huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2026-13595: util-linux: util-linux: heap use-after-free in libblkid nested partition probing
Component: util-linux
Severity: Moderate
CWE: CWE-416 (Use After Free)
CVSS v3: 6.8 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Public date: 2026-05-07T00:00:00+00:00

A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent partition entry in a dynamically allocated array. When subsequent partition additions cause the array to be reallocated, this pointer becomes stale, leading to a heap use-after-free read. An attacker who can present a crafted block device image (for example, via USB insertion or a loop-mounted disk image) can trigger this flaw without user interaction, as libblkid is invoked automatically by udev/udisks as root on block-device hot-plug events. This could lead to limited information disclosure or denial of service.

Statement: This Moderate severity heap use-after-free flaw in libblkid of util-linux could allow an attacker with local access to a system to cause a denial of service or potentially disclose limited information. The vulnerability is triggered when processing a specially crafted block device image, which libblkid automatically handles as root during hot-plug events via udev/udisks. This makes systems susceptible if untrusted block devices can be introduced.

Affected upstream versions: <= v2.39
Fixed upstream versions: 2.42.2-1.hum1
Upstream repository: https://github.com/util-linux/util-linux
Upstream fix commit: c0186f14fbdb02f64c8e0ba701ce727ea764ff4c
CVE-2026-1462: keras: Keras: Arbitrary Code Execution Vulnerability Bypassing Safe Mode
Component: keras
Severity: Important
CWE: CWE-502 (Deserialization of Untrusted Data)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Public date: 2026-04-13T14:55:28.649000+00:00

A flaw was found in the `keras` package. This vulnerability allows an attacker to execute unauthorized code on a victim's system. It occurs when a victim loads a specially crafted `.keras` model, even if the `safe_mode` security feature is active. The issue arises because the `keras` package can unconditionally load external TensorFlow SavedModels without sufficient validation, thereby bypassing the intended security protections and leading to arbitrary code execution.


Affected upstream versions: unspecified < 3.13.2
Fixed upstream versions: 3.13.2
Upstream repository: https://github.com/keras-team/keras
Upstream fix commit: b6773d3decaef1b05d8e794458e148cb362f163f
CVE-2026-1502: python: Python: HTTP header injection via CR/LF in proxy tunnel headers
Component: python
Severity: Moderate
CWE: CWE-93 (Improper Neutralization of CRLF Sequences ('CRLF Injection'))
CVSS v3: 4.5 (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N)
Public date: 2026-04-10T17:54:44.121000+00:00

A flaw was found in Python. This vulnerability allows for the injection of extra information into HTTP communication. Specifically, the system does not properly prevent special characters (carriage return and line feed) from being included in HTTP client proxy tunnel headers or host fields.


Affected upstream versions: 3.14.0a1 < 3.14.5rc1, 3.15.0a1 < 3.15.0b1
Fixed upstream versions: v3.15.0b1
Upstream repository: https://github.com/python/cpython
Upstream fix commit: 05ed7ce7ae9e17c23a04085b2539fe6d6d3cef69
CVE-2026-15308: python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations
Component: python
Severity: Important
CWE: CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop'))
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2026-07-09T17:10:57.317000+00:00

A flaw was found in Python. Its incremental HTML parser can be exploited by a remote attacker. By sending specially crafted, uncontrolled data with repeated, incomplete markup declarations, the attacker can cause the system to consume excessive central processing unit (CPU) resources. This leads to a denial of service, making the affected system unresponsive.

Statement: This Important vulnerability in Python's `html.parser.HTMLParser` can lead to a denial of service. By supplying specially crafted, malformed HTML with repeated unterminated markup declarations, an attacker can cause excessive CPU consumption, rendering the system unresponsive. Red Hat products utilizing this parser to process untrusted HTML content are susceptible to resource exhaustion.

