TI-2026-04471 CVE-2026-5121 · GHSA-2vwv-vqpv-v8vc
Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing
Priority MEDIUM 51
A flaw was found in libarchive.
RHSA-2026:16008
Red Hat AI Inference Server Model Optimization Tools 3.3.3 (CUDA)
Released 2026-05-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
Fixes 20 records
TI-2026-29006 CVE-2026-40192 · GHSA-whj4-6x5x-4v2j
Pillow is vulnerable to a FITS GZIP decompression bomb
Priority MEDIUM 45
Pillow is a Python imaging library.
TI-2026-30619 CVE-2026-42311 · GHSA-pwv6-vv43-88gr
Pillow: OOB Write with Invalid PSD Tile Extents (Integer Overflow)
Priority MEDIUM 44
Pillow is a Python imaging library.
TI-2026-04544 CVE-2026-5201 · GHSA-9pr2-m366-8728
Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image
Priority MEDIUM 41
A flaw was found in the gdk-pixbuf library.
TI-2026-03838 CVE-2026-4424 · GHSA-c75f-55f6-f63q
Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing
Priority MEDIUM 41
A flaw was found in libarchive.
TI-2026-21585 CVE-2026-27135
nghttp2 Denial of service: Assertion failure due to the missing state validation
Priority MEDIUM 40
nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C.
TI-2026-03561 CVE-2026-4111 · GHSA-xrqh-48jh-pjv2
Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive
Priority MEDIUM 40
A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path.
TI-2026-22691 CVE-2026-28417
Vim has OS Command Injection in netrw
Priority LOW 39
Vim is an open source, command line text editor.
TI-2026-22004 CVE-2026-27622 · GHSA-cr4v-6jm6-4963
OpenEXR CompositeDeepScanLine integer-overflow leads to heap OOB write
Priority LOW 38
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.
Priority LOW 36
Vim is an open source, command line text editor.
Priority LOW 35
Vim is an open source, command line text editor.
TI-2026-03926 CVE-2026-4519 · GHSA-rm92-fj5q-mpj5
webbrowser.open() allows leading dashes in URLs
Priority LOW 33
The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers.
TI-2023-21222 CVE-2023-40403 · GHSA-j822-w26r-9cxf
Apple iOS and iPadOS: Processing web content may disclose sensitive information
Priority LOW 32
The issue was addressed with improved memory handling.
TI-2025-13528 CVE-2025-14831 · GHSA-pm8w-jq9r-x5rp
Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification
Priority LOW 31
A flaw was found in GnuTLS.
TI-2026-20817 CVE-2026-25749
Heap Overflow in Vim
Priority LOW 29
Vim is an open source, command line text editor.
TI-2026-03014 CVE-2026-3497 · GHSA-wcpp-3x59-h8vp
Use of uninitialized resource in Ubuntu openssh
Priority LOW 24
Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions.
TI-2026-30618 CVE-2026-42310 · GHSA-r73j-pqj5-w3x7
Pillow: PDF Parsing Trailer Infinite Loop (DoS)
Priority LOW 22
Pillow is a Python imaging library.
TI-2026-30617 CVE-2026-42309 · GHSA-5xmw-vc9v-4wf2
Pillow: Heap buffer overflow with nested list coordinates
Priority LOW 22
Pillow is a Python imaging library.
TI-2026-30616 CVE-2026-42308 · GHSA-wjx4-4jcj-g98j
Pillow: Integer overflow when processing fonts
Priority LOW 22
Pillow is a Python imaging library.
TI-2026-19228 CVE-2026-23868 · GHSA-hq9h-682q-jg37
Double free in giflib
Priority LOW 22
Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling.