huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2026-31938: jspdf: jsPDF: Cross site scripting via unsanitized output options
Component: jspdf
Severity: Important
CWE: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
CVSS v3: 8.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N)
Public date: 2026-03-18T03:05:44.964000+00:00

A flaw was found in jsPDF, a JavaScript library for generating PDFs. A remote attacker can exploit this vulnerability by providing malicious input to the `options` argument of the `output` function. When a victim creates and opens a PDF using this unsanitized input, arbitrary HTML, including scripts, can be injected and executed within the victim's browser context. This Cross-Site Scripting (XSS) vulnerability allows the attacker to extract or modify sensitive information from the victim's browser.


Affected upstream versions: < 4.2.1
Fixed upstream versions: v4.2.1
Upstream repository: https://github.com/parallax/jsPDF
Upstream fix commit: 87a40bbd07e6b30575196370670b41f264aa78d7
CVE-2026-31988: yauzl: yauzl: Denial of Service vulnerability in zip file processing
Component: yauzl
Severity: Moderate
CWE: CWE-193 (Off-by-one Error)
CVSS v3: 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Public date: 2026-03-11T22:58:48.863000+00:00

A flaw was found in yauzl (Yet Another Unzip Library), a component used in Node.js applications for handling zip files. A remote attacker can exploit an error in how the library processes specific timestamp information within a crafted zip file. This can lead to a denial of service (DoS), causing affected applications to crash and become unavailable.

Statement: Moderate: This flaw in yauzl can lead to a denial of service in Node.js applications that process zip file uploads and specifically call `entry.getLastModDate()` on parsed entries. Red Hat products that utilize the affected `yauzl` library in this manner are susceptible to a process crash when handling a specially crafted zip file containing a malformed NTFS extra field.

Affected upstream versions: 3.2.0 < 3.2.1
Fixed upstream versions: 3.2.1
Upstream repository: https://github.com/thejoshwolfe/yauzl
Upstream fix commit: c4695215b05c6adffda613b9051a2a85429b33fe
CVE-2026-32141: flatted: flatted: Unbounded recursion DoS in parse() revive phase
Component: flatted
Severity: Important
CWE: CWE-770 (Allocation of Resources Without Limits or Throttling)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2026-03-12T18:08:09.634000+00:00

A denial of service flaw has been discovered in the flatted npm library. flatted's parse() function uses a recursive revive() phase to resolve circular references in deserialized JSON. When given a crafted payload with deeply nested or self-referential $ indices, the recursion depth is unbounded, causing a stack overflow that crashes the Node.js process.


Affected upstream versions: < 3.4.0
Fixed upstream versions: v3.4.0
Upstream repository: https://github.com/WebReflection/flatted
Upstream fix commit: 7eb65d857e1a40de11c47461cdbc8541449f0606
CVE-2026-32274: black: Black: Arbitrary file writes from unsanitized user input in cache file name
Component: black
Severity: Important
CWE: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'))
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Public date: 2026-03-12T19:47:07.464000+00:00

A user input sanitization flaw has been discovered in the Black python code formatter. Black writes a cache file, the name of which is computed from various formatting options. The value of the --python-cell-magics option was placed in the filename without sanitization, which allowed an attacker who controls the value of this argument to write cache files to arbitrary file system locations.


Affected upstream versions: < 26.3.1
Fixed upstream versions: 26.3.1
Upstream repository: https://github.com/psf/black
Upstream fix commit: 4937fe6cf241139ddbfc16b0bdbb5b422798909d
CVE-2026-32287: github.com/antchfx/xpath: github.com/antchfx/xpath: Denial of Service due to infinite loop via boolean XPath expressions
Component: github.com/antchfx/xpath
Severity: Moderate
CWE: CWE-606 (Unchecked Input for Loop Condition)
CVSS v3: 6.2 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2026-03-26T19:40:52.142000+00:00

A flaw was found in github.com/antchfx/xpath. An attacker could exploit this vulnerability by providing specially crafted boolean XPath expressions that evaluate to true. This can cause an infinite loop within the logicalQuery.Select function, leading to 100% CPU utilization. The consequence is a Denial of Service (DoS) condition, making the affected system unresponsive.


Affected upstream versions: <= v1.3.5
Fixed upstream versions: 1.3.6
Upstream repository: https://github.com/antchfx/xpath
Upstream fix commit: afd4762cc342af56345a3fb4002a59281fcab494
CVE-2026-32316: jq: jq: Denial of Service or potential arbitrary code execution due to integer overflow and heap-based buffer overflow
Component: jq
Severity: Moderate
CWE: CWE-190 (Integer Overflow or Wraparound)
CVSS v3: 6.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H)
Public date: 2026-04-13T17:49:34.095000+00:00

A flaw was found in jq, a command-line JSON processor. An attacker can exploit an integer overflow vulnerability by crafting queries that produce extremely large strings. This causes a 32-bit unsigned integer overflow in the buffer allocation size calculation, leading to a drastically undersized memory buffer. Subsequent memory copy operations then write the full string data into this undersized buffer, causing a heap-based buffer overflow. This can result in a Denial of Service (DoS) by crashing the process or potentially allow for further exploitation through heap corruption.

Statement: This Moderate impact vulnerability in `jq`, a command-line JSON processor, allows for a Denial of Service or potential arbitrary code execution. The flaw occurs when `jq` processes untrusted queries that generate excessively large strings, leading to an integer overflow and heap-based buffer overflow. Red Hat products that utilize `jq` for processing JSON data are affected if they handle untrusted `jq` queries.

Affected upstream versions: < e47e56d226519635768e6aab2f38f0ab037c09e5
Fixed upstream versions: jq-1.8.2
Upstream repository: https://github.com/jqlang/jq
Upstream fix commit: e47e56d226519635768e6aab2f38f0ab037c09e5
CVE-2026-32748: Squid: Squid: Denial of Service via crafted ICP traffic
Component: Squid
Severity: Important
CWE: CWE-826 (Premature Release of Resource During Expected Lifetime)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2026-03-26T00:11:01.424000+00:00

A flaw was found in Squid. A remote attacker can exploit this vulnerability by sending specially crafted ICP (Internet Cache Protocol) traffic. This can lead to a Denial of Service (DoS) due to premature resource release and use-after-free vulnerabilities. This attack is possible in Squid deployments with explicitly enabled ICP support.

Statement: This Important flaw in Squid can lead to a Denial of Service when processing specially crafted Internet Cache Protocol (ICP) traffic. This vulnerability affects Red Hat products running Squid if ICP support is explicitly enabled by configuring a non-zero `icp_port`. Deployments where ICP is not enabled by default are not affected.

Affected upstream versions: < 7.5
Fixed upstream versions: SQUID_7_5
Upstream repository: https://github.com/squid-cache/squid
Upstream fix commit: 703e07d25ca6fa11f52d20bf0bb879e22ab7481b
CVE-2026-32829: lz4_flex: lz4_flex's decompression can leak information from uninitialized memory or reused output buffer
Component: lz4_flex
Severity: Important
CWE: CWE-823 (Use of Out-of-range Pointer Offset)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Public date: 2026-03-16T20:48:08+00:00

lz4_flex is a pure Rust implementation of LZ4 compression/decompression. In versions 0.11.5 and below, and 0.12.0,  decompressing invalid LZ4 data can leak sensitive information from uninitialized memory or from previous decompression operations. The library fails to properly validate offset values during LZ4 "match copy operations," allowing out-of-bounds reads from the output buffer. The block-based API functions (`decompress_into`, `decompress_into_with_dict`, and others when `safe-decode` is disabled) are affected, while all frame APIs are unaffected. The impact is potential exposure of sensitive data and secrets through crafted or malformed LZ4 input. This issue has been fixed in versions 0.11.6 and 0.12.1.

Statement: In RHEL 9 and RHEL 10, this vulnerability presents minimal risk as the rust-analyzer component operates in a "closed loop," strictly decompressing its own internal database. Because it does not process external or untrusted data, exploitation requires an attacker to already possess local access and sufficient privileges to tamper with the internal cache files on disk.

