Security advisories

medium2026-07-20

CVE-2026-28231-pillow-heif: Integer Overflow in Encode Path Buffer Validation Leads to Heap Out-of-Bounds Read

bigcat88/pillow_heif · GHSA-5gjj-6r7v-ph3x

medium2026-07-20

CVE-2026-25527-changedetection.io is vulnerable to unauthenticated static path traversal

dgtlmoon/changedetection.io · GHSA-9jj8-v89v-xjvw

high2026-07-20

CVE-2025-67726-Tornado: Quadratic DoS via Crafted Multipart Parameters

tornadoweb/tornado · GHSA-jhmp-mqwm-3gq8

high2026-07-20

CVE-2025-67725-Tornado: Quadratic DoS via Repeated Header Coalescing

tornadoweb/tornado · GHSA-c98p-7wgm-6p64

medium2026-07-20

CVE-2025-67724-Tornado vulnerable to Header Injection and XSS via reason argument

tornadoweb/tornado · GHSA-pr2v-jx2c-wg9f

medium2026-07-20

CVE-2026-67313-Axios: Excessive recursion in formDataToJSON can cause denial of service

axios/axios · GHSA-42h9-826w-cgv3

medium2026-07-20

CVE-2026-67314-Axios: Prototype pollution auth subfields can inject Basic auth

axios/axios · GHSA-xj6q-8x83-jv6g

medium2026-07-20

CVE-2026-67312-Axios: Deep formToJSON Key Recursion Can Cause Denial of Service

axios/axios · GHSA-pmv8-rq9r-6j72

high2026-07-19

CVE-2026-12484-Keras: TorchModuleWrapper can deserialize unsafe PyTorch pickle data

keras-team/keras · GHSA-v2w2-w228-c444

high2026-07-17

CVE-2026-65838-Skipper: Incomplete fix for CVE-2026-50197: an oversized body can bypass OPA deny-on-presence Rego policies

zalando/skipper · GHSA-8qqm-fp2q-v734

medium2026-07-17

CVE-2026-54246-Skipper's routesrv-no-auth component: All routesrv API Endpoints Lack Authentication

zalando/skipper · GHSA-5587-2x54-jj6h

high2026-07-17

CVE-2026-55177-CloudTAK: Authenticated full-read SSRF in the /api/esri* routes — user-controlled URL fetched with no IP-classification guard

dfpc-coe/cloudtak · GHSA-r95q-fp26-h3hc

medium2026-07-17

CVE-2026-54559-PocketSphinx: Buffer overflows in language and acoustic model loading code

cmusphinx/pocketsphinx · GHSA-56r5-2p2f-7cxp

medium2026-07-17

CVE-2026-54570-AngleSharp HTML5 Spec Compliance: mXSS via annotation-xml HTML Integration Point Bypass

anglesharp/anglesharp · GHSA-pgww-w46g-26qg

medium2026-07-17

PRoot-Distro has Path Traversal in proot-distro copy — Arbitrary Read, Write, and Persistent Code Execution Outside Container Rootfs

termux/proot-distro · GHSA-mfr4-mq8w-vmg6

medium2026-07-17

CVE-2026-53496-ExifReader HEIC/AVIF ISO-BMFF parser throws uncaught RangeError on truncated boxes

mattiasw/exifreader · GHSA-g77h-45rf-hcx4

high2026-07-17

CVE-2026-54567-Flask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641)

jugmac00/flask-reuploaded · GHSA-937x-gpqr-72gg

high2026-07-17

CVE-2026-53597-Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loader

microsoft/prompty · GHSA-c4gh-rv8h-q9vw

high2026-07-17

CVE-2026-53598-Prompty: Arbitrary file read via file reference expansion

microsoft/prompty · GHSA-wxhm-2mq7-7697

medium2026-07-17

CVE-2026-54561-mcp-memory-keeper: Arbitrary local file read in context_import via unvalidated filePath

mkreyman/mcp-memory-keeper · GHSA-f7wf-v2vw-mpcx