vLLM's hardcoded trust_remote_code=True in NemotronVL and KimiK25 bypasses user security opt-out

Heap buffer overflow in libvpx

Vim modeline bypass via various options affects Vim < 9.2.0276

Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure

In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O…

LIBPNG has a heap buffer overflow in png_set_quantize

Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication

OpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to…

Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing

OpenEXR CompositeDeepScanLine integer-overflow leads to heap OOB write

MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery

Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode

vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution

Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows

urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API

An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec

Pillow is vulnerable to a FITS GZIP decompression bomb

jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seed

Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image

Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

nghttp2 Denial of service: Assertion failure due to the missing state validation

pyasn1 Vulnerable to Denial of Service via Unbounded Recursion

Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive

PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)

Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions

Pillow has an out-of-bounds write when loading PSD images

Denial of Service in Python Protobuf

pyasn1 has a DoS vulnerability in decoder

PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed

AIOHTTP Vulnerable to Deserialization of Untrusted Data

Vim affected by Command injection via newline in glob()

Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames

Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id

Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack

Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()

vLLM vulnerable to Server-Side Request Forgery (SSRF) in `MediaConnector`

Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()