CVE-2026-107292 medium pydantic-ai: pydantic-ai: Unauthorized tool execution via DNS rebinding since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107291 medium pydantic-ai: pydantic-ai-slim: Pydantic AI: Information disclosure via incomplete telemetry content redaction since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107290 medium pydantic-ai: pydantic-ai: Denial of Service via inefficient web response parsing since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-19585 medium github.com/hashicorp/go-getter: go-getter: arbitrary file write via path traversal in S3 and GCS directory downloads since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107678 medium ffmpeg: ffmpeg: Denial of Service via stack exhaustion from crafted MP4 files since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107677 medium ffmpeg: ffmpeg: Denial of Service via empty SegmentTemplate in DASH demuxer since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107675 medium ffmpeg: ffmpeg: Information disclosure via missing SFTP host key verification since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107660 medium ffmpeg: ffmpeg: Traffic interception via improper TLS certificate validation since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107287 medium pydantic-ai: pydantic-ai: Denial of Service via resource exhaustion during HTML conversion since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107623 medium keycloak-services: keycloak-services: OIDC DCR read-modify-write silently disables offline token revocation since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107604 medium keycloak-services: keycloak-services: view-clients role allows retrieval of active client secrets via installation provider endpoints since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107565 medium luksmeta: Incomplete gap-boundary and overlap checks in LUKS1 metadata allocator allow data corruption since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-105828 medium Parse Server 9.0.0 before 9.10.1 Class Name Disclosure via GraphQL Errors since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-103663 medium Ollama: Path Traversal leading to Remote Code Execution in Ollama since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-44038 medium dcmtk: dcmtk: Denial of Service via out-of-bounds read in JPEG decoder since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-44037 medium dcmtk: dcmtk: Denial of Service via deeply nested DICOM JSON document since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-44036 medium dcmtk: dcmtk: Denial of Service via uncontrolled recursion during XML parsing since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-44035 medium dcmtk: dcmtk: Denial of Service via uncontrolled recursion in DICOMDIR processing since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-44034 medium dcmtk: dcmtk: Information disclosure via crafted RLE DICOM file since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-44033 medium dcmtk: dcmtk: Denial of Service via deeply nested XML elements since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107466 medium flatpak-builder: Local File Exfiltration via `file since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107445 medium rubygem-katello: katello: katello: Katello Flatpak Remote Repositories API cross-organization authorization bypass since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107444 medium rubygem-katello: katello: katello: Katello Docker Tags repositories API cross-organization authorization bypass since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107315 medium org.postgresql/postgresql: PostgreSQL JDBC Driver: Information disclosure via residual send buffer padding since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107314 medium org.postgresql/postgresql: PostgreSQL JDBC Driver: Information disclosure via requireAuth restriction bypass since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-107285 medium The AsyncHttpClient (AHC) library allows Java applications to easily e ... since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-107280 medium The AsyncHttpClient (AHC) library allows Java applications to easily e ... since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-105820 medium vault: Vault: Privilege escalation via path traversal in ACL policy cache since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-105818 medium Vault PKI ACME Issues Certificate With Unvalidated SANs since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-1403 medium Allocation of Resources Without Limits or Throttling in GitLab since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-107228 medium The AsyncHttpClient (AHC) library allows Java applications to easily e ... since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-107176 medium cluster-samples-operator: Role reads ALL secrets in openshift-config, not just pull-secret since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-107161 medium cyrus-sasl: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-107313 medium org.postgresql/postgresql: PostgreSQL JDBC Driver: Information disclosure via stale GSS buffer reuse since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-107225 medium Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-107224 medium Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-107222 medium Excelize: GetConditionalFormats indexes conditional-formatting rule sub-elements with no length or nil check since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-107221 medium Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet read API since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-107220 medium Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-107218 medium Excelize: RIGHT() on supplementary-plane text slices with a negative index and panics since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-107213 medium Excelize: Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-107211 medium Excelize: Unchecked pivot-cache field index in extractPivotTableFields causes unrecoverable panic since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-106067 medium GIMP: GIMP: heap buffer overflow in Hot color filter on oversized image since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-106066 medium GIMP: GIMP: heap buffer overflow in raw data export on oversized image dimensions since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-106065 medium GIMP: GIMP: heap buffer overflow in PCX export on oversized image dimensions since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-92415 medium \u2014 Use of Externally-Controlled Input to Select Classes or Code vu ... since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-107210 medium ImageMagick: ImageMagick: Resource exhaustion via crafted MAT image since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-107208 medium ImageMagick: ImageMagick: Denial of Service via crafted XMP profile since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-106577 medium ImageMagick: ImageMagick: Code injection via unescaped values in PostScript coders since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-106575 medium ImageMagick: ImageMagick: Denial of Service via unclosed file pointers in Magick scripts since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 