Open Source Vulnerabilities

seroval

Seroval: Code injection through a typed array's own constructor property

seroval, seroval

Seroval: Script injection through RegExp sources in serialized output

seroval

Seroval: fromJSON deserializer trusts node-supplied array length and sequence doneAt (unauthenticated event-loop DoS)

seroval

Seroval `fromJSON`/`fromCrossJSON` denial of service via unvalidated array node length

seroval

Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type check

mem0ai, mem0ai

Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)

js-jquery

CVE-2026-118664 affecting package js-jquery 3.5.0-4

golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

social-auth-core

Python Social Auth: OpenID Connect nonce is not bound to the browser session, so a stolen authorization code logs the attacker in as the victim

onnx

ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rank

onnx

ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs

onnx

ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute

onnx

ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check)

golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

vllm

vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP server

vllm

vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM engine

vllm

vLLM DeepSeek-OCR image processing vulnerable to denial of service

vllm

vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE

vllm

vLLM: Public multimodal SHM handle forgery reaches worker-side `pickle.loads()` with insecure serialization disabled

vllm

vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)

vllm

vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs

vllm

vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread pool

wasmtime, wasmtime, wasmtime

Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction

github.com/go-jose/go-jose/v4, github.com/go-jose/go-jose/v3

Go JOSE: Panics in JSON parsing

github.com/go-jose/go-jose/v4, github.com/go-jose/go-jose/v3

Go JOSE: Panic during CBC-HMAC processing

systeminformation

systeminformation has path traversal in Linux networkStats() that allows symlink-based file disclosure outside /sys/class/net

systeminformation

systeminformation has prototype pollution in `networkStats()` via the interface name

langgraph-cli

LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output

graphql-scalars

graphql-scalars PhoneNumber scalar is vulnerable to regular expression denial of service

knative-kafka-broker-1.21-controller

gopass before 1.17.0 Path Traversal via fs Storage Prune and IsDir

Volmarg Personal Management System through 2.1.0 OS Command Injection via Storage Folder Path

Dolibarr ERP CRM before 24.0.2 Missing Authorization via public recruitment view.php

FreeImage through 3.18.0 and danoli3 fork before 3.19.25 Heap Buffer Overflow via GIF_PLAYBACK Compositing

FreeImage through 3.18.0 and danoli3 fork before 3.19.22 Heap Buffer Overflow via IFF/LBM PBM RLE Decoder

python-markdown2 through 2.5.5 Denial of Service via Unclosed Inline Link Destinations

CherryTree through 1.7.2 Local File Disclosure via Embedded-File Filename Path

CherryTree through 1.7.2 OS Command Injection via Custom Web Link Action

xianyu-auto-reply-fix through 2.0.7 Unauthenticated Message Sending via /send-message

Signal K Server before 2.33.0 Missing Authentication via /skServer/ziplogs

OvenMediaEngine through 0.21.0 OVT Relay DoS via Oversized payload_length

ClashMi through 1.0.32.1801 Disabled TLS Certificate Validation Enables Update MITM

autobahn

Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566)

i18next-http-backend

i18next-http-backend: Query-parameter injection through & and = in lng when loadPath/addPath puts {{lng}} in the query string

re2js

RE2JS: Quadratic-time denial of service in re2js lookbehind matching

OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different client