URBAN.KI Sovia

Certifi removes GLOBALTRUST root certificate

GitPython: Dormant multi-line git-config values are corrupted into live injected directives (e.g. core.hooksPath) on any unrelated GitConfigParser write, enabling RCE

HuggingFace transformers vulnerable to remote code execution

GitPython: Command Injection via git long-option prefix abbreviation bypass of CVE-2026-42215 blocklist

urllib3 streaming API improperly handles highly compressed data

PyTorch susceptible to local Denial of Service

Transformers is vulnerable to ReDoS attack through its DonutProcessor class

Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)

GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file overwrite and arbitrary file read

GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)

GitPython: TagReference.create positional reference bypasses kwargs-only --file guard, enabling arbitrary file read (incomplete fix of 3af0c251)

Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient

Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading

urllib3 does not control redirects in browsers and Node.js

GitPython: Unguarded git read-tree option forwarding in IndexFile.from_tree/reset/merge_tree enables arbitrary file overwrite

Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer

Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path

Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching

GitPython: Incomplete unsafe_git_archive_options denylist omits --add-file / --add-virtual-file, enabling arbitrary file read via Repo.archive()

PyTorch: `torch.load` with `weights_only=True` leads to remote code execution

Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer

setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`

Pillow has a heap buffer overflow with nested list coordinates

GitPython: Incomplete unsafe_git_revision_options denylist omits --contents/-S, enabling arbitrary file read via Repo.blame()

Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

geopandas SQL Injection Vulnerability in to_postgis() Allows Information Disclosure

Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class

GitPython: Incomplete unsafe_git_clone_options denylist omits --template enabling arbitrary command execution via clone hooks

Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow

Transformers Regular Expression Denial of Service (ReDoS) vulnerability

GitPython reference APIs has a path traversal vulnerability that allows arbitrary file write and delete outside the repository

fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib

GitPython: Arbitrary local file content disclosure via [include] directive in untrusted .gitmodules (SubmoduleConfigParser never disables merge_includes)

Tornado has incomplete validation of cookie attributes

Tornado vulnerable to excessive logging caused by malformed multipart form data

protobuf affected by a JSON recursion depth bypass

Unauthenticated SSRF Vulnerability in Streamlit on Windows (NTLM Credential Exposure)

tornado: multipart split() creates huge temp list before max_parts check -> memory amplification DoS (httputil.py:34)

PyTorch Improper Resource Shutdown or Release vulnerability

GitPython: clone_from()/clone() omit --separate-git-dir from unsafe_git_clone_options, enabling arbitrary git-directory creation outside the destination

protobuf-python has a potential Denial of Service issue

Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading

Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability

GitPython: Environment-variable exfiltration via Repo.create_remote() / Remote.add() URL (incomplete fix of GHSA-rwj8-pgh3-r573)

GitPython: command injection via unguarded Git options in `Repo.archive()`, `git.ls_remote()`, and arbitrary file overwrite via `Repo.iter_commits()` / `Repo.blame()`

Requests vulnerable to .netrc credentials leak via malicious URLs