Stanza: RCE via pickle deserialization in the lemmatizer

GHSA-gh9r-c94j-cmp5 CVE-2026-115878 HIGH about 5 hours ago

## TL;DR Loading an attacker-supplied lemma `.pt` runs arbitrary code as the loading user. Since 1.14.0 the lemmatizer stores `pos_dict` as a gzip...

pypi

No PRs yet

pypdf has possible infinite loop when hitting EOF in standard xref table during trailer search

GHSA-5849-834g-hvw5 CVE-2026-119203 HIGH 4 days ago

### Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires opening an incomplete file witho...

pypi

No PRs yet

pypdf has possible large memory usage when parsing page tree

GHSA-cggf-277g-3q54 CVE-2026-119204 HIGH 4 days ago

### Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the page tree with man...

pypi

No PRs yet

pypdf has possible infinite loop when cloning dictionaries

GHSA-mfr5-77xh-9j7h CVE-2026-119205 HIGH 4 days ago

### Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires cloning/duplicating a `Dictionar...

pypi

No PRs yet

Authlib RFC 7592 examples omit registration-access-token client binding

GHSA-c73q-w75p-j82v CVE-2026-116672 HIGH 4 days ago

## Description ### Summary RFC 7592 (OAuth 2.0 Dynamic Client Registration Management Protocol) lets a previously registered client read, update,...

pypi

No PRs yet

pypdf has possible long runtimes when retrieving page labels

GHSA-42gh-23hr-vphw CVE-2026-119206 HIGH 4 days ago

### Impact An attacker who uses this vulnerability can craft a PDF which leads to large runtimes. This requires retrieving the page labels of a fi...

pypi

No PRs yet

pypdf has possible large memory usage for exceptions in strict mode

GHSA-4vqv-7265-gm2w CVE-2026-119207 HIGH 4 days ago

### Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires loading an invalid dictionary....

pypi

No PRs yet

pypdf has possible long runtimes/large memory usage for encrypted PDF files

GHSA-62m5-6wh8-28x7 CVE-2026-119208 HIGH 4 days ago

### Impact An attacker who uses this vulnerability can craft a PDF which leads to large runtimes/memory usage. This requires accessing the page co...

pypi

No PRs yet

pypdf has possible large memory usage when parsing cross-reference streams

GHSA-x3rh-gjgm-fmqc CVE-2026-119209 HIGH 4 days ago

### Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires opening a file with cross-refe...

pypi

No PRs yet

pyasn1 has quadratic CPU consumption in constructed BIT STRING decoding

GHSA-2qm8-x737-gmw5 CVE-2026-119196 HIGH 4 days ago

## Summary In pyasn1 through 0.6.4, decoding a constructed BIT STRING with many fragments repeatedly shifts and copies the entire value accumulate...

pypi

16

Dependabot PRs

pyasn1 has quadratic-complexity denial of service in binary REAL decoding

GHSA-mm57-4v3p-rchx CVE-2026-119197 HIGH 4 days ago

## Summary In pyasn1 0.6.4 and earlier, decoding a binary-encoded ASN.1 REAL with a large mantissa can consume CPU time quadratic in the mantissa ...

pypi

16

Dependabot PRs

pyasn1 has quadratic-time denial of service in constructed string and indefinite-length ANY decoding

GHSA-9m75-vc3g-4x39 CVE-2026-119195 HIGH 4 days ago

## Summary In pyasn1 0.6.4 and earlier, decoding a constructed OCTET STRING or character string made of many fragments can spend disproportionate ...

pypi

16

Dependabot PRs

pyasn1 has quadratic CPU use in schemaless BER/CER/DER container decoding

GHSA-fm9c-5rcf-2q5p CVE-2026-119194 HIGH 4 days ago

### Summary When an application decodes attacker-controlled BER, CER, or DER data without an ASN.1 schema, a container with many distinct long tag...

