2026

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a craf

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a craf

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a clie

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 6.9.13-56 and 7.

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an una

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, missin

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, delega

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, a craf

libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XML_ParseBuffer advances th

PraisonAI is a multi-agent teams system. In `praisonai-platform` prior to version 0.1.9, issue dependency deletion can b

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_index_walk_down() in libntfs-3g/index.c that allows an

A command injection vulnerability exists in the h-ui (version v0.0.25 and below) administrative API due to improper vali

A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic l

A flaw was found in m17n-lib. An attacker could provide specially crafted or truncated UTF-8 input to trigger an unhandl

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition

A flaw has been found in XnView Classic 2.52.5. Impacted is an unknown function of the component FLI File Parser. This m

Backstage is an open framework for building developer portals. Prior to 0.21.8, the @backstage/plugin-kubernetes-backend

Backstage is an open framework for building developer portals. Prior to 2.1.6 in @backstage/plugin-search-backend and 1.

Backstage is an open framework for building developer portals. Prior to 0.21.9, the @backstage/plugin-kubernetes-backend

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend

Backstage is an open framework for building developer portals. Prior to 1.14.8, 1.15.6, and 2.0.1, the @backstage/plugin

Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node pack

Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node pack

A heap-based buffer overflow was found in GIMP’s GIF export plug-in. Exporting an image with very large width and height

Coturn 4.10.0 contains an uninitialized memory disclosure vulnerability that allows remote unauthenticated attackers to

The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce any cross-origin resource protection for

The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied inp

The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper authentication restrictions agai

The device log component of Fanvil x7a firmware version 2.6.0.1182 does not properly sanitize or encode reflected user s

The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied inp

The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce any cross-origin resource protection for

The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper authentication restrictions agai

The device log component of Fanvil x7a firmware version 2.6.0.1182 does not properly sanitize or encode reflected user s

An issue in iTerm2 macOS before 3.6.12 allows a local attacker to obtain sensitive information.

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_cut_tail() in libntfs-3g/index.c that allows an att

In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfs_fix_file_name() in libntfs-3g/reparse.c that allows an a

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_copy_tail(), in libntfs-3g/index.c, that allows an

wger is a free, open-source workout and fitness manager. Prior to version 2.6, an authenticated attacker can inject arbi

wger is a free, open-source workout and fitness manager. Versions prior to 2.6 have a vulnerability in the authenticatio

wger is a free, open-source workout and fitness manager. Prior to version 2.6, a user with only the `gym_trainer` permis

wger is a free, open-source workout and fitness manager. Prior to version 2.6, the `trainer_login` view in wger accepts

wger is a free, open-source workout and fitness manager. Prior to version 2.6, five gym management views in wger apply a

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_decompress() in compress.c that allows an attacker to