Affected upstream versions: < 0.11.6, >= 0.12.0, < 0.12.1
Fixed upstream versions: 0.13.0
Upstream repository: https://github.com/PSeitz/lz4_flex
Upstream fix commit: 055502ee5d297ecd6bf448ac91c055c7f6df9b6d
CVE-2026-32871: fastmcp: FastMCP: Authenticated Server-Side Request Forgery via path traversal in OpenAPI path parameters
Component: fastmcp
Severity: Important
CWE: CWE-918 (Server-Side Request Forgery (SSRF))
CVSS v3: 8.5 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)
Public date: 2026-04-02T14:52:39.978000+00:00

A flaw was found in FastMCP. An authenticated attacker can exploit a path traversal vulnerability in the _build_url() method of the RequestDirector class. By manipulating path parameters in an OpenAPI operation, an attacker can use directory traversal sequences (../) to bypass the intended API prefix. This allows the attacker to access arbitrary backend endpoints, leading to authenticated Server-Side Request Forgery (SSRF). Server-Side Request Forgery (SSRF) enables an attacker to compel the server-side application to send HTTP requests to an arbitrary domain.

Statement: This is an Important severity flaw affecting FastMCP, which is utilized in Red Hat OpenShift AI, Red Hat Satellite, Hosted OpenShift Clusters, and Ansible Services. An authenticated attacker can exploit a path traversal vulnerability in FastMCP's OpenAPI path parameter handling to achieve Server-Side Request Forgery (SSRF), allowing access to arbitrary backend endpoints. As a result of a successful exploitation of this vulnerability the attacker  may be able to access private endpoints, exfiltrate data, achieving privilege escalation or by-pass security controls within the affected component.

Affected upstream versions: < 3.2.0
Fixed upstream versions: v3.2.0
Upstream repository: https://github.com/PrefectHQ/fastmcp
Upstream fix commit: 40bdfb6b1de0ce30609ee9ba5bb95ecd04a9fb71
CVE-2026-33022: github.com/tektoncd/pipeline: Tekton Pipelines: Denial of Service via long resolver names
Component: github.com/tektoncd/pipeline
Severity: Moderate
CWE: CWE-130 (Improper Handling of Length Parameter Inconsistency)
CVSS v3: 6.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2026-03-20T07:48:15.383000+00:00

A denial of service flaw was found in Tekton Pipelines. Any user who can create a TaskRun or PipelineRun to crash the controller cluster-wide by setting .spec.taskRef.resolver (or .spec.pipelineRef.resolver) to a string of 31+ characters. The crash occurs because GenerateDeterministicNameFromSpec produces a name exceeding the 63-character DNS-1123 label limit, and its truncation logic panics on a [-1] slice bound since the generated name contains no spaces. Once crashed, the controller enters a CrashLoopBackOff on restart (as it re-reconciles the offending resource), blocking all CI/CD reconciliation until the resource is manually deleted. Built-in resolvers (git, cluster, bundles, hub) are unaffected due to their short names, but any custom resolver name triggers the bug. The fix truncates the resolver-name prefix instead of the full string, preserving the hash suffix for determinism and uniqueness.


Affected upstream versions: >= 0.60.0, < 1.0.1, >= 1.1.0, < 1.3.3, >= 1.4.0, < 1.6.1, >= 1.7.0, < 1.9.2, >= 1.10.0, < 1.10.2
Fixed upstream versions: v1.11.0
Upstream repository: https://github.com/tektoncd/pipeline
Upstream fix commit: 5eead3f859b9f938e86039e4d29185092c1d4ee6
CVE-2026-33036: fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass
Component: fast-xml-parser
Severity: Moderate
CWE: CWE-776 (Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion'))
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2026-03-20T05:17:03.290000+00:00

A flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by supplying specially crafted XML input containing numeric character references or standard XML entities. This input can bypass configured entity expansion limits, leading to excessive memory allocation and high CPU usage. The primary consequence is a Denial of Service (DoS), which can crash the affected process.


Affected upstream versions: >= 4.0.0-beta.3, < 5.5.6
Fixed upstream versions: v5.5.6
Upstream repository: https://github.com/NaturalIntelligence/fast-xml-parser
Upstream fix commit: bd26122c838e6a55e7d7ac49b4ccc01a49999a01
CVE-2026-3304: multer: Multer: Denial of Service via malformed requests
Component: multer
Severity: Important
CWE: CWE-459 (Incomplete Cleanup)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2026-02-27T15:44:37.187000+00:00

A flaw was found in Multer, a Node.js middleware. A remote attacker could exploit this vulnerability by sending specially crafted malformed requests. This could lead to resource exhaustion, resulting in a Denial of Service (DoS) for the application using Multer.


