Open Source Vulnerabilities

pillow

CVE-2026-42308 in pillow - Patched by Root

pillow

CVE-2026-42310 in pillow - Patched by Root

pillow

CVE-2026-54058 in pillow - Patched by Root

pillow

CVE-2026-54060 in pillow - Patched by Root

pillow

CVE-2026-55379 in pillow - Patched by Root

pillow

CVE-2026-59197 in pillow - Patched by Root

pillow

CVE-2026-59198 in pillow - Patched by Root

pillow

CVE-2026-59199 in pillow - Patched by Root

pillow

CVE-2026-96637 in pillow - Patched by Root

pillow

CVE-2026-96644 in pillow - Patched by Root

pillow

GHSA-56pw-mpj4-fxww in pillow - Patched by Root

pillow

CVE-2026-112390 in pillow - Patched by Root

pillow

CVE-2026-112392 in pillow - Patched by Root

pillow

CVE-2026-112393 in pillow - Patched by Root

pillow

CVE-2026-112397 in pillow - Patched by Root

pillow

CVE-2026-112398 in pillow - Patched by Root

pillow

CVE-2026-112399 in pillow - Patched by Root

pillow

CVE-2026-112400 in pillow - Patched by Root

pillow

CVE-2026-112406 in pillow - Patched by Root

pillow

CVE-2026-112892 in pillow - Patched by Root

pillow

CVE-2026-112895 in pillow - Patched by Root

pillow

CVE-2026-112896 in pillow - Patched by Root

pillow

CVE-2026-112900 in pillow - Patched by Root

pillow

CVE-2026-112403 in pillow - Patched by Root

pillow

CVE-2026-59200 in pillow - Patched by Root

pillow

CVE-2026-55380 in pillow - Patched by Root

pillow

CVE-2026-112402 in pillow - Patched by Root

pillow

CVE-2026-112404 in pillow - Patched by Root

pillow

CVE-2026-59204 in pillow - Patched by Root

pillow

CVE-2026-59205 in pillow - Patched by Root

pillow

CVE-2026-96640 in pillow - Patched by Root

pillow

CVE-2026-96642 in pillow - Patched by Root

pillow

CVE-2026-96778 in pillow - Patched by Root

pillow

CVE-2026-112894 in pillow - Patched by Root

pillow

CVE-2026-54059 in pillow - Patched by Root

modsecurity, modsecurity, modsecurity

modsecurity, modsecurity, modsecurity, modsecurity-apache, modsecurity-apache, modsecurity-apache

musl, musl, musl

modsecurity, modsecurity, modsecurity, modsecurity-apache, modsecurity-apache, modsecurity-apache

modsecurity, modsecurity, modsecurity

OpenHuman: Embedded Google Meet webview can silently capture the macOS desktop without a user gesture

OpenHuman: MCP tool description injection: untrusted server descriptions execute in agent LLM context without sanitization

ESPectre: Unsafe Deserialization on .npz dataset leads to Code Execution

ntopng: Stack buffer overflow (write) in nDPI custom category detection allows remote code execution via crafted network packets

ntopng: authenticated (non-admin) OS command injection via the vulnerability-scan `scan_ports` parameter (`nmap` argument reaches `popen`)

HomeBox: Email Case-Sensitivity Bypass Allows Duplicate Account Creation and Login Denial of Service

HomeBox: Stored XSS via `javascript:` URI in Custom Entity Fields

HomeBox: Timing Side-Channel in Login Endpoint Allows User Enumeration via Bcrypt Hashing Delay

Cocos Intra-handshake attested TLS implementation is vulnerable to Diversion Attacks

Symfony: Ip Constraint public/private Modes Accept IPv4-Mapped and IPv4-Compatible IPv6 Addresses allowing SSRF Filter Bypass