LLM Service

pypdf: Possible long runtimes for zero-only width values in cross-reference streamsuntimes for zero-only width values in cross-reference streams

Certifi removes GLOBALTRUST root certificate

Jupyter Server has a CORS Origin Validation Bypass via `re.match()` in `allow_origin_pat` (from huntr)

Starlette has possible denial-of-service vector when parsing large files in multipart forms

aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence

LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages

Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id="toc_N"` content

pypdf has possible Infinite Loop when processing outlines/bookmarks

pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams

AIOHTTP has CRLF injection through multipart part content type header construction

Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists

urllib3 streaming API improperly handles highly compressed data

Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning

JupyterLab has an Extension Manager API/GUI Policy Discrepancy, allowing 3rd party (malicious) extensions install via POST request

Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)

pypdf: Manipulated XMP metadata entity declarations can exhaust RAM

AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS

Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient

Marshmallow has DoS in Schema.load(many)

Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading

Langchain SQL Injection vulnerability

NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite

urllib3 does not control redirects in browsers and Node.js

nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames

pypdf has possible long runtimes for malformed startxref

aiohttp: HTTP/1 Pipelined Requests Queue Without Limit

Mistune inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs

aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections

pypdf: Possible long runtimes for wrong size values in incremental mode

Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path

pypdf has possible long runtimes for missing /Root object with large /Size values

pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size

Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching

pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction

Vulnerable OpenSSL included in cryptography wheels

AIOHTTP vulnerable to brute-force leak of internal static file path components

pypdf: Possible long runtimes for repeated malformed cross-reference entries

Jupyter Server: Path Traversal via incorrect startswith() root directory check allows access to sibling directories

Mistune has XSS via unescaped figclass/figwidth in Figure directive

Denial of service (DoS) via deformation `multipart/form-data` boundary

langchain-core allows unauthorized users to read arbitrary files from the host file system

pypdf: Inefficient decoding of FlateDecode PNG predictor streams

Jupyter Server's Authentication Cookies Remain Valid After Password Reset and Server Restart

pypdf: Possible large memory usage for wrong image dimensions

setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service

Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`