Affected upstream versions: <= v3.14.6
Upstream repository: https://github.com/python/cpython
Upstream fix commit: 07efb08123ba9367a7107325adb9d5626dca1ca9
CVE-2026-1615: jsonpath: jsonpath: Arbitrary Code Execution via unsafe JSON Path expression evaluation
Component: jsonpath
Severity: Important
CWE: CWE-94 (Improper Control of Generation of Code ('Code Injection'))
CVSS v3: 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Public date: 2026-02-09T05:00:09.050000+00:00

A flaw was found in the jsonpath component. This vulnerability allows a remote attacker to achieve arbitrary code execution by supplying a malicious JSON Path expression. The component's reliance on the `static-eval` module for processing user-supplied input leads to unsafe evaluation. Successful exploitation can result in Remote Code Execution (RCE) in Node.js environments or Cross-site Scripting (XSS) in browser contexts.

Statement: Red Hat Product Security team has rated this vulnerability as Important as it may allows arbitrary code execution when processing untrusted JSON Path expressions. This can lead to Remote Code Execution in Node.js environments or Cross-site Scripting in browser contexts. In some contexts it may be possible to remotely exploit this flaw without any privileges. However, within Red Hat products the jsonpath component is used as a transitive dependency or does not directly handle user input. This context reduces exposure and criticality of this vulnerability.

Affected upstream versions: <= 1.2.1
Fixed upstream versions: *, 1.3.0
Upstream repository: https://github.com/dchester/jsonpath
Upstream fix commit: b61111f07ac1a8d0f3133b5fc51438ecb76a6c39
CVE-2026-16445: dracut: dracut: Root code execution via DHCP options command injection in NetworkManager initrd module
Component: dracut
Severity: Important
CWE: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'))
CVSS v3: 7.5 (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Public date: 2026-07-21T00:00:00+00:00

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are improperly handled and written into a temporary shell script without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs during system boot.

Statement: This is an Important vulnerability in dracut's NetworkManager-based initrd network module (nm-run.sh) that allows command injection via crafted DHCP options. An attacker on the adjacent network can exploit this by acting as a DHCP server and providing specially crafted DHCP options, leading to root code execution within the initramfs. This affects systems configured to boot using dracut's network-manager module with a DHCP-derived netroot (for example, NFS-root configurations).

Affected upstream versions: <= 055
Fixed upstream versions: 0:049-244.git20260529.el8_10, 109-7.hum1
Upstream repository: https://github.com/dracutdevs/dracut
Upstream fix commit: e509c638e6
CVE-2026-1703: pip: pip: Information disclosure via path traversal when installing crafted wheel archives
Component: pip
Severity: Low
CWE: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'))
CVSS v3: 3.9 (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N)
Public date: 2026-02-02T14:43:02.919000+00:00

A flaw was found in pip. A remote attacker could exploit this path traversal vulnerability by tricking a user into installing a maliciously crafted wheel archive. This could lead to files being extracted outside the intended installation directory, potentially disclosing sensitive information.

Statement: This LOW impact flaw in pip allows information disclosure via path traversal when installing crafted wheel archives. While files may be extracted outside the installation directory, the traversal is limited to prefixes of the installation directory, preventing injection or overwriting of executable files in typical Red Hat environments.

Affected upstream versions: <= 25.3
Fixed upstream versions: 26.0
Upstream repository: https://github.com/pypa/pip
Upstream fix commit: 8e227a9be4faa9594e05d02ca05a413a2a4e7735
CVE-2026-2045: gimp: GIMP: Remote Code Execution via out-of-bounds write in XWD file parsing
Component: gimp
Severity: Important
CWE: CWE-787 (Out-of-bounds Write)
CVSS v3: 7.3 (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Public date: 2026-02-20T22:23:32.645000+00:00

A flaw was found in GIMP. The specific flaw exists within the parsing of XWD files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.


Affected upstream versions: 3.0.6
Fixed upstream versions: GIMP_3_2_0
Upstream repository: https://gitlab.gnome.org/GNOME/gimp
Upstream fix commit: 68b27dfb1cbd9b3f22d7fa624dbab8647ee5f275
CVE-2026-21441: urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)
Component: urllib3
Severity: Important
CWE: CWE-409 (Improper Handling of Highly Compressed Data (Data Amplification))
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2026-01-07T22:09:01.936000+00:00

urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.


