A memory leak vulnerability exists in ImageMagick versions before 6.9.13-57 and 7.x before 7.1.2-32 in the PNG encoder. This occurs when libpng initialization fails and allocated memory is not released. Repeated triggering of this failure can exhaust system memory, potentially causing a denial of service. The vulnerability has a medium severity score of 3.7 and does not impact confidentiality or integrity.
A memory leak vulnerability exists in the SVG encoder (WriteSVGImage) of ImageMagick versions before 6.9.13-57 and 7.x before 7.1.2-32. This flaw causes allocated memory to not be released when processing crafted SVG images, potentially leading to denial of service through resource exhaustion.
CVE-2026-108476 is a missing authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site affecting versions from initial through 7.5.13. The flaw involves incorrectly configured access control security levels, allowing unauthorized actions. The vulnerability has a medium severity with a CVSS score of 5. No official patch or vendor advisory is provided in the data, and no known exploits are reported in the wild.
DOMPurify versions 3.4.13 through 3.4.15 contain a cross-site scripting (XSS) vulnerability due to improper neutralization of input during web page generation. The vulnerability arises because the IN_PLACE mode fails to neutralize subtrees detached by afterSanitizeElements or afterSanitizeAttributes hooks, allowing attackers to inject markup with event handlers that remain active in the live DOM. This can lead to script execution in the victim's origin.
Parse Server versions before 8.6.93 and 9.0.0 before 9.10.1-alpha.13 have an authorization bypass vulnerability in count queries using the $relatedTo operator. This flaw allows authenticated users who can read an owning object to infer confidential membership information such as private groups or block lists by exploiting the lack of enforcement of identity-scoped protectedFields on these queries.
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an XML injection vulnerability in the CIP encoder, which does not properly escape input-derived data when writing Cisco IP Phone XML output. Attackers can supply a crafted file that, when converted to CIP format, injects arbitrary markup into the generated XML.
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthorizedByName security policy check, allowing configured policy restrictions to be bypassed. Local attackers who can create a symlink can point it at a policy-restricted path to evade the configured policy.
A vulnerability exists in the Python standard library tarfile.extractall() function that allows a remote attacker to craft a malicious archive to bypass security filters. This bypass uses a hardlink referencing a symlink to recreate the symlink outside the intended extraction directory, potentially leading to unauthorized file reads or writes. This flaw affects Red Hat AI Base Images 3.5.3 (CUDA 13.0) as used in Red Hat OpenShift AI. No fix is currently available from Red Hat for this issue.
orderly-plugin-liquidity-heatmap poses as a liquidity heatmap plugin for the Orderly Network orderbook widget, but its only export is an empty stub and a postinstall hook runs `node ./scripts/setup.js` on npm install. When the script detects GitHub Actions (CI and GITHUB_WORKSPACE set), it records the runner's host, user, repository, GITHUB_/ACTIONS_/RUNNER_ variable names, GITHUB_TOKEN presence and length and network egress, and requests an OIDC token from ACTIONS_ID_TOKEN_REQUEST_URL. From 1.0.2 it uses the workflow's GITHUB_TOKEN to commit heatmap-setup-report.json to the default branch of the installing repository, and 1.0.4 also force-pushes a `heatmap-setup-<timestamp>` git tag with the credentials actions/checkout persists in .git/config; 1.0.6 ships the same setup.js as 1.0.4. The npm account dumtban published the six versions between 13:12 and 16:05 UTC on 2026-10-11, each extending the previous one's access to the CI runner.
---
_-= Per source details. Do not edit below this line.=-_
## Source: amazon-inspector (dc82bf27be560cba6faa5304a85b992a07f453c6f9d3f6965f9462666309a3d1)
orderly-plugin-liquidity-heatmap@1.0.0 ships a non-functional main (dist/index.js exports registerLiquidityHeatmapPlugin returning an empty function) with no overlay/interceptor/rendering code — the advertised purpose exists only in the README. The sole real behavior is a postinstall script (scripts/setup.js) gated by `process.env.CI && process.env.GITHUB_WORKSPACE`, so the payload fires only inside GitHub Actions. On that trigger it collects runner identity (hostname, user, repo, workflow, platform), enumerates all GITHUB_*/ACTIONS_*/RUNNER_* environment variable names, records GITHUB_TOKEN presence and length, captures the OIDC request URL, the npm registry, egress probe results, and tool versions, and writes the JSON to `<GITHUB_WORKSPACE>/heatmap-setup-report.json` inside the installer's checked-out repository. In addition, when ACTIONS_ID_TOKEN_REQUEST_TOKEN and ACTIONS_ID_TOKEN_REQUEST_URL are set, it uses the installer's OIDC bearer token to call the GitHub ID-token endpoint with `audience=api.github.com` and records the mint result in the same report. The combination of a hollow library stub, CI-environment-only activation, enumeration of secrets-adjacent CI metadata, unauthorized exercise of the workflow's OIDC identity, and placement of the output into the repository workspace where subsequent workflow steps may commit it or upload it as an artifact is a CI-poisoning / supply-chain reconnaissance primitive against the installer's build pipeline.
## Source: ghsa-malware (f25fe3de75e25d7bb2dee4e8cf02e39d79d011bc22a4b52cf0071bf8a73ad2f2)
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.
CVE-2026-108543 is a path traversal vulnerability in the ag2ai ag2 product affecting versions 0.13.0 through 0.13.4. The issue arises from improper handling of the filename argument in the os.path.join function within the UserProxyAgent component, allowing remote attackers to manipulate file paths. The vulnerability has a medium severity score of 5.3 and has been publicly disclosed. The vendor has not responded to the disclosure, and no patch or remediation has been confirmed.
The SmugMug Embed WordPress plugin through 3.13 does not have authorisation or CSRF checks on an AJAX action that stores gallery data, and does not sanitise or escape that data before outputting it, allowing unauthenticated users to store arbitrary web scripts that execute when an administrator views the SmugMug Embed WordPress plugin through 3.13's settings screen.
ImageMagick on Windows versions through 7.1.2-33 and 6.9.13-58 has an uncontrolled search path vulnerability in the NTGhostscriptEXE() function. This function launches the Ghostscript executable gswin64c.exe by its bare name when Ghostscript is not registered. An attacker can exploit this by placing a malicious gswin64c.exe in the working directory, causing it to be executed with ImageMagick's privileges during conversion of PDF, PostScript, or EPS files.
CVE-2026-62118 is a high-severity vulnerability in Dmitry V.'s Barcode Scanner with Inventory & Order Manager software versions up to 1.13.1. It involves missing authorization controls, allowing unauthenticated users to bypass access restrictions. This flaw can lead to unauthorized information disclosure, modification, and availability impact.