CVE-2026-117989 is a use-after-free vulnerability in the Graphics component of Mozilla products. This security flaw was addressed and fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. The vulnerability is rated with high impact by the vendor. No known exploits in the wild have been reported.
CVE-2026-117990 is a high-impact vulnerability in the Graphics: WebRender component of Mozilla Firefox and Thunderbird. It allows sandbox escape due to incorrect boundary conditions. This flaw was addressed and fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117945 is a vulnerability involving incorrect boundary conditions in the XML component of Mozilla products. This flaw was addressed and fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. The vulnerability is considered high impact by Mozilla. No known exploits in the wild have been reported.
CVE-2026-57191 is a high-severity classic stack buffer overflow vulnerability in Asterisk's res_pjsip_pubsub module. It occurs due to an unbounded sscanf call when parsing the MWI NOTIFY Message-Account field. An unauthenticated attacker can send a crafted packet to trigger this overflow, corrupting the transport and disabling all SIP functionality until the service is restarted. Fixed versions are available.
MLflow tracking servers running without authentication or with basic authentication are vulnerable to an arbitrary file read vulnerability via crafted model versions tagged as prompts with schemeless local paths. This allows remote attackers to read arbitrary files on the server filesystem with the privileges of the MLflow server process. The vulnerability affects MLflow versions 3.10.0 through 3.16.1 and is fixed in version 3.17.0.
MLflow's CrewAI autologging feature in versions >=2.19.0 and <3.17.0 leaks CrewAI LLM provider API keys in trace telemetry. The vulnerability arises because MLflow serializes the CrewAI Agent object's __dict__ including the LLM object, whose string representation contains the API key in plaintext. This sensitive information is unintentionally sent to MLflow's trace backend or any configured OTLP destination without explicit logging by the application. The issue affects MLflow 3.16.0 with CrewAI 1.15.18 and is fixed in MLflow 3.17.0.
MLflow versions from 3.12.0rc0 up to but not including 3.17.0 are vulnerable to unauthenticated remote code execution via a flaw in third-party scorer deserialization. The vulnerability arises because the server imports and instantiates Python classes from request-controlled module paths under allowed package prefixes, which can be exploited by uploading malicious Python modules into writable artifact directories within these allowed packages. This leads to arbitrary code execution with the privileges of the MLflow server process, which by default runs as root in the official image. The issue is critical and has a CVSS score of 9.8. A fix is available in MLflow 3.17.0.
CVE-2026-57192 is a medium severity vulnerability in Asterisk's Codec2 decoder that allows an authenticated attacker to cause a heap buffer overflow via an out-of-bounds write. The flaw arises from a floor/ceil sample-count mismatch when the codec_codec2 module is loaded and Codec2 is configured on the endpoint. Exploitation requires SIP authentication and establishing a call using Codec2 with crafted audio packets. Fixed versions include Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1, and Certified Asterisk 20.7-cert11, 22.8-cert3.
A vulnerability in the Asterisk telephony toolkit's chan_ooh323 channel driver allows malformed Q.931 elements in an OOH323 request to crash the system. This issue exists because a prior fix (CVE-2022-37325) was not forward-ported to versions after Asterisk 20. The vulnerability affects versions where chan_ooh323 is explicitly compiled and publicly reachable. Fixed versions include 21.12.3, 22.10.1, 23.4.1, and Certified Asterisk 22.8-cert3.
CVE-2026-57200 is a path traversal vulnerability in Asterisk affecting versions prior to 20.20.1, 21.12.3, 22.10.1, 23.4.1, and Certified Asterisk 22.8-cert3. An authenticated attacker with read-only Asterisk REST Interface (ARI) credentials may exploit this to perform write operations via REST-over-WebSocket, leading to arbitrary module path loading and potential remote code execution. The vulnerability requires the Asterisk HTTP server to be enabled and reachable, which is disabled and bound to localhost by default. This issue has been fixed in the specified versions.
A ReDoS vulnerability exists in dd-trace's URL query string obfuscation regex, causing excessive CPU usage when processing crafted inputs. This can stall request processing and lead to denial of service in applications using affected HTTP tracing integrations. The issue affects dd-trace versions >=2.0.0 <5.131.1 and >=6.0.0 <6.20.1. A fixed version is available in 5.131.1 and 6.20.1. A workaround involves setting an updated regex pattern via DD_TRACE_OBFUSCATION_QUERY_STRING_REGEXP and restarting the application.