Affected upstream versions: >= 1.22, < 2.6.3
Fixed upstream versions: 2.6.3
Upstream repository: https://github.com/urllib3/urllib3
Upstream fix commit: 8864ac407bba8607950025e0979c4c69bc7abc7b
CVE-2026-22036: undici: Undici: Denial of Service via excessive decompression steps
Component: undici
Severity: Low
CWE: CWE-770 (Allocation of Resources Without Limits or Throttling)
CVSS v3: 3.7 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)
Public date: 2026-01-14T19:07:13.745000+00:00

A flaw was found in Undici, an HTTP/1.1 client for Node.js. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP response with an unbounded number of links in the decompression chain. This could lead to high CPU usage and excessive memory allocation, resulting in a Denial of Service (DoS) for the affected system.

Statement: This vulnerability is rated Low for Red Hat products. The flaw in Undici, an HTTP/1.1 client for Node.js, allows a remote malicious server to trigger a Denial of Service by sending a specially crafted HTTP response with excessive decompression steps. This can lead to high CPU usage and memory allocation on the client system. Red Hat products utilizing Undici that connect to untrusted external HTTP servers are potentially affected.

Affected upstream versions: < 6.23.0, >= 7.0.0, < 7.18.2
Fixed upstream versions: v7.18.2
Upstream repository: https://github.com/nodejs/undici
Upstream fix commit: b04e3cbb569c1596f86c108e9b52c79d8475dcb3
CVE-2026-22045: traefik: Traefik: Denial of Service via ACME TLS-ALPN fast path resource exhaustion
Component: traefik
Severity: Moderate
CWE: CWE-770 (Allocation of Resources Without Limits or Throttling)
CVSS v3: 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2026-01-15T22:44:05.423000+00:00

A flaw was found in Traefik, an HTTP reverse proxy and load balancer. This vulnerability exists in the ACME TLS-ALPN fast path, where unauthenticated clients can exploit it. By initiating numerous connections and sending a minimal ClientHello with "acme-tls/1" before ceasing communication, a malicious client can indefinitely tie up system resources such as "go routines" (lightweight threads) and file descriptors. This leads to a Denial of Service (DoS) of the entry point, making the service unavailable to legitimate users.

Statement: This vulnerability is rated Moderate for Red Hat. In the Red Hat context, this flaw affects Traefik as deployed in Red Hat OpenShift Dev Spaces. An unauthenticated attacker can exploit the ACME TLS-ALPN fast path to exhaust system resources, leading to a denial of service of the entry point.

Affected upstream versions: < 2.11.35, >=3.0.0-beta1, < 3.6.7
Fixed upstream versions: v2.11.35
Upstream repository: https://github.com/traefik/traefik
Upstream fix commit: e9f3089e9045812bcf1b410a9d40568917b26c3d
CVE-2026-22610: angular: Angular: Cross-site scripting vulnerability in Template Compiler
Component: angular
Severity: Moderate
CWE: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
CVSS v3: 7.3 (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N)
Public date: 2026-01-10T03:35:40.727000+00:00

A flaw was found in Angular. An attacker could exploit a cross-site scripting (XSS) vulnerability in the Angular Template Compiler due to improper sanitization of `href` and `xlink:href` attributes within SVG `<script>` elements. This could allow an attacker to inject malicious scripts into web pages, leading to arbitrary code execution in the user's browser.

Statement: This vulnerability is rated Moderate for Red Hat products. A cross-site scripting (XSS) flaw in the Angular Template Compiler allows an attacker to inject malicious scripts into web pages. This affects several Red Hat products, including Red Hat Enterprise Application Platform, Red Hat JBoss Fuse, Red Hat OpenStack Platform, Red Hat Quay, Red Hat Advanced Cluster Management for Kubernetes, and Red Hat Single Sign-On. Certain components within Red Hat Enterprise Linux and Community Projects are either not affected or will not be fixed.

