← All tracked CVEs
Updated 10:00
972 in progress
| CVE | Status | Severity | Summary | Distribution |
|---|---|---|---|---|
| In progress | Medium | Chrome <155.0.8059.39 FontAccess authorization flaw lets compromised renderer bypass system restrictions | secure-packages-rolling | |
| In progress | Medium | Android Chrome <155.0.8059.39: CustomTabs race enables local co-installed app to bypass web origin policy | secure-packages-rolling | |
| In progress | Medium | Chrome iOS <155.0.8059.39 missing authorization enables UI spoofing via crafted HTML page | secure-packages-rolling | |
| In progress | Medium | Chrome <155.0.8059.39 GetUserMedia auth bug lets compromised renderer bypass system restrictions via crafted HTML | secure-packages-rolling | |
| In progress | Medium | iOS Chrome <155.0.8059.39 protection failure enables web origin policy bypass via crafted HTML | secure-packages-rolling | |
| In progress | High | Incorrect reference resolution in Chrome WebAppInstalls allows sandbox escape and RCE on macOS <155.0.8059.39 | secure-packages-rolling | |
| In progress | Medium | Chrome <155.0.8059.39 Permissions auth flaw enables UI spoofing via compromised renderer | secure-packages-rolling | |
| In progress | High | Use-after-free in Chrome Parser pre-155.0.8059.39 enables remote sandboxed code execution via crafted HTML | secure-packages-rolling | |
| In progress | High | Chrome Mac Core race condition pre-155.0.8059.39 enables sandbox escape RCE via crafted HTML | secure-packages-rolling | |
| In progress | Medium | Race condition in Chrome before 155.0.8059.39 allows renderer-based UI spoofing | secure-packages-rolling | |
| In progress | Critical | iOS Chrome <155.0.8059.39 input validation bug enables RCE outside sandbox via HTML | secure-packages-rolling | |
| In progress | Medium | Remote sensitive info leak in Chrome Enterprise via crafted HTML before 155.0.8059.39 | secure-packages-rolling | |
| In progress | Medium | Google Chrome Extensions pre-155.0.8059.39 code injection allows remote UI spoofing via malicious extension | secure-packages-rolling | |
| In progress | Critical | Chrome Media integer overflow pre-155.0.8059.39 enables RCE outside sandbox via crafted HTML | secure-packages-rolling | |
| In progress | Critical | ANGLE use-after-free in Chrome Android <155.0.8059.39 enables RCE outside sandbox via HTML | secure-packages-rolling | |
| In progress | Medium | Google Chrome Windows <155.0.8059.39 API miscalc enables extension UI spoofing via social engineering | secure-packages-rolling | |
| In progress | High | Use-after-free in Chrome PDF pre-155.0.8059.39 enables sandboxed RCE via crafted HTML | secure-packages-rolling | |
| In progress | Medium | Incorrect API authorization in Chrome <155.0.8059.39 enables web origin policy bypass via crafted HTML | secure-packages-rolling | |
| In progress | High | Use-after-free in Chrome Media allows sandbox RCE via crafted HTML (pre-155.0.8059.39) | secure-packages-rolling | |
| In progress | Medium | Chrome Audio info leak before 155.0.8059.39: compromised renderer reads memory outside sandbox via crafted extension | secure-packages-rolling | |
| In progress | High | Google Chrome Fonts race condition allows RCE outside sandbox pre-155.0.8059.39 via crafted HTML | secure-packages-rolling | |
| In progress | Medium | Confused deputy in iOS Chrome enables privileged page access via crafted HTML pre-155.0.8059.39 | secure-packages-rolling | |
| In progress | Low | OpenSSH sshd before 10.6 interprets 'none' as filename instead of disabling options | secure-packages-26.05 | |
| In progress | Low | OpenSSH sshd pre-10.6 misinterprets 'none' as filename instead of disabling feature | secure-packages-rolling | |
| In progress | High | Quadratic CPU DoS in CairoSVG <2.9.1 when rendering long-segment SVG paths via svg2png/svg2pdf/svg2ps | secure-packages-26.05 | |