pypi

16

Dependabot PRs

GraphQL-core has denial of service via memory leak in aborted validations

GHSA-mpqx-q82w-9x46 CVE-2026-119286 HIGH 4 days ago

### Summary When a validation was aborted because the document contained more errors than allowed by `max_errors` (100 by default), `validate()` r...

pypi

1

Dependabot PRs

OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different client

GHSA-7984-qgvg-3j9c CVE-2026-118669 HIGH 4 days ago

## Summary OAuthlib's token grant handlers can authenticate one client while authorizing the grant type and requested scopes using a different, at...

pypi

No PRs yet

OpenWISP Controller CA CRL REST API does not scope requests to managed organizations

GHSA-9gh4-xw24-9xh5 CVE-2026-116677 MODERATE 4 days ago

## Summary The authenticated REST API endpoint for downloading a CA Certificate Revocation List resolves the requested CA without applying the org...

pypi

No PRs yet

joserfc: Compact JWS size guard allocates attacker-controlled segments before rejection

GHSA-9pg5-8c7x-5hfx CVE-2026-119284 MODERATE 4 days ago

## Summary joserfc 1.7.4 defines compact-JWS header, payload, and signature limits, but calls `value.split(b".")` before validating them. Python `...

pypi

No PRs yet

joserfc: Unbounded JWE General JSON `recipients` Array Leads to CPU Exhaustion (DoS) via Repeated RSA Private-Key Decryption

GHSA-jpxq-7h8p-2q76 CVE-2026-119283 HIGH 4 days ago

### Summary `joserfc.jwe.decrypt_json()`, the library's public parser for JWE General JSON Serialization, accepts an attacker-controlled `recipien...

pypi

No PRs yet

Twisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset

GHSA-vpp8-g58w-m8mp HIGH 5 days ago

## Summary An uncontrolled-resource-consumption vulnerability (CWE-400) in the Twisted HTTP/2 server lets any unauthenticated remote client exhaus...

pypi

No PRs yet

PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox

GHSA-26mh-57q7-jfvr CVE-2026-61438 HIGH 5 days ago

### Summary JobWorkflowExecutor._exec_inline_python() is designed to safely execute inline Python expressions from YAML workflow script: steps usin...

pypi

No PRs yet

Tornado: Event loop blocking and excess memory use from chunked bodies with many small chunks

GHSA-r4j5-9xpp-3985 CVE-2026-115927 MODERATE 6 days ago

### Summary When Tornado reads an HTTP/1.1 body that uses chunked transfer encoding, it processes all chunks that have already arrived without yie...

pypi

No PRs yet

Tornado: Open redirect in RedirectHandler via protocol-relative URLs

GHSA-pw9p-v7r6-gx4p CVE-2026-116578 LOW 6 days ago

### Summary `tornado.web.RedirectHandler` builds its target URL by substituting parts of the request path into a template. Depending on where thos...

pypi

No PRs yet

Tornado: Quadratic CPU usage when parsing HTTP headers with line folding

GHSA-pcg2-g6cj-q92c CVE-2026-116577 MODERATE 6 days ago

### Summary Tornado's HTTP header parser takes quadratic time (O(n²)) when a header value is continued across many "obsolete line folding" (obs-fo...

pypi

No PRs yet

Electrum: Malicious server can replace a just-broadcast tx and try to trick user into RBF-ing it

GHSA-6jp4-8v48-cc5v CVE-2026-117601 CRITICAL 6 days ago

### Summary The main Electrum server the client connects to is trusted with mempool ("unconfirmed") transactions. This is documented [design](http...

pypi

No PRs yet

Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)

GHSA-5324-3w58-qpp2 CVE-2026-116575 MODERATE 6 days ago

Summary _build_session_scope() in mem0/memory/main.py builds the conversation-history scope key used to fetch/store the last N raw messages by nai...

npm pypi

No PRs yet

Python Social Auth: OpenID Connect nonce is not bound to the browser session, so a stolen authorization code logs the attacker in as the victim

GHSA-h2r5-x5m7-3935 CVE-2026-115910 MODERATE 6 days ago

### Summary The generic OpenID Connect backend (`OpenIdConnectAuth` and every backend built on it) stores the `nonce` in the shared Association ta...

