•25 minutes ago•CVE-2026-84311
4.8CVE-2026-84311: Algorithmic Complexity Denial of Service in pypdf
CVE-2026-84311 (GHSA-763m-79hh-57f2) is an algorithmic complexity Denial of Service (DoS) vulnerability in the pypdf library. Prior to version 6.16.1, the library does not place limits on iterations during the parsing of PDF document outlines and recursive Form XObject (XForm) expansions. An attacker can craft a malicious, highly compressed PDF document containing nested structures which, when parsed, trigger exponential iteration paths, resulting in severe CPU and memory exhaustion.
0 views•7 min read
•about 1 hour ago•CVE-2026-84310
4.8CVE-2026-84310: Algorithmic Complexity Exhaustion in pypdf
An algorithmic complexity vulnerability in the pypdf library before version 6.16.1 allows remote or local attackers to cause an application denial of service. The flaw is triggered via maliciously crafted PDF documents that utilize either deeply nested outlines or exponential Directed Acyclic Graph (DAG) structures in Form XObjects.
1 views•7 min read
•about 2 hours ago•CVE-2026-77567
8.1CVE-2026-77567: Multi-Factor Authentication Bypass in Filament App-Based MFA
An authentication bypass vulnerability exists in Filament's app-based (TOTP/authenticator) multi-factor authentication (MFA) system when recovery codes are enabled. This allow attackers possessing primary credentials to bypass the second-factor authentication check entirely by manipulating the Livewire state during the challenge-form validation lifecycle.
3 views•7 min read
•about 3 hours ago•CVE-2026-84307
3.7CVE-2026-84307: Authentication Oracle and Multi-Factor Authentication Challenge Leak in Filament
An authentication oracle vulnerability exists in Filament before 4.12.5 and 5.7.5. The application initiates MFA challenge workflows prior to verifying user authorization policies, allowing unauthenticated attackers to validate guessed credentials.
3 views•6 min read
•about 4 hours ago•CVE-2026-84306
6.5CVE-2026-84306: Multi-Factor Authentication Bypass via Replay Attack in Filament
A multi-factor authentication bypass vulnerability exists in Filament (Laravel full-stack framework panels) due to improper time-step tracking of Time-Based One-Time Password (TOTP) codes. By submitting valid TOTP codes from an older time window within the drift allowance, an attacker with a user's password can bypass the single-use MFA guarantee and obtain unauthorized account access.
3 views•7 min read
•about 5 hours ago•CVE-2026-19418
7.3CVE-2026-19418: Broken Access Control and Cross-Site Request Forgery in TYPO3 CMS Core
CVE-2026-19418 is a high-severity origin validation vulnerability in TYPO3 CMS that enables Cross-Site Request Forgery (CSRF) and access control bypasses. Due to architectural consolidation of entry points in version 13.0, the core ReferrerEnforcer fails to isolate backend endpoints from the frontend, allowing an attacker with frontend script execution capabilities to perform unauthorized administrative actions.
4 views•5 min read
•about 6 hours ago•CVE-2026-84304
8.7CVE-2026-84304: Uncontrolled Resource Consumption in gRPC-Go HTTP/2 Frame Processing
CVE-2026-84304 is a high-severity uncontrolled resource consumption vulnerability in gRPC-Go, the Go implementation of the gRPC framework. The issue stems from a memory amplification flaw inside the HTTP/2 DATA frame processing subsystem. Remote, unauthenticated attackers can exploit this vulnerability by sending a high volume of heavily fragmented, tiny DATA frames within multiplexed concurrent streams. This causes gRPC-Go servers to allocate excessive internal metadata structures on the Go heap, leading to severe heap memory amplification, intense garbage collection thrashing, and process termination due to Out-of-Memory (OOM) conditions.
3 views•7 min read
•about 7 hours ago•CVE-2026-79675
9.8CVE-2026-79675: JVM Argument Injection in Natural Language Toolkit (NLTK) Stanford Wrappers
CVE-2026-79675 is a critical command injection vulnerability in NLTK versions prior to 3.10.3 that permits remote attackers to execute arbitrary code on the hosting system. This vulnerability stems from an incomplete mitigation of a previous vulnerability, CVE-2026-12841. While NLTK verified global JVM options configured through the library's setup routines, it failed to perform equivalent safety checks on options provided during per-call invocations of Stanford NLP Java wrappers. Attackers controlling these parameters can pass dangerous Java configuration options to the system shell, bypassing security boundaries to spawn interactive processes or load untrusted Java archives.
6 views•6 min read
•about 8 hours ago•CVE-2026-73228
5.3CVE-2026-73228: Uncontrolled Resource Consumption (DATA_UPLOAD_MAX_MEMORY_SIZE Bypass) in Django REST Framework
A vulnerability in Django REST Framework (DRF) before version 3.17.2 allows remote attackers to bypass the native Django DATA_UPLOAD_MAX_MEMORY_SIZE limits. When parsing JSON or URL-encoded request bodies, DRF's JSONParser and FormParser read directly from the low-level HTTP network stream, bypassing Django's high-level request size checks and causing Denial of Service (DoS) via resource exhaustion.
7 views•6 min read
•about 9 hours ago•GHSA-2RX9-3G3H-C2JV
8.1GHSA-2rx9-3g3h-c2jv: Path Traversal Vulnerability in pacquet Lockfile Parser and Filesystem Sinks
A directory traversal vulnerability exists in pacquet, the Rust port of pnpm. When executing an install with the --trust-lockfile flag enabled, a crafted pnpm-lock.yaml file bypasses resolution-policy verification. This allows an attacker to inject path traversal sequences into package names or versions, leading to symbolic links being written outside the workspace directory.
4 views•5 min read
•about 10 hours ago•GHSA-GQVG-GMMX-X4HM
9.8GHSA-GQVG-GMMX-X4HM: Security Control Bypass leading to Remote Code Execution in MLflow statsmodels Flavor
A security control bypass vulnerability in MLflow allows remote attackers to execute arbitrary code on a system running MLflow when loading a crafted model artifact. The security control MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False, which restricts loading unsafe pickle-based models, can be bypassed by specifying the mlflow.statsmodels model flavor in the model's configuration.
5 views•5 min read
•about 11 hours ago•CVE-2026-73089
7.5CVE-2026-73089: Unbounded Memory Growth and Denial of Service in browserslist
An uncontrolled resource consumption vulnerability (CWE-770) in the browserslist NPM package prior to version 4.28.7 allows remote unauthenticated attackers to cause an Out-Of-Memory (OOM) application crash. Because the in-memory cache implementation lacks limits or eviction logic, supplying unique browser queries triggers linear heap memory growth.
4 views•7 min read