Open Source Vulnerabilities

onnx

ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute

onnx

ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check)

golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

vllm

vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP server

vllm

vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM engine

vllm

vLLM DeepSeek-OCR image processing vulnerable to denial of service

vllm

vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE

vllm

vLLM: Public multimodal SHM handle forgery reaches worker-side `pickle.loads()` with insecure serialization disabled

vllm

vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)

vllm

vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs

vllm

vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread pool

wasmtime, wasmtime, wasmtime

Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction

github.com/go-jose/go-jose/v4, github.com/go-jose/go-jose/v3

Go JOSE: Panics in JSON parsing

github.com/go-jose/go-jose/v4, github.com/go-jose/go-jose/v3

Go JOSE: Panic during CBC-HMAC processing

systeminformation

systeminformation has path traversal in Linux networkStats() that allows symlink-based file disclosure outside /sys/class/net

systeminformation

systeminformation has prototype pollution in `networkStats()` via the interface name

langgraph-cli

LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output

graphql-scalars

graphql-scalars PhoneNumber scalar is vulnerable to regular expression denial of service

knative-kafka-broker-1.21-controller

gopass before 1.17.0 Path Traversal via fs Storage Prune and IsDir

Volmarg Personal Management System through 2.1.0 OS Command Injection via Storage Folder Path

Dolibarr ERP CRM before 24.0.2 Missing Authorization via public recruitment view.php

FreeImage through 3.18.0 and danoli3 fork before 3.19.25 Heap Buffer Overflow via GIF_PLAYBACK Compositing

FreeImage through 3.18.0 and danoli3 fork before 3.19.22 Heap Buffer Overflow via IFF/LBM PBM RLE Decoder

python-markdown2 through 2.5.5 Denial of Service via Unclosed Inline Link Destinations

CherryTree through 1.7.2 Local File Disclosure via Embedded-File Filename Path

CherryTree through 1.7.2 OS Command Injection via Custom Web Link Action

xianyu-auto-reply-fix through 2.0.7 Unauthenticated Message Sending via /send-message

Signal K Server before 2.33.0 Missing Authentication via /skServer/ziplogs

OvenMediaEngine through 0.21.0 OVT Relay DoS via Oversized payload_length

ClashMi through 1.0.32.1801 Disabled TLS Certificate Validation Enables Update MITM

autobahn

Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566)

i18next-http-backend

i18next-http-backend: Query-parameter injection through & and = in lng when loadPath/addPath puts {{lng}} in the query string

re2js

RE2JS: Quadratic-time denial of service in re2js lookbehind matching

OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different client

zip

zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE

langgraph-api

LangGraph JavaScript custom authentication may permit cross-user Store access

filelock

filelock: SoftReadWriteLock follows a lock tree swapped in after its first acquire and writes lock records into directories of the user running the lock

filelock

filelock: StrictSoftFileLock creates its claim directories without the lock mode, so another local user with a write bit on them can end a live hold

filelock

filelock: StrictSoftFileLock and SoftReadWriteLock adopt a protocol directory another user created first, losing mutual exclusion

filelock

filelock: WindowsFileLock ignores mode: a 0o600 lock file and the ReadWriteLock database inherit the directory ACL

filelock

filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeout

filelock

filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable marker

filelock

filelock: Symlink swap during SoftFileLock's writability check leaks whether a path exists and is writable by the lock taker

filelock

filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock path

filelock

filelock: ReadWriteLock follows a symlink at the lock path into SQLite

filelock

filelock: StrictSoftFileLock follows a symbolic link swapped in at <path>.filelock and creates claim files in a directory another local user chooses

filelock

filelock: SoftReadWriteLock holder refresh writes through a hard link and hangs on a named pipe that another local user renames over its record