pypi

No PRs yet

ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rank

GHSA-6pwm-x34p-fvj2 CVE-2026-115920 MODERATE 6 days ago

## Summary ONNX ConvTranspose shape inference performed an out-of-bounds read when the weight tensor had fewer than three dimensions and the model...

pypi

No PRs yet

ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs

GHSA-q69g-f4f5-v8m7 CVE-2026-115922 MODERATE 6 days ago

## Summary ONNX's Python tensor-materialization helpers could allocate memory according to attacker-controlled tensor dimensions without verifying...

pypi

No PRs yet

ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute

GHSA-m4pr-6v3c-6fgr CVE-2026-115921 MODERATE 6 days ago

## Summary ONNX shape inference did not safely validate the required Scan `num_scan_inputs` attribute. Two malformed values could terminate or dis...

pypi

No PRs yet

ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check)

GHSA-48m4-24cq-37qf CVE-2026-115919 MODERATE 6 days ago

## Summary ONNX shape inference performed an out-of-bounds read when processing a malformed RNN, GRU, or LSTM node from opsets 1–6 whose first inp...

pypi

No PRs yet

vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP server

GHSA-vvpg-rrww-wpmh CVE-2026-115917 LOW 6 days ago

### Summary The OpenAI-compatible server registers Starlette `CORSMiddleware` with `allowed_origins` defaulting to `["*"]`, and performs no authen...

pypi

No PRs yet

vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM engine

GHSA-8397-8qf6-f2gm CVE-2026-115913 MODERATE 6 days ago

### Summary The Phi-4 multimodal audio encoder (`phi4mm_audio.py` / `phi4mm_utils.py`) runs its conformer attention in **eager mode by default**: ...

pypi

No PRs yet

vLLM DeepSeek-OCR image processing vulnerable to denial of service

GHSA-gq5q-89c7-vhvx CVE-2026-115914 MODERATE 6 days ago

## Summary Any vLLM deployment serving a model of the DeepSeek-OCR family — `deepseek-ai/DeepSeek-OCR`, `deepseek-ai/DeepSeek-OCR-2`, or `baidu/Un...

pypi

No PRs yet

vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE

GHSA-h3rc-j82p-2c3h CVE-2026-115915 HIGH 6 days ago

### Summary In vLLM 0.30.0, `ImageMediaIO` passes attacker-controlled image bytes to Pillow's format autodetection without restricting the accepte...

pypi

No PRs yet

vLLM: Public multimodal SHM handle forgery reaches worker-side `pickle.loads()` with insecure serialization disabled

GHSA-6757-hggm-hp2w CVE-2026-115912 HIGH 6 days ago

## Affected - **Ecosystem / package:** pip / `vllm` - **Affected versions:** vLLM < 0.32.0. ## Summary When `--mm-processor-cache-type shm` is e...

pypi

No PRs yet

vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)

GHSA-q97c-p368-75c4 CVE-2026-115916 MODERATE 6 days ago

For a model whose vocabulary size is an exact multiple of the embedding padding size (64) — e.g. any Llama-2-family model, vocab 32000 — a single r...

pypi

No PRs yet

vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs

GHSA-x567-49g5-p4cf CVE-2026-115918 MODERATE 6 days ago

## Summary vLLM's `/v1/responses` endpoint accepts request-level `chat_template_kwargs`, but does not apply the `--trust-request-chat-template` ga...

pypi

No PRs yet

vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread pool

GHSA-542m-9234-8gvf CVE-2026-115911 MODERATE 6 days ago

### Summary vLLM renders chat templates by passing the resolved Jinja2 source to `tokenizer.apply_chat_template()`, which compiles and `.render()`s...

pypi

No PRs yet

LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output

GHSA-8prr-f582-jqq3 CVE-2026-115885 MODERATE 6 days ago

### Summary `langgraph deploy --verbose` printed the temporary registry push token that the CLI uses to log Docker in to the deployment's image re...

