Security Bugs

python3-torch Vulnerability Report: CWE-426 (Untrusted Search Path) in python3-torch binaries

security

src:freeimage freeimage: CVE-2024-28562 CVE-2024-28563 CVE-2024-28564 CVE-2024-28565 CVE-2024-28566 CVE-2024-28567 CVE-2024-28568 CVE-2024-28569 CVE-2024-28570 CVE-2024-28571 CVE-2024-28572 CVE-2024-28573 CVE-2024-28574 CVE-2024-28574 CVE-2024-28575 CVE-2024-28576 CVE-2024-28577 CVE-2024-28578 CVE-2024-28579 CVE-2024-28580 CVE-2024-28581 CVE-2024-28582 CVE-2024-28583 CVE-2024-28584

security

src:python-tornado python-tornado: CVE-2026-82397

upstream security

libarrow500 Library Search Path Hijacking via Empty RPATH Entries in libarrow.so.500

security

gpu-basis-universal Arbitrary Code Execution via Uncontrolled Search Path Element (CWE-427) in basisu

security

python3-ifcopenshell Uncontrolled Search Path Element (CWE-427) in python3.14 wrapper

security

src:netty netty: CVE-2026-62243 CVE-2026-62380

upstream security

src:nnn nnn: CVE-2026-65609 CVE-2026-65610 CVE-2026-65611 CVE-2026-65612

upstream security

src:hashcat hashcat: CVE-2026-68766 CVE-2026-68767 CVE-2026-68768

upstream security

src:golang-github-getkin-kin-openapi golang-github-getkin-kin-openapi: CVE-2026-76905

upstream security

src:capstone capstone: CVE-2026-55893 CVE-2026-55894

security upstream

src:onnx onnx: CVE-2026-49114 CVE-2026-63632

security upstream

src:node-elliptic node-elliptic: CVE-2025-14505

security upstream

src:assimp assimp: CVE-2025-5204

security upstream

src:assimp assimp: CVE-2026-14604

fixed-upstream security upstream

libapache2-mod-php Default php.conf serves php in userdirs as plaintext (potentially exposing passwords)

security

src:cpp-httplib cpp-httplib: CVE-2026-45352 CVE-2026-45372 CVE-2026-46527

upstream security

src:node-postcss node-postcss (node-source-map-js): CVE-2026-93749

upstream fixed-upstream security

src:phpsysinfo phpsysinfo: CVE-2026-55584

upstream security

src:golang-opentelemetry-otel golang-opentelemetry-otel: CVE-2026-45404

upstream security