← All tracked CVEs
Updated 14:00
972 in progress
| CVE | Status | Severity | Summary | Distribution |
|---|---|---|---|---|
| In progress | Medium | Nokogiri <1.19.1 canonicalize ignores xmlC14NExecute failures, enabling SAML signature bypass | secure-packages-rolling | |
| In progress | High | Hugging Face Transformers load_custom_generate writes remote code before trust_remote_code check, persisting unauthorized files (4.57.0–5.16.1) | secure-packages-26.05 | |
| In progress | High | Tornado <6.5.8 DoS: form-urlencoded parse_qs lacks max_num_fields, stalls event loop | secure-packages-rolling | |
| In progress | High | Tornado <6.5.8 DoS: parse_qs lacks max_num_fields, large unauthenticated form bodies stall event loop | secure-packages-26.05 | |
| In progress | Medium | sqlparse <0.6.0 reindent quadratic CPU on attacker-controlled tuple lists (DoS risk) | secure-packages-rolling | |
| In progress | Medium | pypdf pre-6.16.0 infinite loop via cyclic /Next links in TreeObject.insert_child | secure-packages-26.05 | |
| In progress | Medium | pypdf <6.16.1: _get_outline lacks global limits, enabling DoS via outline traversal | secure-packages-26.05 | |
| In progress | Medium | pypdf <6.16.1 DoS via exponential DAG of reused form XObjects in text extraction | secure-packages-26.05 | |
| In progress | High | DTLS retransmission reuses suspended write state, causing OOB read, heap disclosure, and DoS | secure-packages-26.05 | |
| In progress | High | DTLS retransmission during suspended handshake write causes out-of-bounds read, heap disclosure, and crash/DoS | secure-packages-rolling | |
| In progress | High | OpenSSL 4.0 X.509 extension cache race causes use-after-free DoS in multithreaded TLS | secure-packages-26.05 | |
| In progress | High | OpenSSL QUIC CID retired before ACK enables NEW_CONNECTION_ID flood, causing CFQ backlog, memory exhaustion | secure-packages-26.05 | |
| In progress | High | OpenSSL QUIC NEW_CONNECTION_ID flood enables unbounded RETIRE_CONNECTION_ID CFQ backlog and memory exhaustion | secure-packages-rolling | |
| In progress | Medium | Soup Sieve <2.9 RE_WS_END trimming causes quadratic CPU on attacker-controlled selectors (DoS) | secure-packages-rolling | |
| In progress | Medium | Soup Sieve <2.9 ReDoS: crafted selectors cause quadratic regex backtracking and CPU exhaustion | secure-packages-rolling | |
| In progress | Low | ImageMagick <7.1.2-30 Windows TOCTOU path policy bypass via symlink race | secure-packages-25.11 | |
| In progress | Low | ImageMagick video decoder TOCTOU allows path policy write bypass via symlink swaps | secure-packages-25.11 | |
| In progress | Medium | pip treats console_scripts/gui_scripts as paths, installing entry points outside the installation directory | secure-packages-26.05 | |
| In progress | High | GHSA-239g-whfq-7xj9: GitPython git_dir discovery bug enables RCE via tracked hooks; config exfiltration (CVE-2026-87817) | secure-packages-rolling | |
| In progress | High | GitPython <3.1.60 trusts tracked gitdir/commondir/HEAD, enabling RCE via pre-commit hook | secure-packages-rolling | |
| In progress | High | GitPython 3.1.59 high-level diff API fails to restrict --no-index, enabling arbitrary filesystem read oracle | secure-packages-rolling | |
| In progress | High | GitPython <3.1.60 ReDoS in Actor.name_email_regex on malformed commit author field | secure-packages-rolling | |
| In progress | High | GridFS identifier query injection in MongoDB Python Driver enables data exfiltration, mass deletion, misrenames | secure-packages-rolling | |
| In progress | High | MongoDB Python GridFS identifier query injection enables data exposure, chunk deletion, and unintended file renames | secure-packages-26.05 | |