Affected upstream versions: >= 21.1.0-next.0, < 21.1.0-rc.0, >= 21.0.0-next.0, < 21.0.7, >= 20.0.0-next.0, < 20.3.16, < 19.2.18
Fixed upstream versions: zone.js-0.16.1
Upstream repository: https://github.com/angular/angular
Upstream fix commit: 91dc91bae4a1bbefc58bef6ef739d0e02ab44d56
CVE-2026-22693: harfbuzz: Null Pointer Dereference in harfbuzz
Component: harfbuzz
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Public date: 2026-01-10T05:53:21.019000+00:00

A null pointer dereference vector has been discovered in the harfbuzz package. A null pointer dereference vulnerability exists in the SubtableUnicodesCache::create function located in src/hb-ot-cmap-table.hh:1672-1673. The function fails to check if hb_malloc returns NULL before using placement new to construct an object at the returned pointer address. When hb_malloc fails to allocate memory (which can occur in low-memory conditions or when using custom allocators that simulate allocation failures), it returns NULL. The code then attempts to call the constructor on this null pointer using placement new syntax, resulting in undefined behavior and a Segmentation Fault.

Statement: This MODERATE severity null pointer dereference in the HarfBuzz library may cause a denial of service (segmentation fault) when memory allocation fails in hb_malloc.

The issue affects Red Hat products that include and link against HarfBuzz, such as OpenJDK builds with the java.desktop module and certain RHEL components like Firefox and Thunderbird.

The java-17-openjdk-headless and java-21-openjdk-headless packages do not include java.desktop and do not link against HarfBuzz; therefore, headless-only environments are not affected.

Affected upstream versions: < 12.3.0
Fixed upstream versions: 12.3.1
Upstream repository: https://github.com/harfbuzz/harfbuzz
Upstream fix commit: 1265ff8d990284f04d8768f35b0e20ae5f60daae
CVE-2026-22695: libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read
Component: libpng
Severity: Moderate
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.1 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H)
Public date: 2026-01-12T22:55:40.204000+00:00

A flaw was found in libpng, a reference library for processing PNG (Portable Network Graphics) image files. A local attacker could exploit a heap buffer over-read vulnerability in the `png_image_finish_read` function by tricking a user into processing a specially crafted interlaced 16-bit PNG file with an 8-bit output format and non-minimal row stride. This could lead to a denial of service (DoS) and potentially information disclosure.

Statement: This vulnerability is rated Moderate for Red Hat products. A heap buffer over-read flaw exists in the libpng library when processing specially crafted interlaced 16-bit PNG images with 8-bit output format and non-minimal row stride. This issue requires user interaction, as an attacker would need to trick a user into opening a malicious PNG file.

Affected upstream versions: < 1.6.54
Fixed upstream versions: v1.6.51
Upstream repository: https://github.com/pnggroup/libpng
Upstream fix commit: 218612ddd6b17944e21eda56caf8b4bf7779d1ea
CVE-2026-22772: fulcio: Fulcio: Server-Side Request Forgery (SSRF) via unanchored regex in MetaIssuer URL validation
Component: fulcio
Severity: Moderate
CWE: CWE-918 (Server-Side Request Forgery (SSRF))
CVSS v3: 5.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N)
Public date: 2026-01-12T20:58:53.659000+00:00

A flaw was found in Fulcio, a certificate authority for issuing code signing certificates. A remote attacker could exploit this by bypassing MetaIssuer URL validation due to unanchored regular expressions (regex) in the `metaRegex()` function. This vulnerability could lead to Server-Side Request Forgery (SSRF), allowing the attacker to probe internal network services. While the flaw only permits GET requests, preventing state changes or data exfiltration, it still poses a risk for internal network reconnaissance.

Statement: This vulnerability is rated Moderate for Red Hat products. A flaw in Fulcio's URL validation allows attackers to bypass security checks, leading to Server-Side Request Forgery (SSRF). This could enable internal network reconnaissance within affected Red Hat OpenShift and Ansible Automation Platform deployments, though it does not permit state changes or data exfiltration.

