data_quality_in_wastewater_surveillance

Pillow: Infinite loop in MIC n_frames when the embedded TIFF

Certifi removes GLOBALTRUST root certificate

Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode

Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()

Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images

Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id="toc_N"` content

Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists

urllib3 streaming API improperly handles highly compressed data

Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO

Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)

virtualenv: Xonsh activation literals depend on the script decoding codec

Tornado: Unbounded query-string argument count allows event-loop-stalling DoS

Pillow: TarIO negative size field causes infinite CPU-spin loop

Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient

virtualenv: Deletion recovery can change a symlink target's mode

Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size

Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading

Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)

urllib3 does not control redirects in browsers and Node.js

virtualenv: Downloaded wheel selection and caching precede verification

nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames

Mistune inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs

Soup Sieve: General sibling combinator inside :has() matches untrusted HTML in quadratic time

Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise

Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer

Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path

pip's fallback tar extraction doesn't check symbolic links point to extraction directory

Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching

virtualenv: Generated files can follow existing destination links

filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break

Mistune has XSS via unescaped figclass/figwidth in Figure directive

pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files

Pillow: Out-of-bounds access in _imagingmorph on a zero-width image

virtualenv Has TOCTOU Vulnerabilities in Directory Creation

Tornado: Open redirect via triple-slash redirect paths

virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST

Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution

Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`

Pillow: APNG background disposal allocates full canvas before decompression bomb check

Pillow has a heap buffer overflow with nested list coordinates

Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

geopandas SQL Injection Vulnerability in to_postgis() Allows Information Disclosure

Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1

Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS

Soup Sieve: Exponential ReDoS in selector compilation via \9-run in CSS_ESCAPES/IDENTIFIER

filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock path