← All tracked CVEs
Updated 07:01
972 in progress
| CVE | Status | Severity | Summary | Distribution |
|---|---|---|---|---|
| In progress | Low | Graphviz <2.2.1 vulnerable to local arbitrary file overwrite via temp-file symlink attack | secure-packages-rolling | |
| In progress | High | Stack buffer overflow in Graphviz 2.20.2 push_subg via large DOT Agraph_t count, DoS/RCE | secure-packages-rolling | |
| In progress | Medium | Tianocore EDK2 Reclaim buffer overflow pre-SVN 16280 enables local privilege escalation via long variable name | secure-packages-rolling | |
| In progress | Medium | EDK2 Reclaim buffer overflow pre-SVN 16280 allows physically proximate privilege escalation via long variable name | secure-packages-26.05 | |
| In progress | High | Graphviz yyerror format string vulnerability in lib/cgraph/scan.l allows remote exploitation | secure-packages-rolling | |
| In progress | Medium | Zulip pre-1.3.12 exposed bot API keys to other users in the same realm | secure-packages-rolling | |
| In progress | High | Zulip <1.3.12 allows deactivated users to access messages with SSO enabled | secure-packages-rolling | |
| In progress | High | Graphviz lib/common/shapes.c buffer overflow enables RCE/DoS via crafted file (<= f8b9e035) | secure-packages-rolling | |
| In progress | Medium | xdg-email in xdg-utils 1.1.0-rc1+ allows mailto attachment injection, leaking sensitive files | secure-packages-rolling | |
| In progress | Medium | xdg-email vulnerability auto-attaches local files via mailto URIs, risking sensitive data exposure | secure-packages-26.05 | |
| In progress | Medium | Stored cross-site scripting vulnerability in zulip/zulip from 44f935695d452cc3fb16845a0c6af710438b153d to before 3eb2791c3e9695f7d37ffe84e0c2184fae665cb6 | secure-packages-rolling | |
| In progress | High | Improper access control in GitHub repository zulip/zulip prior to 4.10 | secure-packages-rolling | |
| In progress | Medium | Zulip linkifier regex allows admin-triggered ReDoS; validation regex also vulnerable to ReDoS. | secure-packages-rolling | |
| In progress | Medium | Zulip: Registration accepts expired invitation keys due to missing /accounts/register validation | secure-packages-rolling | |
| In progress | Critical | Zulip Server <4.9 leaves RabbitMQ 25672 open; weak cookie allows RCE and message snooping | secure-packages-rolling | |
| In progress | High | Incorrect authorization in Zulip <=5.4 lets members make their bots organization administrators | secure-packages-rolling | |
| In progress | Medium | Zulip Mobile <=27.189: Crafted message links can disclose user credentials | secure-packages-rolling | |
| In progress | Medium | Zulip remote image proxy bypass leaks viewer IP/fingerprint via crafted message URLs | secure-packages-rolling | |
| In progress | Medium | Ittiam libmpeg2 overlapping memcpy in impeg2_mc_fullx_fully_8x8 before 2022-07-27 | secure-packages-rolling | |
| In progress | Medium | Overlapping memcpy in impeg2_mc_fullx_fully_8x8 (Ittiam libmpeg2 before 2022-07-27) | secure-packages-26.05 | |
| In progress | Medium | ReDoS vulnerability claim in py <=1.11.0 via Subversion info parsing (disputed) | secure-packages-rolling | |
| In progress | Medium | py library <=1.11.0 remote ReDoS via crafted SVN info; InfoSvnCommand mishandling disputed | secure-packages-26.05 | |
| In progress | Medium | libmemcached-awesome can return previous request’s data after timeout with low POLL_TIMEOUT | secure-packages-26.05 | |
| In progress | Low | Zulip auth bypass: LDAP+external backends allow non-LDAP account creation when invites disabled | secure-packages-rolling | |
| In progress | Medium | YASM v1.3.0 heap overflow via handle_dot_label in nasm/nasm-token.re; disputed | secure-packages-rolling | |
