URBAN.KI Sovia

Pillow: Infinite loop in MIC n_frames when the embedded TIFF

GitPython: Repository content can impersonate the git directory, leading to arbitrary code execution

GitPython: arbitrary file read via attacker-controlled branch name in `Head.checkout()` (incomplete fix of CVE-2026-78679)

Certifi removes GLOBALTRUST root certificate

Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode

Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()

Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images

fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution

GitPython: Dormant multi-line git-config values are corrupted into live injected directives (e.g. core.hooksPath) on any unrelated GitConfigParser write, enabling RCE

HuggingFace transformers vulnerable to remote code execution

GitPython: Command Injection via git long-option prefix abbreviation bypass of CVE-2026-42215 blocklist

urllib3 streaming API improperly handles highly compressed data

Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO

PyTorch susceptible to local Denial of Service

Transformers is vulnerable to ReDoS attack through its DonutProcessor class

Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)

GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file overwrite and arbitrary file read

Tornado: Unbounded query-string argument count allows event-loop-stalling DoS

Pillow: TarIO negative size field causes infinite CPU-spin loop

GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)

GitPython: TagReference.create positional reference bypasses kwargs-only --file guard, enabling arbitrary file read (incomplete fix of 3af0c251)

Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient

Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size

Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading

Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)

urllib3 does not control redirects in browsers and Node.js

GitPython: Unguarded git read-tree option forwarding in IndexFile.from_tree/reset/merge_tree enables arbitrary file overwrite

Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise

Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer

Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer

Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path

Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching

GitPython: Incomplete unsafe_git_archive_options denylist omits --add-file / --add-virtual-file, enabling arbitrary file read via Repo.archive()

PyTorch: `torch.load` with `weights_only=True` leads to remote code execution

filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break

Pillow: Out-of-bounds access in _imagingmorph on a zero-width image

GitPython submodule update path traversal can write outside the repository

Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer

setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution

Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`

Pillow: APNG background disposal allocates full canvas before decompression bomb check

Pillow has a heap buffer overflow with nested list coordinates

GitPython: Incomplete unsafe_git_revision_options denylist omits --contents/-S, enabling arbitrary file read via Repo.blame()

Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files

geopandas SQL Injection Vulnerability in to_postgis() Allows Information Disclosure

Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1