huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2025-9232: openssl: Out-of-bounds read in HTTP client no_proxy handling
Component: openssl
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 3.1 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L)
Public date: 2025-09-30T23:59:00+00:00

A flaw was found in the OpenSSL HTTP client API no_proxy handling. This vulnerability allows an application level denial of service (application crash) via an attacker-controlled IPv6 URL when the no_proxy environment variable is set.

Statement: This vulnerability was rated as Low severity because exploitation requires a very specific set of conditions: the application must pass an attacker-controlled IPv6 URL to the OpenSSL HTTP client functions, and the no_proxy environment variable must be set by the user. Even under these conditions, the issue can only lead to an out-of-bounds read resulting in a crash, causing an application level denial of service. There is no potential for information disclosure or remote code execution. Additionally, typical use cases of the OpenSSL HTTP client (e.g., in OCSP or CMP) do not involve attacker-controlled URLs, which further reduces the likelihood of exploitation.

Affected upstream versions: 3.5.0 < 3.5.4, 3.4.0 < 3.4.3, 3.3.3 < 3.3.5, 3.2.4 < 3.2.6, 3.0.16 < 3.0.18
Fixed upstream versions: 3.0.18, 3.2.6, 3.3.5, 3.4.3, 3.5.4
Upstream repository: https://github.com/openssl/openssl
Upstream fix commit: 2b4ec20e47959170422922eaff25346d362dcb35
CVE-2025-9566: podman: Podman kube play command may overwrite host files
Component: podman
Severity: Important
CWE: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'))
CVSS v3: 8.1 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Public date: 2025-09-04T00:00:00+00:00

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file.

Binary-Affected: podman
Upstream-version-introduced: v4.0.0
Upstream-version-fixed: v5.6.1

Statement: The Red Hat Product Security team has evaluated this vulnerability as having the Important severity. This happens because of the consequences of an successful attack and the low complexity (AC:L) on exploiting this vulnerability. Although the attacker cannot control the content written to the target file, depending on which file was targeted, the exploitation of this flaw may lead sensitive data corruption (I:H) and leading the system to crash resulting in a Denial of Service attack (A:H).

Affected upstream versions: 4.0.0 < 5.6.1
Fixed upstream versions: 0:1.31.12-3.rhaos4.18.gitdc59c78.el8, 0:1.32.8-3.rhaos4.19.git60d4e21.el9, 0:4.16.0-202509111927.p2.gf3d9123.assembly.stream.el8, 0:4.18.0-202509011551.p2.g018e43a.assembly.stream.el8, 0:4.18.0-202509090932.p2.ga4cad44.assembly.stream.el8, 0:4.18.0-372.164.1.el8_6, 0:4.18.0-372.164.1.rt7.325.el8_6, 0:4.19.0-202509070341.p2.gb5229e8.assembly.stream.el9, 0:5.14.0-284.138.1.el9_2, 0:5.14.0-284.138.1.rt14.423.el9_2, 0:5.14.0-427.87.1.el9_4, 2:4.2.0-6.el9_0.5, 2:4.4.1-22.el9_2.4, 3.24-1760921292, 3.24-1761160160, 3:4.2.0-15.rhaos4.12.el9, 3:4.4.1-23.rhaos4.14.el8, 3:4.4.1-35.rhaos4.15.el8, 4.19.9.6.202510140714-0, 4.20.9.6.202510220229-0
Upstream repository: https://github.com/containers/podman
Upstream fix commit: 43fbde4e665fe6cee6921868f04b7ccd3de5ad89
CVE-2025-9648: civetweb: Denial of Service in CivetWeb
Component: civetweb
Severity: Moderate
CWE: CWE-158 (Improper Neutralization of Null Byte or NUL Character)
CVSS v3: 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Public date: 2025-09-29T11:47:56.141000+00:00

A denial of service flaw has been discovered in CivetWeb. The mg_handle_form_request function allows attackers to trigger a denial of service (DoS) condition by sending a specially crafted HTTP POST request containing a null byte in the payload. The server enters an infinite loop during form data parsing as a result. Multiple malicious requests will result in complete CPU exhaustion and render the service unresponsive to further requests.

Statement: On Red Hat systems a denial of service in the CivetWeb application does not pose a broader availability risk to the host.