Affected upstream versions: 0.0.0 < 2.1.0
Fixed upstream versions: 2.1.0
Upstream repository: https://github.com/expressjs/multer
Upstream fix commit: 739919097dde3921ec31b930e4b9025036fa74ee
CVE-2026-33154: dynaconf: jinja2: Dynaconf: Arbitrary code execution via Server-Side Template Injection
Component: dynaconf
Severity: Moderate
CWE: CWE-917 (Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection'))
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2026-03-20T20:22:59.090000+00:00

A flaw was found in dynaconf, a Python configuration management tool. This Server-Side Template Injection (SSTI) vulnerability occurs due to unsafe template evaluation in the @Jinja resolver when the jinja2 package is installed. A remote attacker could exploit this by embedding malicious template expressions in configuration values, which are then processed without a sandboxed environment. This could lead to arbitrary code execution on the affected system.


Affected upstream versions: < 3.2.13
Fixed upstream versions: 3.2.13
Upstream repository: https://github.com/dynaconf/dynaconf
Upstream fix commit: 2fbb45ee36b8c0caa5b924fe19f3c1a5e8603fa7
CVE-2026-33176: Rails: Active Support: Active Support: Denial of Service via large scientific notation strings
Component: Rails
Severity: Moderate
CWE: CWE-770 (Allocation of Resources Without Limits or Throttling)
CVSS v3: 6.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2026-03-23T23:29:27.933000+00:00

A flaw was found in Active Support, a toolkit of support libraries for Ruby on Rails. A remote attacker can exploit this vulnerability by providing specially crafted strings containing scientific notation (e.g., "1e10000") to number helpers. This input causes the `BigDecimal` component to expand into extremely large decimal representations, consuming excessive memory and CPU resources. This can lead to a Denial of Service (DoS) vulnerability, making the affected system unavailable.

Statement: This flaw is rated as Moderate by Red Hat. Successful exploitation of this vulnerability requires an attacker to reach the vulnerable code path within the Active Support library as used by the hosting application. Because this functionality is not typically exposed directly to unauthenticated users, an attacker would generally need at least low-privileged (authenticated) access to the application to trigger the issue.

Affected upstream versions: >= 8.1.0.beta1, < 8.1.2.1, >= 8.0.0.beta1, < 8.0.4.1, < 7.2.3.1
Fixed upstream versions: v8.1.2.1
Upstream repository: https://github.com/rails/rails
Upstream fix commit: 19dbab51ca086a657bb86458042bc44314916bcb
CVE-2026-33211: Tekton Pipelines: github.com/tektoncd/pipeline: Tekton Pipelines: Information disclosure via path traversal in git resolver
Component: Tekton Pipelines
Severity: Important
CWE: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'))
CVSS v3: 9.6 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N)
Public date: 2026-03-23T23:55:54.089000+00:00

A flaw was found in Tekton Pipelines, specifically in the Tekton Pipelines git resolver. A tenant with permissions to create ResolutionRequests can exploit a path traversal vulnerability via the `pathInRepo` parameter. This allows the tenant to read arbitrary files from the resolver pod's filesystem, leading to information disclosure, including sensitive ServiceAccount tokens. The contents of these files are returned in a base64-encoded format.

Statement: To exploit this flaw, an attacker needs to have the permission to create ResolutionRequests (e.g., by creating TaskRuns or PipelineRuns that use the git resolver) within at least one specific namespace, limiting the exposure of this issue to authenticated users. Also, an attacker can read any file readable by the resolver pod process, including cluster secrets, allowing an escalation of privileges from namespace-scoped access to cluster-wide access. Due to these reasons, this vulnerability has been rated with an important severity.

Affected upstream versions: >= 1.0.0, < 1.0.1, >= 1.1.0, < 1.3.3, >= 1.4.0, < 1.6.1, >= 1.7.0, < 1.9.2, >= 1.10.0, < 1.10.2
Fixed upstream versions: v1.3.3
Upstream repository: https://github.com/tektoncd/pipeline
Upstream fix commit: 10fa538f9a2b6d01c75138f1ed7ba3da0e34687c
CVE-2026-33216: nats-server: github.com/nats-io/nats-server: NATS-Server: Information disclosure of MQTT passwords through monitoring endpoints
Component: nats-server
Severity: Important
CWE: CWE-213 (Exposure of Sensitive Information Due to Incompatible Policies)
CVSS v3: 8.6 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)
Public date: 2026-03-25T19:41:55.670000+00:00

A flaw was found in NATS-Server, a high-performance server for the NATS.io messaging system. For MQTT deployments utilizing usercodes and passwords, the MQTT passwords were mistakenly categorized as non-authenticating identity statements (JSON Web Tokens - JWT). This misclassification leads to the exposure of these passwords through monitoring endpoints, enabling an attacker with access to these endpoints to gain sensitive information.


