Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in `modRMRequired()` and `decode()` when disassembling 3DNow! opcodes (`0F 0F`) in builds compiled with `-DCAPSTONE_X86_REDUCE`…

▾ Sunlitcapstone · capstoneEPSS 0.47%via OSV

MAL-2026-10986None

2mo ago

Malicious code in comp-colors (PyPI)

▾ Sunlitcomp-colors · comp-colorsvia OSV

Tagged “pip”

GitPython: Unsafe git option guard bypass via single-character kwarg value token smuggling enables arbitrary command execution

Open WebUI: Stored web worker XSS via Pyodide

Open WebUI: Account enumeration via observable login timing discrepancy

Open WebUI: Scheduled automations continue after pending-user deactivation and stored model ACL revocation

Open WebUI: ReDoS in skill-mention regexes causes whole-instance DoS on default config

Open WebUI: POST /api/v1/images/edit bypasses the global image-edit switch and the per-user image-generation permission

Open WebUI: Unauthenticated WebSocket Access to Collaborative Document Handlers (ydoc:awareness:update, ydoc:document:leave)

Open WebUI: Realtime endpoints accept Redis-revoked JWTs after signout/backchannel logout

Open WebUI: Upload `metadata.knowledge_id` bypasses the knowledge-base write-access check (read-only users can add files to KB)

Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse)

Open WebUI: /api/v1/channels/{id}/members exposes full user model including sensitive credentials

AWS CLI: Overly permissive File Permissions

PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path

GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)

Malicious code in govapkg (PyPI)

pypdf: Possible infinite loop for not terminated inline images

pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)

pypdf: Possible large memory usage for wrong image dimensions

pypdf: Possible long runtimes for repeated malformed cross-reference entries

Malicious code in torch-musa (PyPI)

Malicious code in dev-helper-bg (PyPI)

Malicious code in make-helper (PyPI)

JupyterLab: Allowlist/blocklist check in `PyPIExtensionManager.install()` not enforced for direct callers (missing `await`)

JupyterLab PluginManager lock-rule enforcement bypass

JupyterLab: PyPI extension blocklist package-name canonicalization bypass

JupyterLab: Image viewer allows XSS when opening malicious image in new browser tab

JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)

Home Assistant Core vulnerable to Path Traversal via backup upload during onboarding

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in `modRMRequired()` and `d…

Malicious code in comp-colors (PyPI)