Security advisories

high2026-07-01

CVE-2022-43467-Open Babel has out-of-bounds write in PQS coord_file parser

openbabel/openbabel · GHSA-f29h-2h58-48r7

high2026-07-01

CVE-2022-42885-Open Babel has uninitialized pointer dereference in GRO residue parser

openbabel/openbabel · GHSA-mw5r-wq2m-397c

high2026-07-01

CVE-2022-41793-Open Babel has out-of-bounds write in CSR PadString (title field)

openbabel/openbabel · GHSA-p594-7xw4-g76p

high2026-07-01

CVE-2022-37331-Open Babel has out-of-bounds write in Gaussian coords_type orientation parser

openbabel/openbabel · GHSA-vr3p-gg26-45v9

medium2026-07-01

CVE-2025-11000-Open Babel has out-of-bounds read in PQS lowerit (pre-buffer read)

openbabel/openbabel · GHSA-m982-7q3h-r784

medium2026-07-01

CVE-2025-10999-Open Babel has NULL pointer dereference in CACAO CacaoFormat::SetHilderbrandt

openbabel/openbabel · GHSA-55j6-rjhx-hwfh

low2026-07-01

CVE-2025-10998-Open Babel has NULL pointer dereference in ChemKinFormat::ReadReactionQualifierLines

openbabel/openbabel · GHSA-j9pp-7wfg-q7fj

high2026-07-01

CVE-2025-10997-Open Babel has heap buffer overflow in ChemKin ChemKinFormat::CheckSpecies

openbabel/openbabel · GHSA-8wq6-qh76-wpv9

critical2026-06-30

CVE-2026-7873-Langflow: Code Injection Vulnerability in Code Validation Endpoint

langflow-ai/langflow · GHSA-v798-mcc6-2m3m

high2026-06-30

CVE-2025-10996-Open Babel has heap buffer overflow in SMILES OBSmilesParser::ParseSmiles

openbabel/openbabel · GHSA-j35x-w4gj-pf7w

low2026-06-30

CVE-2025-10995-Open Babel has out-of-bounds write (overlapping memcpy) in zipstream basic_unzip_streambuf::underflow

openbabel/openbabel · GHSA-8j3x-m868-cpw8

medium2026-06-30

CVE-2026-55219-Paymenter has race condition in payWithCredit() that enables credit double-spend

paymenter/paymenter · GHSA-pgcq-8grm-5rx9

low2026-06-30

CVE-2025-10994-Open Babel has Use-after-free in GAMESS GAMESSOutputFormat::ReadMolecule

openbabel/openbabel · GHSA-pp85-5j63-xpq3

low2026-06-30

CVE-2026-3408-Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence

openbabel/openbabel · GHSA-rxpr-wq63-jr7p

low2026-06-30

CVE-2026-2705-Open Babel has NULL pointer dereference in MOL2 OBAtom::SetFormalCharge

openbabel/openbabel · GHSA-4w5w-4fhm-q483

low2026-06-30

CVE-2026-2704-Open Babel has an out-of-bounds read in CIF transform3d::DescribeAsString

openbabel/openbabel · GHSA-6xw4-2g22-26h8

medium2026-06-30

CVE-2026-48808-Twig: Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterface`

twigphp/twig · GHSA-h8vq-8gpg-mhcg

medium2026-06-30

CVE-2026-48807-Twig: Sandbox `__toString()` policy bypass via `Traversable` in `join` and `replace` filters

twigphp/twig · GHSA-8x9c-rmqh-456c

medium2026-06-30

CVE-2026-48806-Twig: Sandbox `__toString()` policy bypass via dynamic mapping keys

twigphp/twig · GHSA-5v5v-ww74-355v

low2026-06-30

CVE-2026-48805-Twig: Sandbox state regression in deprecated internal wrappers in `src/Resources/core.php`

twigphp/twig · GHSA-p42q-9prx-q5wq