Open Source Vulnerabilities

python-3.14, python-3.14

Metalama's Visual Studio inter-process named pipe allows unsafe deserialization that enables local code execution

Filecoin Pin: Unbounded DAG pinning can exhaust filecoin-pin server resources

Tesseract: Crafted LSTM model (`WeightMatrix` mode byte) triggers `ASSERT_HOST` abort in `WeightMatrix::DeSerializeOld` under `FAST_FLOAT` — Denial of Service

Filecoin Pin: Fork bypass in the privileged GitHub Actions workflow

Tesseract: Double free and use after free in the PAGE XML renderer on right-to-left pages

RAGFlow: OpenAI-compatible agent completion bypasses private canvas authorization

python-3.12, python-3.12

Arc: DuckDB I/O aliases bypass database RBAC after CVE-2026-47735

OpenVM: MemoryMerkleAir allows below-leaf rows to alter memory roots

OpenVM's OpenVmHalo2Verifier self-call can bypass proof verification

Pi-hole: arbitrary root file clobber / chmod / disclosure via updatecheck.sh cron following /etc/pihole/versions symlink

Pi-hole: Local privilege escalation from `pihole` user to root via CVE-2026-41489 fix bypass

OpenVM's OpenVmHalo2Verifier accepts non-canonical app commitments

knative-operator-1.24-webhook

knative-operator-1.24-webhook

Pi-hole: file:// adlist read check and curl can resolve different files

SNARK Verifier: Halo 2 aggregation mishandles point-at-infinity proof elements

draw.io Desktop allows Windows executable search-path hijacking

SNARK Verifier: noncanonical accumulator limb decoding

Ladybird: FinalizationRegistry::cleanup() heap use-after-free via reentrant unregister()

knative-operator-1.24

knative-operator-1.24

HoneySQL unchecked entity names can lead to SQL injection results

Ladybird: Missing origin-clean enforcement in CSSStyleSheet allows cross-origin CSS read and mutation

pgAdmin 4: Materialized view refresh redirects its connection through a crafted database name

pgAdmin 4: A user's other sessions survive a change of their password

pgAdmin 4: Files opened in a storage directory follow a symbolic link, hard link or FIFO planted after the containment check

pgAdmin 4: Connection file paths and parameter keys escape the user's storage directory

pgAdmin 4: Non-administrators can share a server with every user

pgAdmin 4: libpq uses the pgAdmin service account's own password file and client certificate

pgAdmin 4: Server passwords are left in pgAdmin's process environment

pgAdmin 4: Connection services are not restricted in server mode

pgAdmin 4: libpq uses the pgAdmin service account's Kerberos credentials

pgAdmin 4: Utility binary path can point at a shared storage directory

pgAdmin 4: SSH tunnels use the pgAdmin service account's own SSH identity

pgAdmin 4: Import/Export Data query export runs a command through a backslash in a double-quoted identifier

pgAdmin 4: File Manager and storage-path tools act on a different path from the one checked

pgAdmin 4: An LDAP or Kerberos login is logged in to another account with the same username

pgAdmin 4: The failed login limit can be bypassed, and Flask-Security's own views skip pgAdmin's login and password checks

go-xrpl: ParseMPTAmountBinary: positive MPT amount silently decoded as negative (int64 wrap)

Immich: A regular user can create SharedLink for album/asset belonging to another user through CreateSharedLink API

Immich: Partner "view-only" sharing leaks GPS coordinates of the sharer's archived assets via GET /api/map/markers

Immich: Unauthenticated filesystem path injection (arbitrary directory write + recursive delete) in the machine-learning service

python-3.12, python-3.12

Kargo: Privilege escalation via Project RBAC management in the Kargo API

PinePods: Authenticated SSRF via podcast RSS enclosure URL (server-side fetch of attacker-controlled URL, no host validation)

MyTube: Unauthenticated Media Access via Static Routes Bypassing Login

MyTube: Visitor Can Access Hidden Video Metadata and Content

knative-operator-1.24