MUCGPT

LinkifyIt#match scan loop has quadratic algorithmic complexity

KaTeX: Existing prototype pollution can bypass trust restrictions

minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions

Certifi removes GLOBALTRUST root certificate

markdown-it linkify: true has two quadratic paths, so a few hundred KB of markdown blocks the event loop for tens of seconds

flatted vulnerable to unbounded recursion DoS in parse() revive phase

js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources

nanoid: non-secure generators can loop indefinitely with negative size

Starlette has possible denial-of-service vector when parsing large files in multipart forms

aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence

ajv has ReDoS when using `$data` option

LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages

aiohttp: Multiple instances of excessive or unbounded memory/CPU use

undici vulnerable to response truncation via oversized chunked responses in the dump interceptor

PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)

Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup

React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretation

undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches

undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent

Undici has an HTTP Request/Response Smuggling issue

pyasn1 has quadratic CPU consumption in constructed BIT STRING decoding

nanoid: custom generators can loop indefinitely when size is zero

AIOHTTP has CRLF injection through multipart part content type header construction

React Router vulnerable to XSS via Open Redirects

Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists

urllib3 streaming API improperly handles highly compressed data

fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references

React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR Hydration

Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

undici vulnerable to HTTP response queue poisoning via keep-alive socket reuse

LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning

path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters

markdown-it is has a Regular Expression Denial of Service (ReDoS)

Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)

virtualenv: Xonsh activation literals depend on the script decoding codec

DOMPurify's ADD_TAGS function form bypasses FORBID_TAGS due to short-circuit evaluation

LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests

Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal

Tornado: Unbounded query-string argument count allows event-loop-stalling DoS

brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups

minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern

Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching

AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS

Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient

undici vulnerable to Denial of Service via unbounded decompression of compressed responses

Marshmallow has DoS in Schema.load(many)

PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt / verify_signature=False)

virtualenv: Deletion recovery can change a symlink target's mode