Source intelligence
425 collected source records. Original advisories and security research.
300 matching sources · Newest published first
Open CVE tracker →Original publisher records, awaiting Egret editorial review. Headlines open the original source; CVE identifiers open the tracker.
Scroll across the table to see all columns.
| Published | Finding / research | Publisher | Identifiers |
|---|---|---|---|
| pypdf has possible infinite loop when cloning dictionaries GHSA: GHSA-mfr5-77xh-9j7h CVE: CVE-2026-119205 Reported severity: high Advisory package entry 1: Affected package: pypdf (pip) Affected versions: < 6.21.4 Patched version: 6.21.4 Advisory description: Impact An attacker … |
GitHub Advisory Database | CVE-2026-119205GHSA-MFR5-77XH-9J7H |
|
| joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service GHSA: GHSA-4528-x5fx-h6hg CVE: CVE-2026-118772 Reported severity: high Advisory package entry 1: Affected package: joi (npm) Affected versions: >= 17.1.1, < 17.13.9 Patched version: 17.13.9 Advisory package entry 2: Affe… |
GitHub Advisory Database | CVE-2026-118772GHSA-4528-X5FX-H6HG |
|
| @hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of service GHSA: GHSA-8494-f6mr-cjpv CVE: CVE-2026-119202 Reported severity: high Advisory package entry 1: Affected package: @hapi/content (npm) Affected versions: <= 6.0.2 Patched version: 6.0.3 Advisory package entry 2: Affected… |
GitHub Advisory Database | CVE-2026-119202GHSA-8494-F6MR-CJPV |
|
| minimatch has potential denial of service via globparts amplification GHSA: GHSA-g3hv-75wg-m249 CVE: CVE-2026-118764 Reported severity: medium Advisory package entry 1: Affected package: minimatch (npm) Affected versions: >= 7.0.0, < 11.0.1 Patched version: 11.0.1 Advisory description: min… |
GitHub Advisory Database | CVE-2026-118764GHSA-G3HV-75WG-M249 |
|
| Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal GHSA: GHSA-3g3m-2fjr-6pw4 CVE: CVE-2026-118773 Reported severity: medium Advisory package entry 1: Affected package: glob (npm) Affected versions: >= 9.0.0, <= 14.0.1 Patched version: 14.0.2 Advisory description: Summary… |
GitHub Advisory Database | CVE-2026-118773GHSA-3G3M-2FJR-6PW4 |
|
| Authlib RFC 7592 examples omit registration-access-token client binding GHSA: GHSA-c73q-w75p-j82v CVE: CVE-2026-116672 Reported severity: high Advisory package entry 1: Affected package: Authlib (pip) Affected versions: >= 0.15, <= 1.9.0 Patched version: 1.9.1 Advisory description: Descripti… |
GitHub Advisory Database | CVE-2026-116672GHSA-C73Q-W75P-J82V |
|
| pypdf has possible long runtimes when retrieving page labels GHSA: GHSA-42gh-23hr-vphw CVE: CVE-2026-119206 Reported severity: high Advisory package entry 1: Affected package: pypdf (pip) Affected versions: < 6.21.3 Patched version: 6.21.3 Advisory description: Impact An attacker … |
GitHub Advisory Database | CVE-2026-119206GHSA-42GH-23HR-VPHW |
|
| pypdf has possible large memory usage for exceptions in strict mode GHSA: GHSA-4vqv-7265-gm2w CVE: CVE-2026-119207 Reported severity: high Advisory package entry 1: Affected package: pypdf (pip) Affected versions: < 6.21.3 Patched version: 6.21.3 Advisory description: Impact An attacker … |
GitHub Advisory Database | CVE-2026-119207GHSA-4VQV-7265-GM2W |
|
| pypdf has possible long runtimes/large memory usage for encrypted PDF files GHSA: GHSA-62m5-6wh8-28x7 CVE: CVE-2026-119208 Reported severity: high Advisory package entry 1: Affected package: pypdf (pip) Affected versions: < 6.21.3 Patched version: 6.21.3 Advisory description: Impact An attacker … |
GitHub Advisory Database | CVE-2026-119208GHSA-62M5-6WH8-28X7 |
|
| pypdf has possible large memory usage when parsing cross-reference streams GHSA: GHSA-x3rh-gjgm-fmqc CVE: CVE-2026-119209 Reported severity: high Advisory package entry 1: Affected package: pypdf (pip) Affected versions: < 6.21.3 Patched version: 6.21.3 Advisory description: Impact An attacker … |
GitHub Advisory Database | CVE-2026-119209GHSA-X3RH-GJGM-FMQC |
|
| pyasn1 has quadratic CPU consumption in constructed BIT STRING decoding GHSA: GHSA-2qm8-x737-gmw5 CVE: CVE-2026-119196 Reported severity: high Advisory package entry 1: Affected package: pyasn1 (pip) Affected versions: <= 0.6.4 Patched version: 0.6.5 Advisory description: Summary In pyasn1 t… |
GitHub Advisory Database | ||