| In progress | Low | PCRE2 <10.48 out-of-bounds read in pcre2_match after JIT fallback with invalid UTF | secure-packages-rolling | |
| In progress | Low | PCRE2 <10.48 pcre2_match out-of-bounds read after JIT fallback with invalid UTF input | secure-packages-26.05 | |
| In progress | Medium | PCRE2 <10.48 32-bit: pcre2_pattern_convert out-of-bounds write with large attacker-supplied pattern | secure-packages-rolling | |
| In progress | Medium | PCRE2 <10.48 on 32-bit: pcre2_pattern_convert out-of-bounds write with attacker-supplied pattern | secure-packages-26.05 | |
| In progress | Medium | PCRE2 <10.48 on 32-bit: pcre2_compile_32 integer overflow causing OOB write | secure-packages-rolling | |
| In progress | Medium | PCRE2 <10.48 on 32-bit: pcre2_compile_32 integer overflow causes out-of-bounds write | secure-packages-26.05 | |
| In progress | Low | PCRE2 < 10.48 out-of-bounds read in pcre2_match with PCRE2_MATCH_INVALID_UTF on invalid UTF subject | secure-packages-rolling | |
| In progress | Low | PCRE2 <10.48 out-of-bounds read in pcre2_match with invalid UTF (PCRE2_MATCH_INVALID_UTF) | secure-packages-26.05 | |
| In progress | Low | PCRE2 <10.48: pcre2_serialize_encode leaks two bytes to adversary in unsafe contexts | secure-packages-rolling | |
| In progress | Low | PCRE2 <10.48: pcre2_serialize_encode leaks two bytes to adversary | secure-packages-26.05 | |
| In progress | Medium | MongoDB Python CSFLE treats '.sock' endpoint as Unix socket, enabling local connections via key metadata | secure-packages-rolling | |
| In progress | Medium | MongoDB Python Driver CSFLE '.sock' key endpoint triggers unintended local Unix socket connections | secure-packages-26.05 | |
| In progress | High | PyMongo URI host decoding bug lets attackers inject extra hosts via percent-encoding | secure-packages-rolling | |
| In progress | High | Host injection in PyMongo connection strings via percent-decoded host delimiters | secure-packages-26.05 | |
| In progress | High | BSON encoding integer overflow in MongoDB Python Driver native extension enables out-of-bounds write | secure-packages-rolling | |
| In progress | High | MongoDB Python Driver BSON encoder integer overflow may cause buffer overflow with large input | secure-packages-26.05 | |
| In progress | High | urllib3 <2.8.0 mixes target and proxy TLS settings, enabling HTTPS proxy MITM | secure-packages-26.05 | |
| In progress | High | urllib3 HTTPS proxy TLS config leak from target disables verification, allowing proxy impersonation | secure-packages-25.11 | |
| In progress | Medium | urllib3 2.6.2–2.8.0: infinite loop on chunked deflate stream with trailing bytes, high CPU, hangs requests | secure-packages-26.05 | |
| In progress | Medium | urllib3 <2.8.0: stream/read_chunked infinite loop on chunked deflate with trailing bytes, CPU spin | secure-packages-25.11 | |
| In progress | High | urllib3 1.10.3–2.8.0 DoS via chunked transfer unterminated chunk-size line | secure-packages-26.05 | |
| In progress | High | urllib3 <2.8.0: unbounded memory in chunked parser via unterminated chunk-size line | secure-packages-25.11 | |
| In progress | Medium | is_cmpxchg_insn ignores BPF_PROBE_ATOMIC, skipping zero-extension for arena 32-bit cmpxchg | secure-packages-rolling | |
| In progress | Medium | BPF arena 32-bit cmpxchg misses zero-extension; is_cmpxchg_insn ignores BPF_PROBE_ATOMIC | secure-packages-26.05 | |
| In progress | Medium | Missing zero-extension for arena 32-bit cmpxchg when rewritten to BPF_PROBE_ATOMIC | secure-packages-25.11 | |
| In progress | High | mlxsw spectrum_ptp calls napi_gro_receive() in GC context, causing GRO list corruption and kernel panic | secure-packages-26.05 |