data_quality_in_wastewater_surveillance

Certifi removes GLOBALTRUST root certificate

Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id="toc_N"` content

Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists

urllib3 streaming API improperly handles highly compressed data

Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)

Tornado: Unbounded query-string argument count allows event-loop-stalling DoS

Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient

Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading

urllib3 does not control redirects in browsers and Node.js

nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames

Mistune inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs

Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path

pip's fallback tar extraction doesn't check symbolic links point to extraction directory

Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching

Mistune has XSS via unescaped figclass/figwidth in Figure directive

pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files

virtualenv Has TOCTOU Vulnerabilities in Directory Creation

Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`

Pillow has a heap buffer overflow with nested list coordinates

Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

geopandas SQL Injection Vulnerability in to_postgis() Allows Information Disclosure

Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow

pip Path Traversal vulnerability

pytest has vulnerable tmpdir handling

fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib

Tornado has incomplete validation of cookie attributes

Tornado vulnerable to excessive logging caused by malformed multipart form data

nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding

Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser

tornado: multipart split() creates huge temp list before max_parts check -> memory amplification DoS (httputil.py:34)

urllib3: HTTPS proxy TLS configuration may be ignored or overridden

Mistune: XSS via percent-encoded javascript URI bypass in safe_url()

Mistune Math Plugin has an XSS Escape Bypass

Mistune has a ReDoS in LINK_TITLE_RE that allows denial of service via crafted Markdown input

Mistune directives/include: mutual `.. include::` recursion crashes the renderer with `RecursionError`, denial of service via two attacker-controlled markdown files

Bleach: URI sanitization allows disallowed URI schemes with Unicode > U+00A0 in output

Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading

virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use

virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection

Requests vulnerable to .netrc credentials leak via malicious URLs

Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch

Requests `Session` object does not verify requests after making first request with verify=False

Tornado: StaticFileHandler follows symlinks outside static root (path traversal)

Mistune plugins/formatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough / mark / insert)

Tornado: Quadratic DoS via Repeated Header Coalescing

Pillow affected by out-of-bounds write when loading PSD images