Affected upstream versions: 1.10 <= 1.16
Fixed upstream versions: 0
Upstream repository: https://github.com/civetweb/civetweb
Upstream fix commit: 782e18903515f43bafbf2e668994e82bdfa51133
CVE-2025-9714: libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c
Component: libxslt
Severity: Moderate
CWE: CWE-606 (Unchecked Input for Loop Condition)
CVSS v3: 6.2 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2025-09-02T00:00:00+00:00

A flaw was found in libxstl/libxml2. The 'exsltDynMapFunction' function in libexslt/dynamic.c does not contain a recursion depth check, which may cause an infinite loop via a specially crafted XSLT document while handling 'dyn:map()', leading to stack exhaustion and a local denial of service.

Statement: No evidence was found for arbitrary memory corruption through this flaw, limiting its impact to Availability only, and reducing its severity to Moderate.

Affected upstream versions: <= CVE-2021-3541
Fixed upstream versions: 2.10.0
Upstream repository: https://gitlab.gnome.org/GNOME/libxml2
Upstream fix commit: 677a42645ef22b5a50741bad5facf9d8a8bc6d21
CVE-2025-9820: gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function
Component: gnutls
Severity: Low
CWE: CWE-121 (Stack-based Buffer Overflow)
CVSS v3: 4 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Public date: 2025-11-18T00:00:00+00:00

A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.

Statement: The Red Hat Product Security team has assessed the severity of this vulnerability as Low, since exploitation requires local access or a malicious PKCS#11 token. While the impact is limited to denial of service or potential code execution in constrained scenarios, the vulnerability stems from a lack of proper bounds checking during token label handling in GnuTLS. Users should treat this as a security concern in environments where untrusted tokens may be introduced.

Affected upstream versions: <= 3.8.10
Fixed upstream versions: 0:3.6.16-8.el8_10.5, 0:3.8.10-3.el10_1, 0:3.8.3-10.el9_7, 1773668803, 1773670073, 1773670137, 1773672059, 1773685509, 1774002867, 1775668717, 1775675922, 3.8.12-1.1.hum1, 7.13.5-3.1777325680, 7.13.5-4.1777325677, 7.13.5-4.1777325680, 7.13.5-4.1777325708, 7.13.5-4.1777325709, 7.13.5-4.1777325710, 7.13.5-4.1777325711
Upstream repository: https://gitlab.com/gnutls/gnutls
Upstream fix commit: 1d56f96f6ab5034d677136b9d50b5a75dff0faf5
CVE-2026-0636: bouncycastle: BC-JAVA: LDAP injection vulnerability in LDAPStoreHelper.java
Component: bouncycastle
Severity: Important
CWE: CWE-90 (Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection'))
CVSS v3: 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Public date: 2026-04-15T08:59:12.677000+00:00

A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcprov. The `LDAPStoreHelper` implementation fails to properly neutralize special elements in user-supplied input before incorporating them into LDAP queries. This allows a remote attacker to execute an LDAP injection attack by supplying crafted input, potentially leading to disclosure of sensitive information or the manipulation of directory search queries.

Statement: To exploit this issue, an attacker needs to submit crafted input to an application using the `LDAPStoreHelper` implementation for directory queries. An attack typically requires the application to pass the malicious input directly into a search filter, allowing the attacker to modify the resulting LDAP query.
The primary impact of this vulnerability is the loss of confidentiality and integrity for directory data. This can allow an attacker to bypass search restrictions and manipulate directory results, potentially leading to unauthorized access or privilege escalation.

Affected upstream versions: 1.74 < 1.80.2, 1.81 < 1.81.1, 1.82 < 1.84
Fixed upstream versions: r1rv84
Upstream repository: https://github.com/bcgit/bc-java
Upstream fix commit: d20cdb8430e09224114fec0179a71859929fcbde
CVE-2026-0672: cpython: Header injection in http.cookies.Morsel in Python
Component: cpython
Severity: Moderate
CWE: CWE-93 (Improper Neutralization of CRLF Sequences ('CRLF Injection'))
CVSS v3: 4.8 (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N)
Public date: 2026-01-20T21:52:33.925000+00:00

An injection flaw has been discovered in Python. When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters.


Affected upstream versions: 3.11.0 < 3.11.15, 3.12.0 < 3.12.13, 3.13.0 < 3.13.12, 3.14.0 < 3.14.3, 3.15.0a1 < 3.15.0a6
Fixed upstream versions: v3.15.0b1
Upstream repository: https://github.com/python/cpython
Upstream fix commit: 95746b3a13a985787ef53b977129041971ed7f70
CVE-2026-0797: gimp: GIMP: Remote Code Execution via ICO File Parsing Vulnerability
Component: gimp
Severity: Important
CWE: CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'))
CVSS v3: 8.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Public date: 2026-02-20T22:10:04.716000+00:00

A flaw was found in GIMP. This vulnerability, a heap-based buffer overflow, occurs during the parsing of ICO files. A remote attacker can exploit this by convincing a user to open a malicious file or visit a malicious web page, leading to arbitrary code execution. The issue is due to a lack of proper validation of user-supplied data length before it is copied to a memory buffer.