| In progress | High | CairoSVG <2.9.1 quadratic CPU DoS via path parsing and draw_markers on complex SVGs | secure-packages-rolling | |
| In progress | Medium | pip mishandles doubly-encoded index URLs, enabling arbitrary file writes during wheel installs | secure-packages-rolling | |
| In progress | Medium | pip --only-binary vulnerable to doubly-encoded URLs causing arbitrary file writes via malicious indexes | secure-packages-26.05 | |
| In progress | Medium | libssh SFTP directory listing stack buffer overflow via attacker-controlled longname causing crash/RCE | secure-packages-25.11 | |
| In progress | Low | pip extracts malicious wheels outside install directory via limited path traversal | secure-packages-26.05 | |
| In progress | High | pgvector <0.8.6 IVFFlat index integer wraparound enables OOB write, RCE on 32-bit | secure-packages-rolling | |
| In progress | Medium | Werkzeug safe_join vulnerability allowing Windows device names with extensions or trailing spaces pre-3.1.5 | secure-packages-25.11 | |
| In progress | Medium | TOCTOU in virtualenv <20.36.1 enables symlink attacks on app_data/lockfile directory creation | secure-packages-25.11 | |
| In progress | Medium | wheel unpack trusts header filename for chmod, enabling critical file permission tampering, privilege escalation (0.40.0–0.46.1) | secure-packages-26.05 | |
| In progress | High | Use-after-free in Apache Arrow C++ IPC file reader with pre-buffering, variadic buffers (15–23) | secure-packages-26.05 | |
| In progress | Medium | Werkzeug <=3.1.5 safe_join accepts Windows device names, causing send_from_directory read hang | secure-packages-25.11 | |
| In progress | Medium | Flask <=3.1.2: session 'in' checks miss Vary: Cookie, exposing cached responses | secure-packages-25.11 | |
| In progress | Medium | Flask ≤3.1.2 fails Vary: Cookie on session key-only access, risking sensitive caching | secure-packages-26.05 | |
| In progress | Medium | pip misidentifies dual tar/ZIP archives as ZIP, leading to confusing or incorrect installations | secure-packages-26.05 | |
| In progress | Critical | SimpleEval <1.0.5 sandbox escape via object attribute leakage and unsafe callback access | secure-packages-rolling | |
| In progress | Low | GNU inetutils telnet through 2.7 leaks arbitrary client environment variables via NEW_ENVIRON SEND USERVAR | secure-packages-rolling | |
| In progress | Low | GNU inetutils telnet through 2.7 leaks client environment variables via NEW_ENVIRON SEND USERVAR | secure-packages-26.05 | |
| In progress | High | AIOHTTP <3.14.0 CookieJar.load() arbitrary code execution vulnerability via untrusted input | secure-packages-26.05 | |
| In progress | Medium | OpenSSL CRL Distribution Points caching causes excessive heap growth from crafted certificates, DoS risk | secure-packages-rolling | |
| In progress | Medium | Crafted certificate causes OpenSSL heap growth via X.509 CRL distribution points caching | secure-packages-26.05 | |
| In progress | Low | OpenSSL QUIC server miscounts unvalidated bytes, violating 3x amplification limit; DDoS amplification risk | secure-packages-26.05 | |
| In progress | Low | OpenSSL QUIC server overcounts datagram bytes per packet without validation, violating 3x amplification limit | secure-packages-rolling | |
| In progress | High | Incomplete http.cookies CVE-2026-0672 fix: Morsel update/|=, unpickling allow control chars; BaseCookie.js_output lacks validation. | secure-packages-25.11 | |
| In progress | High | lxml <6.1.0 default parsers enable XXE local file read from untrusted XML | secure-packages-26.05 | |
| In progress | High | Mako TemplateLookup.get_template path traversal with // URIs enables arbitrary file reads before 1.3.11 | secure-packages-26.05 |