| pyasn1 has quadratic-complexity denial of service in binary REAL decoding GHSA: GHSA-mm57-4v3p-rchx CVE: CVE-2026-119197 Reported severity: high Advisory package entry 1: Affected package: pyasn1 (pip) Affected versions: <= 0.6.4 Patched version: 0.6.5 Advisory description: Summary In pyasn1 0… |
GitHub Advisory Database | ||
| pyasn1 has quadratic-time denial of service in constructed string and indefinite-length ANY decoding GHSA: GHSA-9m75-vc3g-4x39 CVE: CVE-2026-119195 Reported severity: high Advisory package entry 1: Affected package: pyasn1 (pip) Affected versions: <= 0.6.4 Patched version: 0.6.5 Advisory description: Summary In pyasn1 0… |
GitHub Advisory Database | ||
| pyasn1 has quadratic CPU use in schemaless BER/CER/DER container decoding GHSA: GHSA-fm9c-5rcf-2q5p CVE: CVE-2026-119194 Reported severity: high Advisory package entry 1: Affected package: pyasn1 (pip) Affected versions: >= 0.3.3, < 0.6.5 Patched version: 0.6.5 Advisory description: Summary Wh… |
GitHub Advisory Database | CVE-2026-119194GHSA-FM9C-5RCF-2Q5P |
|
| Forge: ASN.1 OID first arc truncation in asn1.oidToDer GHSA: GHSA-4642-5mcj-2rqw CVE: CVE-2026-118775 Reported severity: low Advisory package entry 1: Affected package: node-forge (npm) Affected versions: <= 1.4.0 Patched version: 1.4.1 Advisory description: Summary asn1.oid… |
GitHub Advisory Database | ||
| Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie GHSA: GHSA-6wvx-3r32-xmcg CVE: CVE-2026-118777 Reported severity: medium Advisory package entry 1: Affected package: node-forge (npm) Affected versions: <= 1.4.0 Patched version: 1.4.1 Advisory description: Summary The f… |
GitHub Advisory Database | CVE-2026-118777GHSA-6WVX-3R32-XMCG |
|
| Forge: TLS client crash when the server sends no certificate GHSA: GHSA-525v-9gp9-w22h CVE: CVE-2026-118778 Reported severity: medium Advisory package entry 1: Affected package: node-forge (npm) Affected versions: <= 1.4.0 Patched version: 1.4.1 Advisory description: Summary The f… |
GitHub Advisory Database | CVE-2026-118778GHSA-525V-9GP9-W22H |
|
| Forge: Regular expression denial of service in PEM decoding (pem.decode) GHSA: GHSA-7wch-p9px-956x CVE: CVE-2026-118779 Reported severity: high Advisory package entry 1: Affected package: node-forge (npm) Affected versions: <= 1.4.0 Patched version: 1.4.1 Advisory description: Summary pem.dec… |
GitHub Advisory Database | CVE-2026-118779GHSA-7WCH-P9PX-956X |
|
| Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891) GHSA: GHSA-h6cr-wjv9-3cpp CVE: CVE-2026-118781 Reported severity: low Advisory package entry 1: Affected package: node-forge (npm) Affected versions: <= 1.4.0 Patched version: 1.4.1 Advisory description: Summary BigInteg… |
GitHub Advisory Database | ||
| Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store GHSA: GHSA-4487-j8r4-4g2f CVE: CVE-2026-118780 Reported severity: low Advisory package entry 1: Affected package: node-forge (npm) Affected versions: <= 1.4.0 Patched version: 1.4.1 Advisory description: Summary When a C… |
GitHub Advisory Database | CVE-2026-118780GHSA-4487-J8R4-4G2F |
|
| Forge: AES-GCM authentication bypass via unvalidated tagLength option GHSA: GHSA-5cwg-6vw7-rj6p CVE: CVE-2026-119186 Reported severity: medium Advisory package entry 1: Affected package: node-forge (npm) Affected versions: <= 1.4.0 Patched version: 1.4.1 Advisory description: Summary The A… |
GitHub Advisory Database | CVE-2026-119186GHSA-5CWG-6VW7-RJ6P |
|
| Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count GHSA: GHSA-jc66-7q78-782g CVE: CVE-2026-118782 Reported severity: high Advisory package entry 1: Affected package: node-forge (npm) Affected versions: <= 1.4.0 Patched version: 1.4.1 Advisory description: Summary forge.p… |
GitHub Advisory Database | CVE-2026-118782GHSA-JC66-7Q78-782G |
|
| Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message GHSA: GHSA-8hrf-8g6f-7xwp CVE: CVE-2026-119188 Reported severity: high Advisory package entry 1: Affected package: node-forge (npm) Affected versions: <= 1.4.0 Patched version: 1.4.1 Advisory description: Summary A conne… |
GitHub Advisory Database | CVE-2026-119188GHSA-8HRF-8G6F-7XWP |
|
| Forge: Denial of service in TLS record processing via call stack exhaustion GHSA: GHSA-hqq3-7jhf-c5jx CVE: CVE-2026-119187 Reported severity: high Advisory package entry 1: Affected package: node-forge (npm) Affected versions: <= 1.4.0 Patched version: 1.4.1 Advisory description: Summary Connect… |
GitHub Advisory Database | CVE-2026-119187GHSA-HQQ3-7JHF-C5JX |