Medium
CVE-2026-113790
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 229
Reset filters
Medium
CVE-2026-96641
Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise
Medium
CVE-2026-96638
Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode
Medium
CVE-2026-112391
Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()
Medium
CVE-2026-112898
Pillow: Image.quantize() with empty palette leaks uninitialized stack memory
Low
CVE-2026-113731
djust: Arbitrary absolute-path file read in the find_handlers_for_template MCP tool
Medium
CVE-2026-112394
Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size
An out-of-bounds read vulnerability in Pillow allows certain decoders to read heap memory past the end of a buffer when processing specific image dimensions. This may disclose adjacent memory into decoded pixel data or cause an application crash.
High
CVE-2026-112392
Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images
Applying rank, median, minimum, or maximum filters to zero-width or zero-height images in Pillow triggers a NULL pointer dereference in ImagingExpand, causing Python worker processes to crash and enabling denial of service.
High
CVE-2026-112893
Pillow: Invalid free in FreeType glyph rendering when a stroker is active
A vulnerability in Pillow allows an invalid or double free when rendering text with a stroke from untrusted fonts, potentially leading to memory corruption or crashes.
Critical
CVE-2026-112403
Pillow: Heap buffer overflow in ImagingJpegDecode
A heap buffer overflow vulnerability in Pillow allows attackers to cause out-of-bounds writes when decoding specially crafted lossless JPEG images using draft scaling. This issue occurs when libjpeg-turbo silently ignores scaling requests, leading to memory corruption or crashes.
High
CVE-2026-112895
Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)
Unbounded recursion in Pillow when parsing PDF page trees or trailer chains can cause severe CPU and memory exhaustion or crashes during PDF append operations.
High
CVE-2026-106443
WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE
Medium
ghsa-4v7v-gqf9-ww2g
Vyper: Call stack corruption when passing complex type containing non-base type members as argument
High
CVE-2026-104851
fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution
High
ghsa-v853-p72q-4cfw
Quart leaks raw request body (incl. plaintext passwords) to stdout via stray debug print in Body.__await__
Medium
CVE-2026-102265
PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token header
High
CVE-2026-102273
PyJWT accepts public JWK containers as HMAC secrets
High
CVE-2026-77247
MCP Atlassian: Arbitrary server-local file upload to Jira/Confluence attachments via unrestricted file_path parameters
High
CVE-2026-77257
MCP Atlassian: HTTP upload tools accept arbitrary server-local file paths
Medium
CVE-2026-85078
sanic chunked trailer request smuggling allows hidden second request execution
Medium
CVE-2026-57173
vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completions
High
CVE-2026-100845
MONAI: Unsafe deserialization in NumpyReader allows arbitrary code execution via malicious .npy files
High
CVE-2026-49114
ONNX: TOCTOU arbitrary file read/write in save_external_dat
Critical
CVE-2026-79657
NLTK: Allowlisted pickle loaders still permit code execution in current source
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.