sprachbuchung-erzmobil

Pillow: Infinite loop in MIC n_frames when the embedded TIFF

GitPython: Repository content can impersonate the git directory, leading to arbitrary code execution

minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions

GitPython: arbitrary file read via attacker-controlled branch name in `Head.checkout()` (incomplete fix of CVE-2026-78679)

Certifi removes GLOBALTRUST root certificate

Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode

Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()

flatted vulnerable to unbounded recursion DoS in parse() revive phase

Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images

body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body

GitPython: Dormant multi-line git-config values are corrupted into live injected directives (e.g. core.hooksPath) on any unrelated GitConfigParser write, enabling RCE

js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources

nanoid: non-secure generators can loop indefinitely with negative size

Starlette has possible denial-of-service vector when parsing large files in multipart forms

GitPython: Command Injection via git long-option prefix abbreviation bypass of CVE-2026-42215 blocklist

aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence

ajv has ReDoS when using `$data` option

aiohttp: Multiple instances of excessive or unbounded memory/CPU use

undici vulnerable to response truncation via oversized chunked responses in the dump interceptor

PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)

Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup

undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches

undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent

Undici has an HTTP Request/Response Smuggling issue

Scrapy is vulnerable to a denial of service (DoS) attack due to flaws in brotli decompression implementation

nanoid: custom generators can loop indefinitely when size is zero

AIOHTTP has CRLF injection through multipart part content type header construction

Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists

urllib3 streaming API improperly handles highly compressed data

Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO

fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references

axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`

undici vulnerable to HTTP response queue poisoning via keep-alive socket reuse

path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters

Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)

virtualenv: Xonsh activation literals depend on the script decoding codec

GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file overwrite and arbitrary file read

axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge

Pillow: TarIO negative size field causes infinite CPU-spin loop

brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups

Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF

minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern

Axios: HTTP/2 adapter bypasses configured DNS lookup and proxy controls

GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)

Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching

Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver`

AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS

GitPython: TagReference.create positional reference bypasses kwargs-only --file guard, enabling arbitrary file read (incomplete fix of 3af0c251)