Affected upstream versions: < 1.8.5
Fixed upstream versions: v1.8.5
Upstream repository: https://github.com/sigstore/fulcio
Upstream fix commit: eaae2f2be56df9dea5f9b439ec81bedae4c0978d
CVE-2026-22774: devalue: devalue: Denial of Service due to excessive resource consumption from untrusted input
Component: devalue
Severity: Important
CWE: CWE-405 (Asymmetric Resource Consumption (Amplification))
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2026-01-15T18:53:21.963000+00:00

A flaw was found in devalue, a JavaScript library used for serializing values. A remote attacker can exploit this vulnerability by providing specially crafted input to the devalue.parse function. This can cause the application to consume excessive CPU time and memory, leading to a denial of service (DoS) condition. The root cause is an unchecked assumption during typed array hydration, where an ArrayBuffer is expected but not validated.

Statement: This vulnerability is rated Important for Red Hat products that utilize the `devalue` JavaScript library, such as pgAdmin 4, Red Hat Build of Podman Desktop, and Red Hat Trusted Artifact Signer. A remote attacker can exploit this flaw by providing specially crafted input to the `devalue.parse` function, leading to excessive CPU and memory consumption and a denial of service condition.

Affected upstream versions: >= 5.3.0, < 5.6.2
Fixed upstream versions: v5.6.2
Upstream repository: https://github.com/sveltejs/devalue
Upstream fix commit: 11755849fa0634ae294a15ec0aef2f43efcad7c4
CVE-2026-22775: devalue: devalue: Denial of Service due to improper input validation
Component: devalue
Severity: Important
CWE: CWE-405 (Asymmetric Resource Consumption (Amplification))
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2026-01-15T18:59:37.499000+00:00

A flaw was found in devalue, a JavaScript library used for serializing values. A remote attacker could exploit this vulnerability by providing specially crafted input to the `devalue.parse` function. This improper input validation, specifically during the ArrayBuffer hydration process, can cause the application to consume excessive CPU time and memory. This ultimately leads to a denial of service (DoS), making the affected system unavailable to legitimate users.

Statement: This vulnerability is rated Important for Red Hat. The `devalue` JavaScript library, when used by applications to parse untrusted external input, is susceptible to a denial of service. Specially crafted input to the `devalue.parse` function can lead to excessive CPU and memory consumption, rendering the affected system unavailable. Red Hat products such as Red Hat Build of Podman Desktop and Red Hat Trusted Artifact Signer are affected if they process untrusted data using the vulnerable `devalue.parse` function.

Affected upstream versions: >= 5.1.0, < 5.6.2
Fixed upstream versions: v5.6.2
Upstream repository: https://github.com/sveltejs/devalue
Upstream fix commit: 11755849fa0634ae294a15ec0aef2f43efcad7c4
CVE-2026-22795: openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing
Component: openssl
Severity: Low
CWE: CWE-843 (Access of Resource Using Incompatible Type ('Type Confusion'))
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2026-01-27T00:00:00+00:00

A flaw was found in OpenSSL. This type confusion vulnerability allows a remote attacker to cause a Denial of Service (DoS) by tricking a user or application into processing a maliciously crafted PKCS#12 (Personal Information Exchange Syntax Standard) file. The vulnerability leads to an invalid or NULL pointer dereference, resulting in an application crash.

Statement: This vulnerability is rated Low for Red Hat products. An application processing a maliciously crafted PKCS#12 file can be caused to dereference an invalid or NULL pointer, resulting in a Denial of Service. In the Red Hat context, impact is limited as PKCS#12 files are typically used for trusted private keys and are not commonly accepted from untrusted sources.

Affected upstream versions: 3.6.0 < 3.6.1, 3.5.0 < 3.5.5, 3.4.0 < 3.4.4, 3.3.0 < 3.3.6, 3.0.0 < 3.0.19, 1.1.1 < 1.1.1ze
Fixed upstream versions: 1.1.1ze, 3.0.19, 3.3.6, 3.4.4, 3.5.5, 3.6.1
Upstream repository: https://github.com/openssl/openssl
Upstream fix commit: ef2fb66ec571564d64d1c74a12e388a2a54d05d2