A stored Cross-Site Scripting (XSS) vulnerability exists in the media plugin of TinyMCE. This flaw allows attackers to inject malicious scripts via elements crafted through the data-mce-object attribute, which are executed before proper sanitization. The vulnerability affects TinyMCE versions 7.9.3 and 8.5.1 up to but not including 7.9.4 and 8.9.3 respectively. It has been patched in TinyMCE 7.9.4 and 8.9.3. No official workaround is available other than upgrading.
The Model Context Protocol (MCP) Python SDK versions 1.10.0 through 1.29.1 and 2.0.0 through 2.1.1 have a vulnerability in server-side bearer-token authentication. The SDK does not verify that a token's audience matches the intended server, allowing tokens issued for other services by the same authorization server to be accepted. This can lead to unauthorized access. Fixed in versions 1.30.0 and 2.2.0, the fix requires enabling a new setting to validate the token audience explicitly.
A vulnerability in the OpenTelemetry Python Jaeger propagator (opentelemetry-propagator-jaeger) prior to version 1.45.0 allows unbounded memory allocation when processing inbound 'uberctx-*' baggage headers. This can lead to increased CPU and memory usage per request, potentially causing denial-of-service conditions. The issue affects deployments that enable the Jaeger propagator and accept untrusted inbound propagation headers, especially where transport-level limits are absent or set higher than baggage limits. The vulnerability does not expose or modify telemetry data nor allow code execution. It is mitigated by upgrading to version 1.45.0 or later, which enforces limits on baggage extraction.
The Model Context Protocol (MCP) Python SDK versions 1.8.0 through 1.29.1 and 2.0.0 through 2.1.1 have a vulnerability where their HTTP client transports follow cross-origin HTTP redirects and send custom headers and request bodies to the redirected host. This behavior can expose sensitive headers such as API keys if the trusted endpoint redirects to an attacker-controlled domain. The SDK's OAuth client providers are similarly affected. The lone Authorization bearer header is not exposed due to existing HTTP library protections. The issue is fixed in MCP versions 1.30.0 and 2.2.0 by restricting redirects to the same origin only and failing otherwise.
The Model Context Protocol (MCP) Python SDK versions 1.10.0 through 1.29.1 and 2.0.0 through 2.1.1 contain a vulnerability where the client fetches server-chosen $ref URLs during tool result validation. This allows a malicious server to cause the client to make network or local file requests synchronously without timeout, potentially freezing the client session. The issue is fixed in versions 1.30.0 and 2.2.0.
A Cross-Site Scripting (XSS) vulnerability exists in CKEditor 5 engine versions from 29.0.0 up to but not including 47.7.4, and from 48.0.0 up to but not including 48.5.1. This issue occurs when the General HTML Support feature is enabled and configured to allow certain HTML content, enabling injection of malicious JavaScript code in a browser context isolated from the embedding application's origin. The vulnerability has a low severity score and has been patched in versions 47.7.4 and 48.5.1.
A Cross-Site Scripting (XSS) vulnerability exists in CKEditor 5 due to a prototype pollution issue in the es-toolkit library. This flaw allows unauthorized JavaScript execution when processing style attribute values. The vulnerability is fixed in CKEditor 5 versions 47.7.4 (LTS) and 48.5.1 and later.
A logic error in the legacy WebRTC input handling of the Neko server allows authenticated room members to bypass authorization checks and send mouse and keyboard inputs even when controls are locked. This issue only affects the legacy WebRTC input path when legacy mode and implicit hosting are enabled. The modern control API remains unaffected. The vulnerability is fixed in version 0.0.0-20260805142851-395ca1a6f62b.
Atlantis contains an OS command injection vulnerability in its handling of the Terraform workspace name specified in a pull request's atlantis.yaml file. The workspace name is passed into a shell command without proper escaping, allowing an attacker controlling a pull request to execute arbitrary shell commands as the Atlantis service account during the plan phase. This does not require custom workflows or apply permissions. The vulnerability affects versions from 0.4.0 up to but not including 0.47.1 and has been fixed in version 0.47.1.