packages-rolling | — | |
| In progress | Pre-155 Chrome Proxy Auth cleanup flaw leaks sensitive data to adjacent attackers via crafted traffic | secure-packages-rolling | — | |
| In progress | Chrome pre-155 permissions auth flaw lets remote attackers bypass system access restrictions via crafted traffic | secure-packages-rolling | — | |
| In progress | Chrome ANGLE uninitialized resource bug leaks cross-origin data via crafted HTML (pre-155.0.8059.39) | secure-packages-rolling | — | |
| In progress | Incorrect authorization enables address bar spoofing in Chrome prior to 155.0.8059.39 via crafted HTML page | secure-packages-rolling | — | |
| In progress | Chrome Actor missing authorization pre-155.0.8059.39 allows social-engineered HTML to bypass system access restrictions | secure-packages-rolling | — | |
| In progress | Chromoting UI spoofing via crafted network traffic on Mac Chrome <155.0.8059.39 (Low severity) | secure-packages-rolling | — | |
| In progress | Incorrect authorization in Chrome Extensions before 155.0.8059.39 allows cross-origin data access | secure-packages-rolling | — | |
| In progress | Chrome Android information leak before 155.0.8059.39 via co-installed app, local attacker | secure-packages-rolling | — | |
| In progress | Chrome ANGLE uninitialized resource enables remote memory read outside sandbox on Windows pre-155.0.8059.39 | secure-packages-rolling | — | |
| In progress | Chrome <155.0.8059.39 PermissionElement auth flaw enables remote system access restriction bypass | secure-packages-rolling | — | |
| In progress | Chrome DevTools authorization flaw leaked cross-origin data via crafted HTML page pre-155.0.8059.39 | secure-packages-rolling | — | |
| In progress | Uninitialized Video resource in Chrome <155.0.8059.39 allows sandbox memory read via HTML | secure-packages-rolling | — |