| uv has ZIP payload obfuscation through parsing differentialsCVE-2025-13327 · GHSA-V653-R55G-HCMG |
uvRed Hat AI Inference Server/rhaiis-preview/vllm-cuda-rhel9 |
Rust / CargoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromiseCVE-2026-96641 · GHSA-4RM8-3HMM-39FGبازه‌ها نیاز به بررسی دارند. |
pillowExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
PyPIRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1CVE-2026-114501 · GHSA-654X-CWWV-5J9Cبازه‌ها نیاز به بررسی دارند. |
pillowExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
PyPIRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoSCVE-2026-96637 · GHSA-G842-9RC4-69PWبازه‌ها نیاز به بررسی دارند. |
pillowExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
PyPIRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)CVE-2026-96636 · GHSA-P8HX-V2P6-RP84بازه‌ها نیاز به بررسی دارند. |
pillowExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
PyPIRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Pillow: TarIO negative size field causes infinite CPU-spin loopCVE-2026-96642 · GHSA-3J72-P6QG-6XP7بازه‌ها نیاز به بررسی دارند. |
pillowExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
PyPIRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic timeCVE-2026-96643 · GHSA-G4QV-2JXX-769Hبازه‌ها نیاز به بررسی دارند. |
pillowExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
PyPIRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)CVE-2026-96644 · GHSA-9V9V-9QVF-H2HJبازه‌ها نیاز به بررسی دارند. |
pillowExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
PyPIRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| filelock: SoftReadWriteLock follows a lock tree swapped in after its first acquire and writes lock records into directories of the user running the lockCVE-2026-112941 · GHSA-WFHQ-Q4J2-C37M |
filelockAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
کم
|
اصلاح گزارش شده |
|
| filelock: StrictSoftFileLock and SoftReadWriteLock adopt a protocol directory another user created first, losing mutual exclusionCVE-2026-112911 · GHSA-9C4X-GM8V-WGC4 |
filelockAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| filelock: Symlink swap during SoftFileLock's writability check leaks whether a path exists and is writable by the lock takerCVE-2026-112912 · GHSA-9J6Q-WVJ5-JGJG |
filelockAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
کم
|
اصلاح گزارش شده |
|
| filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable markerCVE-2026-112939 · GHSA-RFPC-QCW5-3PC4 |
filelockAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock pathCVE-2026-112909 · GHSA-69HJ-F68J-2879 |
filelockAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeoutCVE-2026-112915 · GHSA-CWQR-HH33-GH44 |
filelockAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| filelock: SoftReadWriteLock holder refresh writes through a hard link and hangs on a named pipe that another local user renames over its recordCVE-2026-112934 · GHSA-FJ95-FR6C-H845 |
filelockAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| filelock: SoftFileLock stale-lock break removes a live lock file on a reused inode number and admits two holdersCVE-2026-112935 · GHSA-FQ56-3CX3-FJXP |
filelockAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| filelock: ReadWriteLock follows a symlink at the lock path into SQLiteCVE-2026-112936 · GHSA-J8F7-RJXC-MR56 |
filelockAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutesCVE-2026-112901 · GHSA-XGH8-JP6Q-P5X8بازه‌ها نیاز به بررسی دارند. |
pillowExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
PyPIRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Pillow: Heap use-after-free when encoding TIFF to an in-memory bufferCVE-2026-112396 · GHSA-4RR5-89J8-MWWMبازه‌ها نیاز به بررسی دارند. |
pillowExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
PyPIRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer sizeCVE-2026-112394 · GHSA-4558-3H8R-V8XPبازه‌ها نیاز به بررسی دارند. |
pillowExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
PyPIRed Hat |
متوسط
|
اصلاح گزارش شده |
|
