Wasmtime is a runtime for WebAssembly. Prior to 36.0.19 and 43.0.0, the Cranelift compiler backend bit-packs SSA value indices in a way that can silently overflow in release builds when compiling a sufficiently large or specially crafted Wasm function with many SSA values. The overflow can make Cranelift reference incorrect IR values, causing arbitrary miscompilation, type confusion, and other attacker-controlled effects that may escape the Wasm sandbox on any architecture using the default Cranelift backend. This issue is fixed in versions 36.0.19 and 43.0.0.
A high-severity vulnerability (CVE-2026-115887) exists in the graphql-scalars library used by graphql-hive, specifically in the GraphQLPhoneNumber scalar between versions 1.24.1 and before 2.0.1. The issue is caused by inefficient regular expression complexity leading to exponential backtracking when parsing certain phone number inputs. This can block the Node.js event loop and stall the server, resulting in a denial of service. The vulnerability affects parseLiteral, parseValue, and serialize functions. It is fixed in version 2.0.1.
MLflow versions from 3.12.0rc0 up to but not including 3.17.0 contain a vulnerability involving unsafe reflection in certain endpoints that accept serialized third-party scorer data. This flaw allows attackers to manipulate class selection and constructor arguments, potentially causing the server to make outbound requests to attacker-controlled or internal hosts. The issue is resolved in version 3.17.0.
A vulnerability in langgraph CLI versions from 0.4.15 up to but not including 0.4.32 causes sensitive temporary registry push tokens to be logged in verbose mode. This token exposure allows anyone with access to CI logs or terminal recordings to pull or push images to the deployment's image repository within the token's 12-hour validity. The issue does not affect deployments without verbose mode or remote image builds and does not allow updating deployments to execute pushed images. The vulnerability is fixed in version 0.4.32.
LangGraph checkpoint savers provide Postgres- and SQLite-backed state persistence for LangGraph workflows and agents. Prior to langgraph-checkpoint-postgres 3.1.3 and langgraph-checkpoint-sqlite 3.1.2, PostgresStore, AsyncPostgresStore, SqliteStore, and AsyncSqliteStore flatten namespace labels with ".".join(namespace), while BaseStore validates labels only for put and aput. Unvalidated dotted labels passed through get, search, delete, list_namespaces, their asynchronous equivalents, or direct batch and abatch operations can resolve to another tenant's stored namespace, allowing cross-namespace reads, overwrites, or deletion. InMemoryStore is not affected because it compares namespace tuples. This issue is fixed in langgraph-checkpoint-postgres 3.1.3 and langgraph-checkpoint-sqlite 3.1.2.
CVE-2026-113951 is a vulnerability in Apple's Container product prior to version 1.5.0. It allows an attacker with write access to the filesystem of a Kubernetes cluster container to plant an exec credential plugin in the cluster's admin.conf file. When the kubeconfig is pulled onto a macOS host and kubectl is run, the malicious plugin executes with the host user's privileges, enabling arbitrary command execution on the host. This vulnerability is fixed in Container version 1.5.0.
The abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client, contained a critical remote code execution (RCE) vulnerability in its updater mechanism. The updater contacted an abandoned domain over unencrypted HTTP and accepted unsigned executables, allowing anyone controlling the domain to execute code with SYSTEM/root privileges on millions of Windows and macOS devices. Researchers mitigated the risk by registering the domain and remotely disabling the updater through a remediation payload. However, Android users remain exposed, and the app's outdated embedded Chrome engine presents additional risks. Users are advised to uninstall the software entirely.
LiteLLM version 1.107.0 was compromised and distributed via PyPI and official container images on October 21, 2026. The malicious package used Python startup hooks to automatically execute credential-stealing payloads without requiring explicit import of LiteLLM. Attackers stole developer GitHub credentials to redirect release workflows to a fake repository. The payload targeted authentication credentials across developer tools, AI applications, cloud environments, browsers, and infrastructure. Credentials were encrypted and exfiltrated to attacker-controlled servers. The compromise affected developer workstations, CI/CD agents, test systems, containers, and LiteLLM gateway deployments where Python was executed.
OpenReception appointment booking software versions 2.1.0 and earlier contain an authorization vulnerability allowing unauthenticated attackers to inject arbitrary encryption public keys into any tenant's staff recipient directory. This breaks the product's end-to-end encryption guarantee by enabling persistent unauthorized access to appointment encryption keys. No patches are publicly available at this time.