Affected upstream versions: < 2.11.15, >= 2.12.0-RC.1, < 2.12.6
Fixed upstream versions: v2.12.6
Upstream repository: https://github.com/nats-io/nats-server
Upstream fix commit: b5b63cfc35a57075e09c1f57503d31721bed8099
CVE-2026-33228: flatted: Flatted: Prototype pollution vulnerability allows arbitrary code execution via crafted JSON.
Component: flatted
Severity: Critical
CWE: CWE-915 (Improperly Controlled Modification of Dynamically-Determined Object Attributes)
CVSS v3: 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Public date: 2026-03-20T23:06:48.485000+00:00

A flaw was found in flatted, a JavaScript Object Notation (JSON) parser designed for handling circular data structures. A remote attacker can exploit this vulnerability by providing specially crafted JSON input. The parse() function in flatted fails to properly validate string values used as array index keys, allowing an attacker to manipulate internal JavaScript object prototypes. This prototype pollution can enable an attacker to execute arbitrary code or cause a denial of service, impacting the availability and integrity of affected systems.

Statement: A Critical vulnerability was discovered in 'flatted', a JavaScript JSON parser. It could enable a remote, unauthenticated attacker to execute arbitrary code or cause a denial of service. Exploitation involves prototype pollution by providing a specially crafted JSON input. Red Hat products that process un-trusted JSON data and utilize the 'flatted' library are at risk if they do not properly sanitize input.

Affected upstream versions: < 3.4.2
Fixed upstream versions: v3.4.2
Upstream repository: https://github.com/WebReflection/flatted
Upstream fix commit: 885ddcc33cf9657caf38c57c7be45ae1c5272802
CVE-2026-33231: nltk: NLTK: Denial of Service via unauthenticated remote shutdown
Component: nltk
Severity: Important
CWE: CWE-306 (Missing Authentication for Critical Function)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2026-03-20T22:45:40.784000+00:00

A flaw was found in NLTK (Natural Language Toolkit), specifically in the `nltk.app.wordnet_app` component. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted GET request to the local WordNet Browser HTTP server when it is running in its default configuration. This action causes the server process to terminate immediately, leading to a denial of service.

Statement: IMPORTANT: This flaw allows an unauthenticated remote attacker to cause a denial of service in Red Hat products utilizing the NLTK WordNet Browser HTTP server. The vulnerability is exploitable when the server is running in its default configuration, allowing a specially crafted GET request to terminate the process.

Affected upstream versions: <= 3.9.3
Fixed upstream versions: 3.9.4
Upstream repository: https://github.com/nltk/nltk
Upstream fix commit: bbaae83db86a0f49e00f5b0db44a7254c268de9b
CVE-2026-33236: nltk: NLTK: Arbitrary file overwrite and creation via path traversal in XML index files
Component: nltk
Severity: Important
CWE: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'))
CVSS v3: 8.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H)
Public date: 2026-03-20T22:47:10.308000+00:00

A flaw was found in NLTK (Natural Language Toolkit), a suite of open-source Python modules for Natural Language Processing. The NLTK downloader does not validate `subdir` and `id` attributes when processing remote XML index files. A remote attacker can exploit this path traversal vulnerability by controlling a malicious XML index server, providing specially crafted values. This can lead to arbitrary directory creation, arbitrary file creation, and arbitrary file overwrite on the system where NLTK is used.

Statement: IMPORTANT: This flaw in NLTK allows for arbitrary file and directory creation or overwrite due to a path traversal vulnerability in its downloader. An attacker controlling a malicious XML index server could exploit this by providing specially crafted `subdir` and `id` attributes. Red Hat products utilizing NLTK, such as components within Red Hat Ansible Automation Platform, Lightspeed Core, OpenShift Lightspeed, and Red Hat OpenShift AI, are affected if configured to use untrusted remote XML index servers.

Affected upstream versions: <= 3.9.3
Fixed upstream versions: 3.9.4
Upstream repository: https://github.com/nltk/nltk
Upstream fix commit: 89fe2ec2c6bae6e2e7a46dad65cc34231976ed8a