Medium
CVE-2026-113713
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 704
Reset filters
Low
CVE-2026-113714
virtualenv: Downloaded wheel selection and caching precede verification
Medium
CVE-2026-113720
virtualenv: Seeded files retain permissions from an older cache
Medium
CVE-2026-113719
virtualenv: Seed replacement does not contain metadata deletion paths
Low
CVE-2026-113715
virtualenv: Venv configuration readback can reinterpret path boundaries
Medium
CVE-2026-112914
filelock: SoftFileLock stale-break restore follows a swapped-in symbolic link and hard-links a file of the user running the lock into the lock directory
Medium
CVE-2026-115886
MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints
Medium
CVE-2026-112906
filelock: SoftFileLock evicts a fresh lock file whose watched age another local user's pre-dated file passed on through inode reuse
High
CVE-2026-114135
Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorization
A missing authorization check in Jupyter Server's gateway WebSocket handler allows authenticated users without execution permissions to open kernel channels and run code in affected gateway deployments.
Critical
CVE-2026-96639
Pillow multi-frame loaders can reuse stale native image storage after mode transitions
A vulnerability in Pillow multi-frame image loaders allows stale native image storage to be reused after mode transitions, potentially causing out-of-bounds writes, process crashes, or arbitrary code execution.
Medium
CVE-2026-113721
virtualenv: Generated files can follow existing destination links
Medium
CVE-2026-114603
OpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-api
Medium
CVE-2026-96641
Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise
Medium
CVE-2026-113716
virtualenv: Builtin creation follows linked environment directories
Medium
CVE-2026-112901
Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes
Low
CVE-2026-113731
djust: Arbitrary absolute-path file read in the find_handlers_for_template MCP tool
Medium
CVE-2026-62268
borg extract might modify out-of-tree files when extracting maliciously crafted archives
Medium
CVE-2026-112394
Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size
An out-of-bounds read vulnerability in Pillow allows certain decoders to read heap memory past the end of a buffer when processing specific image dimensions. This may disclose adjacent memory into decoded pixel data or cause an application crash.
High
CVE-2026-112392
Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images
Applying rank, median, minimum, or maximum filters to zero-width or zero-height images in Pillow triggers a NULL pointer dereference in ImagingExpand, causing Python worker processes to crash and enabling denial of service.
Critical
CVE-2026-112900
Pillow: Argument Injection in Ghostscript call, potentially leading into RCE
Pillow lacks sanitization when constructing Ghostscript commands from input filenames, permitting command-line argument injection that can be escalated to remote code execution.
Medium
CVE-2026-113794
pypdf: Possible infinite loop when hitting EOF in standard xref table
An attacker can trigger an infinite loop in pypdf by supplying a crafted, incomplete PDF file that terminates inside the xref table.
Low
CVE-2026-111749
AIOHTTP: Cookie from Subdomain Can Remove Host-Only Scope from Existing Cookies
A vulnerability in aiohttp allows a subdomain to remove the Host-Only flag from existing parent domain cookies, potentially weakening cookie scoping protections.
Medium
CVE-2026-102832
JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked
A vulnerability in JupyterLab allows a command link trust prompt to mark a currently active document as trusted instead of the clicked one, potentially allowing buttons in untrusted documents to execute without confirmation.
Medium
ghsa-pcc4-rvhr-2pr8
Graphify Fortran extractor: incomplete cpp #include hardening allows arbitrary host-file read/exfiltration when indexing an untrusted repo
Incomplete cpp #include hardening in the Graphify Fortran extractor allows arbitrary host files to be read and exfiltrated into the knowledge graph when indexing an untrusted repository.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.