Objection management

pypdf: Possible long runtimes/large memory usage when retrieving outlines

pypdf: Possible long runtimes for zero-only width values in cross-reference streamsuntimes for zero-only width values in cross-reference streams

Certifi removes GLOBALTRUST root certificate

HuggingFace transformers vulnerable to remote code execution

Starlette has possible denial-of-service vector when parsing large files in multipart forms

aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence

PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)

Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup

pypdf has possible Infinite Loop when processing outlines/bookmarks

pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams

AIOHTTP has CRLF injection through multipart part content type header construction

Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists

urllib3 streaming API improperly handles highly compressed data

Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

PyTorch susceptible to local Denial of Service

Transformers is vulnerable to ReDoS attack through its DonutProcessor class

Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)

pypdf: Manipulated XMP metadata entity declarations can exhaust RAM

NLTK: Corpus Reader Sandbox Bypass

NLTK: SSRF Fail-Open in validate_network_url() via DNS Resolution Failure

NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entirely

UltraJSON: Malformed/Truncated UTF-8 Accepted and Silently Rewritten in ujson.dumps()

onnx Vulnerable to Path Traversal via Symlink

AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS

Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient

Marshmallow has DoS in Schema.load(many)

Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading

NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite

urllib3 does not control redirects in browsers and Node.js

pypdf has possible long runtimes for malformed startxref

aiohttp: HTTP/1 Pipelined Requests Queue Without Limit

LiteLLM: Local file read via request-supplied OIDC file references

Accelerate path traversal and denial of service via sharded checkpoint weight_map entries

LiteLLM: MCP Proxy Has Improper Authentication

aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections

unstructured: Server-Side Request Forgery in the URL-based partitioning

pypdf: Possible long runtimes for wrong size values in incremental mode

pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character

Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer

Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path

pypdf has possible long runtimes for missing /Root object with large /Size values

LiteLLM: Authentication Bypass via Host Header Injection

Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching

pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction

Vulnerable OpenSSL included in cryptography wheels

ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.

LiteLLM: Privilege escalation via unrestricted proxy configuration endpoint

PyTorch: `torch.load` with `weights_only=True` leads to remote code execution