Security advisories

low2026-05-18

CVE-2026-45244-Summarize contains a missing authorization vulnerability

steipete/summarize · GHSA-67gq-6q8c-qqh6

medium2026-05-18

CVE-2026-45245-Summarize's hover summary feature allows malicious pages to dispatch synthetic mouseover events over attacker-controlled links

steipete/summarize · GHSA-2r69-qgv3-hr65

high2026-05-18

CVE-2026-45242-Summarize contains a path traversal vulnerability

steipete/summarize · GHSA-8jr4-6r33-phwm

medium2026-05-18

CVE-2026-45243-Summarize contains a missing authorization vulnerability

steipete/summarize · GHSA-5624-2pmv-jx46

medium2026-05-18

CVE-2026-46559-ImageMagick: Heap Buffer Over-Write of a single byte in the JP2 encoder.

imagemagick/imagemagick · GHSA-533m-3wf6-c33v

medium2026-05-18

CVE-2026-46557-ImageMagick: Stack overflow in fx operation

imagemagick/imagemagick · GHSA-rcr6-g7jc-f57g

medium2026-05-18

CVE-2026-46523-ImageMagick: Use-After-Free in MSL decoder.

imagemagick/imagemagick · GHSA-5r4x-w6p5-222q

high2026-05-18

CVE-2026-46522-ImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustion

imagemagick/imagemagick · GHSA-7gg8-qqx7-92g5

medium2026-05-18

CVE-2026-46521-ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression

imagemagick/imagemagick · GHSA-jcqp-6r6f-3mfx

high2026-05-18

CVE-2026-46520-ImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions

imagemagick/imagemagick · GHSA-36wm-hprc-mcf5

medium2026-05-18

CVE-2026-45664-ImageMagick: Policy Bypass in MNG coder could

imagemagick/imagemagick · GHSA-g5mf-wqq5-vwg6

medium2026-05-18

CVE-2026-45624-ImageMagick: Heap Buffer Over-Read of a 4 bytes in distort operation.

imagemagick/imagemagick · GHSA-pfvh-m9xv-8966

high2026-05-18

CVE-2026-45367-HAPI FHIR: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint

hapifhir/org.hl7.fhir.core · GHSA-3653-68v6-rq57

medium2026-05-18

CVE-2026-45554-NiceGUI: Unauthenticated log-volume denial of service in dynamic resource routes

zauberzeug/nicegui · GHSA-pq7c-x8g4-rvp6

high2026-05-18

CVE-2026-45553-NiceGUI: Local file disclosure via Docutils file insertion in ui.restructured_text()

zauberzeug/nicegui · GHSA-jfrm-rx66-g536

high2026-05-18

CVE-2026-45686-OpenTelemetry eBPF Instrumentation: Memcached payload length overflow can crash OBI

open-telemetry/opentelemetry-ebpf-instrumentation · GHSA-43g7-cwr8-q3jh

high2026-05-18

CVE-2026-45685-OpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messages

open-telemetry/opentelemetry-ebpf-instrumentation · GHSA-j8p6-96vp-f3r9

medium2026-05-18

CVE-2026-45684-OpenTelemetry eBPF Instrumentation: Log enricher writev path can overread and overwrite user buffers

open-telemetry/opentelemetry-ebpf-instrumentation · GHSA-vvmg-8mjr-g6q3

medium2026-05-18

CVE-2026-45682-OpenTelemetry eBPF Instrumentation: CappedConcurrentHashMap leaks keys after removals

open-telemetry/opentelemetry-ebpf-instrumentation · GHSA-962q-hwm5-52x5

low2026-05-18

CVE-2026-45683-OpenTelemetry eBPF Instrumentation: Java TLS ioctl kprobe allows kernel memory disclosure

open-telemetry/opentelemetry-ebpf-instrumentation · GHSA-fjq3-ffvr-vm46