Energieautarkes Wohnquartier - Backend

Pillow: Infinite loop in MIC n_frames when the embedded TIFF

Certifi removes GLOBALTRUST root certificate

Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode

Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()

Keras: HDF5 virtual datasets can disclose local files

Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images

Werkzeug safe_join() allows Windows special device names

Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain

urllib3 streaming API improperly handles highly compressed data

Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO

Keras is vulnerable to Deserialization of Untrusted Data

The Keras `Model.load_model` method **silently** ignores `safe_mode=True` and allows arbitrary code execution when a `.h5`/`.hdf5` file is loaded.

Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)

Pillow: TarIO negative size field causes infinite CPU-spin loop

Keras has a Local File Disclosure via HDF5 External Storage During Keras Weight Loading

Flask-CORS vulnerable to Improper Handling of Case Sensitivity

Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size

Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading

Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)

urllib3 does not control redirects in browsers and Node.js

Keras has an untrusted deserialization vulnerability

Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise

Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer

Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path

Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching

Keras: tar extraction permits symlink-based path traversal

Pillow: Out-of-bounds access in _imagingmorph on a zero-width image

Keras: Lambda deserialization can bypass safe mode and execute code

setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

Python-Markdown has an Uncaught Exception

Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution

Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`

Pillow: APNG background disposal allocates full canvas before decompression bomb check

Pillow has a heap buffer overflow with nested list coordinates

Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1

Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS

Flask session does not add `Vary: Cookie` header when accessed in some ways

certifi bundles emSign root CAs with compromised intermediate CA keys

Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow

Keras model loading is vulnerable to denial of service through HDF5 shape bombs

Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()

fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib

Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().load()

protobuf affected by a JSON recursion depth bypass

Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform

Flask-CORS improper regex path matching vulnerability