AI

Certifi removes GLOBALTRUST root certificate

Werkzeug safe_join() allows Windows special device names

Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain

urllib3 streaming API improperly handles highly compressed data

Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)

Flask-CORS vulnerable to Improper Handling of Case Sensitivity

Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading

urllib3 does not control redirects in browsers and Node.js

Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path

AnyIO process-pool workers can block indefinitely on undrained stderr

setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`

Pillow has a heap buffer overflow with nested list coordinates

Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

Flask session does not add `Vary: Cookie` header when accessed in some ways

Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow

pytest has vulnerable tmpdir handling

Flask-CORS improper regex path matching vulnerability

AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing

flask-cors vulnerable to log injection when the log level is set to debug

Werkzeug safe_join() allows Windows special device names with compound extensions

Wheel Affected by Arbitrary File Permission Modification via Path Traversal in wheel unpack

Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading

Flask-CORS allows for inconsistent CORS matching

Requests vulnerable to .netrc credentials leak via malicious URLs

Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch

Requests `Session` object does not verify requests after making first request with verify=False

Pillow affected by out-of-bounds write when loading PSD images

Jinja2 vulnerable to sandbox breakout through attr filter selecting format method

setuptools vulnerable to Command Injection via package URL

Werkzeug safe_join not safe on Windows

Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images

tqdm CLI arguments injection attack

Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function

urllib3 allows an unbounded number of links in the decompression chain

Jinja has a sandbox breakout through malicious filenames

setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+

Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter

Werkzeug safe_join() allows Windows special device names

Flask-CORS allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default

Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()

urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API

python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback

Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service

Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`

urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation

Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)