| In progress | Medium | YASM 1.3.0 heap overflow via handle_dot_label in nasm-token.re; security impact disputed | secure-packages-26.05 | |
| In progress | Low | yasm 1.3.0 memory leak in yasm_intnum_copy; vulnerability disputed per YASM policy | secure-packages-rolling | |
| In progress | Low | yasm v1.3.0 memory leak via yasm_intnum_copy (libyasm/intnum.c); vulnerability disputed | secure-packages-26.05 | |
| In progress | Low | Zulip 6.1 and below invite UI bypasses stream-adding permissions for invited users | secure-packages-rolling | |
| In progress | Medium | Artifex Software jbig2dec v0.20 SEGV vulnerability in jbig2_error (jbig2.c) | secure-packages-rolling | |
| In progress | Medium | SEGV vulnerability in Artifex jbig2dec v0.20 via jbig2_error in jbig2.c | secure-packages-26.05 | |
| In progress | Medium | REXML <3.2.6 DoS vulnerability parsing untrusted XML with many '<' in attributes | secure-packages-rolling | |
| In progress | Medium | REXML gem <3.3.1 DoS vulnerabilities when parsing untrusted XML containing many '<', '0', '%>' characters | secure-packages-rolling | |
| In progress | High | REXML gem <3.3.2 DoS vulnerabilities parsing XML with excessive whitespace, '>]', and ']>' | secure-packages-rolling | |
| In progress | High | REXML 3.3.2 DoS vulnerability via XML entity expansion in SAX2/pull parser APIs | secure-packages-rolling | |
| In progress | Medium | GHSA-fh3h-vg37-cc95: Open redirect in WebOb Location normalization via whitespace-induced protocol-relative URL (CVE-2024-42353) | secure-packages-26.05 | |
| In progress | Medium | PYSEC-2026-251: WebOb <1.8.10 open redirect; CR/LF/TAB stripping bypasses CVE-2024-42353 fix | secure-packages-26.05 | |
| In progress | Medium | REXML <3.3.6 DoS parsing untrusted XML with deep repeated element names (tree parser) | secure-packages-rolling | |
| In progress | High | REXML gem <3.3.9 ReDoS parsing hex numeric character references; only affects Ruby 3.1 | secure-packages-rolling | |
| In progress | Low | tarfile misinterprets GNU longname/longlink due to AREGTYPE-to-DIRTYPE normalization in multi-block entries | secure-packages-25.11 | |
| In progress | Critical | tarfile misinterprets crafted archives by normalizing AREGTYPE during GNUTYPE_LONGNAME/LONGLINK processing | secure-packages-rolling | |
| In progress | Medium | PyTorch 2.6.0 torch.jit.script critical memory corruption; local exploit publicly disclosed | secure-packages-26.05 | |
| In progress | High | Mismatched memory management in Thrift c_glib pre-0.23.0 crashes servers on crafted requests | secure-packages-rolling | |
| In progress | Medium | Pytest ≤9.0.2 UNIX /tmp/pytest-of-{user} tmpdir allows local DoS/privilege escalation | secure-packages-rolling | |
| In progress | Medium | Pytest ≤9.0.2 UNIX temp dir /tmp/pytest-of-{user} allows local DoS/privilege escalation | secure-packages-26.05 | |
| In progress | Medium | UNIX pytest <=9.0.2 predictable /tmp/pytest-of-{user} dirs allow local DoS/privilege escalation | secure-packages-25.11 | |
| In progress | Medium | ReDoS vulnerability in Yarn <=1.22.22 explodeHostedGitFragment (hosted-git-resolver.js), remotely exploitable | secure-packages-rolling | |
| In progress | Medium | Yarn <=1.22.22 ReDoS from inefficient regex in explodeHostedGitFragment | secure-packages-26.05 | |
| In progress | Medium | Yarn <=1.22.22 setOptions in request-manager.js ReDoS via inefficient regex; local access | secure-packages-rolling | |
| In progress | Medium | Inefficient regex in Yarn <=1.22.22 setOptions (src/util/request-manager.js) enables local ReDoS unsupported versions only | secure-packages-26.05 |