Search: 13.3-13

CVE-2026-115327 is a vulnerability in CESNET's libyang library up to version 6.4.13. It involves an uninitialized pointer free flaw in the function lydxml_env_netconf_rpc() when parsing NETCONF RPC action envelopes. This flaw allows a peer with a NETCONF session to send crafted action elements containing non-whitespace text that can crash servers such as netopeer2 or cause heap corruption.

YouDataSum CPAS Audit Management System version 4 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files on the system. This is achieved by manipulating the fileId parameter in GET requests to the /cpasm4/plugInManController/downPlugs endpoint with directory traversal sequences (../). Exploitation evidence was first observed on 2025-01-13. The vulnerability has a high severity score of 8.7 (CVSS 4.0).

Red Hat has released a critical security update for Red Hat OpenShift Developer Tools - Openshift Jenkins 4.13. The update addresses multiple vulnerabilities identified by CVE-2024-38827 and numerous other CVEs. Users of Openshift Jenkins 4.13 are recommended to upgrade to the latest version to mitigate these security issues.

CVE-2026-88849 is an authorization vulnerability in the MasterStudy LMS WordPress Plugin versions 3.7.13 up to but not including 3.7.55. It allows users with the Instructor role to overwrite the first name, last name, and public display name of any registered user, including administrators, via the student-enrolment feature. This flaw enables impersonation and phishing attacks. The issue is fixed in version 3.7.55.

A missing authorization vulnerability exists in the Grav Login plugin versions 3.6.0 up to but not including 3.9.13. This flaw in the login.invite task allows unauthenticated attackers to create invitation forms that grant super user access, enabling them to register accounts with full site control.

Traefik versions before 2.11.58 and 3.7.13 have an authentication bypass vulnerability. This flaw allows unauthenticated clients to bypass client-certificate checks due to how negated Host matchers are handled, causing a TLS options conflict that falls back to default options. This enables attackers to access backends protected by RequireAndVerifyClientCert without proper authentication.

Traefik versions 3.7.0 through 3.7.13 have an improper authentication vulnerability in the Kubernetes Ingress NGINX provider. This flaw occurs due to merging client certificate authorities (CAs) when auth-tls-secret names collide after dot-to-dash normalization. As a result, attackers with certificates from a different host's CA can gain unauthorized access to hosts that require their own client CA, while legitimate clients of those hosts are denied access. The issue is fixed in version 3.7.14.

Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX provider, where the HTTP router generated for ssl-passthrough Ingresses on non-TLS entry points never applies the Ingress's access-control annotations. Unauthenticated attackers reaching the HTTP entry point with the Ingress host can access backends protected by auth-type, auth-url, or whitelist-source-range annotations, with nothing logged.

CVE-2026-84911 is a stored cross-site scripting (XSS) vulnerability in the Drupal AI (Artificial Intelligence) product. It affects versions from 0.0.0 up to but not including 1.3.13, and from 1.4.0 up to but not including 1.4.8. The vulnerability involves improper neutralization of input during web page generation, which could allow an attacker with high privileges and user interaction to inject malicious scripts. The issue has been fixed in versions 1.3.13 and 1.4.8.

CVE-2026-84912 is a missing authorization vulnerability in the Drupal AI (Artificial Intelligence) module. It allows forceful browsing due to improper access control. The issue affects versions from 0.0.0 up to but not including 1.3.13, and from 1.4.0 up to but not including 1.4.8. The vulnerability has a medium severity with a CVSS score of 4.6. Fixed versions are 1.3.13 and 1.4.8.

Pillow versions from 11.2.1 up to but not including 13.0.0 have a vulnerability in the Arrow export functionality where the code incorrectly assumes image rows are tightly contiguous. This causes the exported Arrow buffer to potentially include uninitialized padding, memory preceding the first row, or stale heap data from previously freed images. As a result, applications that use alignment configuration and export images to Arrow may inadvertently disclose pixel data or other process memory from one user to another. The issue is resolved in Pillow version 13.0.0.

A critical authentication bypass vulnerability (CWE-287) exists in the Laravel framework's TokenGuard API guard prior to versions 12.68.0 and 13.29.0. The flaw allows crafted non-string credentials to bypass authentication under certain MySQL or MariaDB configurations, potentially enabling attackers to take over user accounts on routes protected by TokenGuard. This issue has been fixed in Laravel versions 12.68.0 and 13.29.0.

A vulnerability in the Laravel framework versions 12.45.0 through 12.67.9 and 13.0.0 through 13.26.9 allows a user with read-only access to trigger destructive database operations on related tables via crafted relationship inclusion on a read-only endpoint. This can lead to irreversible data loss, denial of service, and loss of data integrity. The issue is fixed in versions 12.68.0 and 13.27.0.

Pillow, a Python imaging library, has a vulnerability in versions prior to 13.0.0 on Windows where the WMF or EMF image plugin improperly handles 32-bit metafile dimensions. This leads to a heap buffer over-read or crash when processing crafted metafiles. The issue is fixed in version 13.0.0.

A vulnerability in the Pillow Python imaging library versions from 11.0.0 up to but not including 13.0.0 causes excessive CPU usage when processing certain EXIF data. The Exif.load() function repeatedly slices EXIF data containing repeated six-byte Exif headers, leading to quadratic CPU work. This can be triggered via common image operations such as Image.getexif(), Image._getexif(), and ImageOps.exif_transpose(). The issue is fixed in version 13.0.0.

Pillow versions prior to 13.0.0 contain a vulnerability in the TarIO initializer where a negative octal member size causes a backward seek to the same 512-byte header. If the requested member name does not match, the parser repeatedly reads the header, consuming a full CPU core and causing the process to hang indefinitely. This issue affects only applications that directly use PIL.TarIO.TarIO rather than the standard Image.open() method. The vulnerability is fixed in version 13.0.0.