pypi

No PRs yet

Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566)

GHSA-pjh6-c8mg-3x7m CVE-2026-116579 MODERATE 6 days ago

### Summary permessage-brotli inflates each frame fully before checking maxMessagePayloadSize, so one 421-byte frame makes the server allocate abo...

pypi

No PRs yet

LangGraph JavaScript custom authentication may permit cross-user Store access

GHSA-4hm6-w6qq-w73v CVE-2026-118668 HIGH 6 days ago

## Summary LangGraph deployments using JavaScript or TypeScript custom authentication may fail to apply Store authorization changes returned by an...

pypi

No PRs yet

filelock: SoftReadWriteLock follows a lock tree swapped in after its first acquire and writes lock records into directories of the user running the lock

GHSA-wfhq-q4j2-c37m CVE-2026-112941 LOW 6 days ago

`SoftReadWriteLock` (and `AsyncSoftReadWriteLock`, which wraps one) checks once per lock object, by name, that `<path>.rw`, `<path>.rw/gen` and `<p...

pypi

No PRs yet

filelock: StrictSoftFileLock creates its claim directories without the lock mode, so another local user with a write bit on them can end a live hold

GHSA-6627-m3xw-93mp CVE-2026-112908 MODERATE 6 days ago

`StrictSoftFileLock` and `AsyncStrictSoftFileLock` apply the caller's `mode` to the sentinel (the lock file at `<path>`) and to both claim files (t...

pypi

No PRs yet

filelock: StrictSoftFileLock and SoftReadWriteLock adopt a protocol directory another user created first, losing mutual exclusion

GHSA-9c4x-gm8v-wgc4 CVE-2026-112911 MODERATE 6 days ago

`StrictSoftFileLock`, `AsyncStrictSoftFileLock`, `SoftReadWriteLock` and `AsyncSoftReadWriteLock` keep their whole ownership state as files in a di...

pypi

No PRs yet

filelock: WindowsFileLock ignores mode: a 0o600 lock file and the ReadWriteLock database inherit the directory ACL

GHSA-8mx5-7m5m-r77g CVE-2026-112910 MODERATE 6 days ago

filelock on Windows ignores the `mode` argument. `FileLock(path, mode=0o600)` creates the same file as `FileLock(path)`: one with no security descr...

pypi

No PRs yet

filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeout

GHSA-cwqr-hh33-gh44 CVE-2026-112915 MODERATE 6 days ago

`ReadWriteLock` and `AsyncReadWriteLock` (the SQLite-backed reader/writer lock) run `PRAGMA journal_mode=MEMORY` on a fresh connection for every ac...

pypi

No PRs yet

filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable marker

GHSA-rfpc-qcw5-3pc4 CVE-2026-112939 MODERATE 6 days ago

`SoftFileLock`, `MarkerSoftFileLock`, `SoftFileLease`, their async variants and a `FileLock` that has fallen back to a soft lock on `ENOSYS` decide...

pypi

No PRs yet

filelock: Symlink swap during SoftFileLock's writability check leaks whether a path exists and is writable by the lock taker

GHSA-9j6q-wvj5-jgjg CVE-2026-112912 LOW 6 days ago

`raise_on_not_writable_file()` is the check that `SoftFileLock` and the locks sharing its acquire path run before every attempt. It looks at the lo...

pypi

No PRs yet

filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock path

GHSA-69hj-f68j-2879 CVE-2026-112909 MODERATE 6 days ago

`UnixFileLock`, the backend of `FileLock` and `AsyncFileLock` on Unix, empties whatever regular file it finds at the lock path once it holds the `f...

pypi

No PRs yet

filelock: ReadWriteLock follows a symlink at the lock path into SQLite

GHSA-j8f7-rjxc-mr56 CVE-2026-112936 MODERATE 6 days ago

### Summary `ReadWriteLock` and `AsyncReadWriteLock` resolve the lock path with `pathlib.Path.resolve()` and pass it to `sqlite3.connect()` withou...

pypi

1

Dependabot PRs