A flaw was found in the idna library, which handles Internationalized Domain Names in Python applications. A remote attacker could exploit this vulnerability by sending specially crafted, excessively long inputs to the library's encoding f…

▾ SunlitRed Hat · Red Hat Enterprise Linux 9EPSS 0.46%via CSAF

CVE-2026-10775Low· 3.6

3mo ago

SGLang is Vulnerable to DoS via the data_hash Function

▾ Sunlitsglang · sglangEPSS 0.12%via OSV

CVE-2026-44889Medium· 6.1

3mo ago

WebOb: Location header normalization during redirect leads to open redirect - again

▾ Sunlitwebob · webobEPSS 0.27%via OSV

CVE-2026-10812Low· 3.6

3mo ago

GPTCache: File and image cache keys collide because BufferedReader.peek() only reads the buffered prefix

▾ Sunlitgptcache · gptcacheEPSS 0.07%via OSV

CVE-2026-10804Low· 3.6

3mo ago

Streamlit @st.cache_data hash collision via fixed sampling seed and PIL P-mode palette omission

▾ Sunlitstreamlit · streamlitEPSS 0.08%via OSV

CVE-2026-50266Low· 2.2

3mo ago

OpenStack Neutron: Neutron port RBAC policy bypass allows project managers to set trusted device owners on shared networks

▾ Sunlitneutron · neutronEPSS 0.38%via OSV

CVE-2026-44393High· 7.4

3mo ago

OpenStack oslo.messaging does not verify RabbitMQ broker hostname during TLS handshake

▾ Twilightoslo-messaging · oslo-messagingEPSS 0.28%via OSV

CVE-2026-10803Low· 2.5

3mo ago

mlflow: MLflow: Use of weak hash in Dataset Digest Computation (CVE-2026-10803)

A flaw was found in MLflow. This vulnerability stems from the use of a weak hash algorithm within the Dataset Digest Computation component. A local attacker could potentially exploit this weakness, which may impact the integrity or authent…

▾ SunlitRed Hat · Red Hat OpenShift AI (RHOAI)EPSS 0.10%via CSAF

CVE-2026-10813Low· 3.6

3mo ago

LMCache: 16-bit multimodal hash collision can poison KV cache entries

▾ Sunlitlmcache · lmcacheEPSS 0.07%via OSV

CVE-2026-10801Low· 3.6

3mo ago

ms-swift: Image Cache Hash Collision via Missing Dimension Metadata

▾ Sunlitms-swift · ms-swiftEPSS 0.07%via OSV

Tagged “pip”

Malicious code in pantheon-agents (PyPI)

Malicious code in ufish (PyPI)

Malicious code in synago (PyPI)

Malicious code in okite (PyPI)

Malicious code in uprobe (PyPI)

Malicious code in pantheon-toolsets (PyPI)

Malicious code in nucbox (PyPI)

Malicious code in napari-ufish (PyPI)

sanic-cors contains an improper regular expression in the try_match() function

OpenStack Ironic: Crafted JSON String to Certain Endpoints on the API or JSON-RPC Service May Result in Service Crash

bytedance InfiniStore: Denial of Service via Non-Cryptographic Hashing in InfiniStore KV Map

Bugsink: Issue event views can show an event from another project if its UUID is known

Bugsink: Issue bulk actions can affect another project’s issue if its UUID is known

praisonai-platform: Agent endpoints accept any agent_id without workspace ownership check, cross-workspace read/update/delete IDOR

Vantage6: No limit on emails sent for password/MFA reset

Bugsink: Project scoping missing in sourcemap and debug-file lookup

Vantage6: 2FA can be circumvented with hacked email access

vantage6 node has an Improper Access Control issue

Vantage6: Set admin user and password from environment or configuration

Malicious code in anthropy (PyPI)

python-idna: idna: Denial of Service via specially crafted long inputs (CVE-2026-45409)

SGLang is Vulnerable to DoS via the data_hash Function

WebOb: Location header normalization during redirect leads to open redirect - again

GPTCache: File and image cache keys collide because BufferedReader.peek() only reads the buffered prefix

Streamlit @st.cache_data hash collision via fixed sampling seed and PIL P-mode palette omission

OpenStack Neutron: Neutron port RBAC policy bypass allows project managers to set trusted device owners on shared networks

OpenStack oslo.messaging does not verify RabbitMQ broker hostname during TLS handshake

mlflow: MLflow: Use of weak hash in Dataset Digest Computation (CVE-2026-10803)

LMCache: 16-bit multimodal hash collision can poison KV cache entries

ms-swift: Image Cache Hash Collision via Missing Dimension Metadata