A vulnerability was identified in UbiquitousLearning mllm up to 2.0.2. The affected element is the function load_model of the file pymllm/mobile/convertor/__init__.py of the component Convertor. The manipulation of the argument shard_file leads to path traversal. The attack needs to be performed locally. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
A time-of-check to time-of-use (TOCTOU) race condition vulnerability exists in OpenReception's appointment booking software prior to version 2.2.2. This flaw allows an attacker to overbook an agent by placing multiple appointments into a single time slot that should be exclusive. The issue arises because the booking token is consumed after insertion, but concurrent requests can still cause overlapping bookings. The vulnerability compromises the integrity of the booking calendar and can deny availability to other clients. It has been patched in version 2.2.2.
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. In versions 2.1.0 and prior, a returning client's six-digit booking PIN can be brute-forced online in the victim tenant. A successful guess yields the client's booking access token, granting access to that client's appointment tunnel, which holds their end-to-end-encrypted appointment data, and the ability to act as the client, for example adding or cancelling appointments in the tunnel. The bypass is cross-tenant: state owned by one tenant removes an authentication protection of a different tenant. This crossing of the tenant boundary is the basis for the scope-changed vector. At time of publication, there are no publicly available patches.
OpenReception's appointment booking software prior to version 2.2.1 contains an authentication bypass vulnerability. An attacker who captures a pending invite token can replay it to register their own passkey on the invited account, gaining control of that account. If the invite is for a staff or tenant-admin, the attacker gains access to the tenant context associated with that account. This vulnerability has been patched in version 2.2.1.
OpenReception's appointment booking software versions prior to 2.0.0 contain a vulnerability in the password recovery mechanism where the account-confirmation link in emails is constructed from the unvalidated Host header. This allows an attacker to send a confirmation email with a malicious link that, if clicked by the invitee, enables the attacker to take over the account by confirming it and registering a passkey. The issue is patched in version 2.0.0.
CVE-2026-115877 is a medium severity vulnerability in the Twisted framework prior to version 26.10.0rc1. It involves inconsistent interpretation of HTTP requests due to improper handling of bare carriage return or line feed characters in HTTP header values. This allows HTTP request smuggling, potentially bypassing front-end access controls, poisoning shared connections or caches, and exposing clients to incorrect responses. The issue is fixed in version 26.10.0rc1.
Twisted versions prior to 26.7.0rc1 have an origin validation error in twisted.names.dns.DNSDatagramProtocol. The protocol accepts UDP DNS responses based solely on matching transaction IDs without verifying the source host and port. This flaw allows an attacker who can send packets to the resolver's listening port with a correct transaction ID to inject forged DNS answers. Such forgery can redirect hostname resolution, potentially enabling mail interception, server-side request forgery, or man-in-the-middle attacks. The issue is fixed in version 26.7.0rc1.
CVE-2026-115778 is a high-severity vulnerability in the Twisted event-based framework for Python. Prior to version 26.10.0rc1, the Telnet dataReceived method in twisted.conch.telnet improperly accumulates data in a subnegotiation buffer without a maximum length limit. Because Telnet option negotiation occurs before authentication, an unauthenticated attacker can send data without the expected terminator, causing uncontrolled memory growth. This can lead to memory exhaustion and process termination, affecting all services hosted by the process. The issue is fixed in version 26.10.0rc1.
A resource consumption vulnerability exists in the Twisted framework prior to version 26.10.0rc1. The IRC protocol implementation buffers all received bytes without a line feed in a per-connection buffer without enforcing a maximum line length. This allows an unauthenticated connection to cause unbounded memory growth, potentially exhausting server memory and causing denial of service. The issue is fixed in version 26.10.0rc1.
CVE-2026-115775 is a high-severity vulnerability in the Twisted event-based framework for Python. The issue exists in the twisted.words.xish.domish ExpatElementStream parser prior to version 26.10.0rc1, where an unauthenticated remote peer can keep a container element open while continuously adding child elements. This causes the parser to retain the unfinished stanza as an in-memory tree without limits, potentially exhausting server memory and causing process termination. The vulnerability is fixed in version 26.10.0rc1.
CVE-2026-115774 is a vulnerability in the Twisted event-based framework affecting versions prior to 26.10.0rc1. It involves an uncontrolled resource consumption issue triggered by a negative literal size in an authenticated IMAP SEARCH command. This causes the parser cursor to move below zero, leading to an infinite loop that freezes the single-threaded reactor. The freeze halts all IMAP connections and any SMTP or POP3 services running in the same process until the service is restarted. The issue is fixed in version 26.10.0rc1.