strahlenexposition

Pillow: Infinite loop in MIC n_frames when the embedded TIFF

Certifi removes GLOBALTRUST root certificate

Jupyter Server has a CORS Origin Validation Bypass via `re.match()` in `allow_origin_pat`

Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode

Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()

Poetry Has Wheel Path Traversal Which Can Lead to Arbitrary File Write

Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images

Werkzeug safe_join() allows Windows special device names

Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain

Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id="toc_N"` content

Scrapy is vulnerable to a denial of service (DoS) attack due to flaws in brotli decompression implementation

Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists

urllib3 streaming API improperly handles highly compressed data

JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs

Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO

Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Dulwich: Infinite Loop Denial of Service (DoS) in Packfile Object Resolution

JupyterLab has an Extension Manager API/GUI Policy Discrepancy, allowing 3rd party (malicious) extensions install via POST request

Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)

virtualenv: Xonsh activation literals depend on the script decoding codec

Tornado: Unbounded query-string argument count allows event-loop-stalling DoS

Pillow: TarIO negative size field causes infinite CPU-spin loop

JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json)

Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient

virtualenv: Deletion recovery can change a symlink target's mode

Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size

Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading

Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)

urllib3 does not control redirects in browsers and Node.js

virtualenv: Downloaded wheel selection and caching precede verification

nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames

Mistune inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs

Soup Sieve: General sibling combinator inside :has() matches untrusted HTML in quadratic time

Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise

Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer

Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path

pip's fallback tar extraction doesn't check symbolic links point to extraction directory

Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching

Vulnerable OpenSSL included in cryptography wheels

virtualenv: Generated files can follow existing destination links

filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break

Jupyter Server: Path Traversal via incorrect startswith() root directory check allows access to sibling directories

Mistune has XSS via unescaped figclass/figwidth in Figure directive

jaraco.context Has a Path Traversal Vulnerability

pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files

Pillow: Out-of-bounds access in _imagingmorph on a zero-width image

virtualenv Has TOCTOU Vulnerabilities in Directory Creation

Tornado: Open redirect via triple-slash redirect paths