Affected upstream versions: 3.2.0-RC1
Fixed upstream versions: GIMP_3_2_0
Upstream repository: https://gitlab.gnome.org/GNOME/gimp
Upstream fix commit: 69cc6b1a6645dc9c4d7b484483dbe6a84b922b9c
CVE-2026-0865: cpython: wsgiref.headers.Headers allows header newline injection in Python
Component: cpython
Severity: Moderate
CWE: CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'))
CVSS v3: 4.5 (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N)
Public date: 2026-01-20T21:26:15.274000+00:00

Missing newline filtering has been discovered in Python. User-controlled header names and values containing newlines can allow injecting HTTP headers.


Affected upstream versions: 3.11.0 < 3.11.15, 3.12.0 < 3.12.13, 3.13.0 < 3.13.12, 3.14.0 < 3.14.3, 3.15.0a1 < 3.15.0a6
Fixed upstream versions: v3.13.12
Upstream repository: https://github.com/python/cpython
Upstream fix commit: 22e4d55285cee52bc4dbe061324e5f30bd4dee58
CVE-2026-10143: kafka-python: kafka-python: Denial of Service via excessive SCRAM authentication iteration count
Component: kafka-python
Severity: Important
CWE: CWE-606 (Unchecked Input for Loop Condition)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2026-06-10T20:22:39.262000+00:00

A flaw was found in kafka-python. A malicious or machine-in-the-middle broker could exploit a denial-of-service vulnerability during SCRAM authentication. By providing an excessively large iteration count, the broker can cause the client's event loop to freeze. This prevents critical operations such as sending messages, polling for new messages, and maintaining heartbeats, ultimately leading to consumer group eviction and persistent connection failures.


Affected upstream versions: <= 2.3.0
Fixed upstream versions: 3.0.0
Upstream repository: https://github.com/dpkp/kafka-python
Upstream fix commit: 6e4831444f972d169cdd11f5c8d50333cea3f19b
CVE-2026-10879: perl-DBI: perl-DBI: Heap overflow in SQL preparsing can lead to denial of service or arbitrary code execution.
Component: perl-DBI
Severity: Important
CWE: CWE-131 (Incorrect Calculation of Buffer Size)
CVSS v3: 7.7 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
Public date: 2026-06-05T14:30:58.497000+00:00

A flaw was found in perl-DBI. A heap overflow vulnerability exists when preparsing SQL statements with more than 9 binders. The `preparse` method incorrectly allocates buffer space for SQL placeholder characters, leading to an overflow when processing binders with two or more digits. This can result in a denial of service or potentially arbitrary code execution.


Affected upstream versions: <= 1.647
Fixed upstream versions: 1.648
Upstream repository: https://github.com/perl5-dbi/dbi
Upstream fix commit: af79036c07aa9a457971c0f4136e37c85dc20978
CVE-2026-11816: keras: Keras: Arbitrary file write via path traversal in archive extraction utilities
Component: keras
Severity: Important
CWE: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'))
CVSS v3: 8.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N)
Public date: 2026-06-11T13:31:52.492000+00:00

A flaw was found in Keras. Attackers can exploit a path traversal vulnerability in the archive extraction utilities, specifically `filter_safe_tarinfos()` and `filter_safe_zipinfos()`. This occurs because the validation of archive member paths is performed against the process's current working directory (CWD) instead of the actual extraction destination. When the CWD is set to the filesystem root, this allows malicious paths to bypass security checks. Successful exploitation can lead to arbitrary file writes outside the intended directory, potentially enabling attackers to overwrite critical configuration files, inject malicious code, or corrupt machine learning data.

Statement: Exploitation requires processing a crafted archive (default CNA vector includes UI:R). For RHOAI, the highest-risk path is KServe storage-initializer auto-extraction of attacker-supplied model artifacts (Important), not unauthenticated network RCE.

Affected upstream versions: unspecified < 3.14.0
Fixed upstream versions: 3.14.0
Upstream repository: https://github.com/keras-team/keras
Upstream fix commit: 2465b6657b02c8eed308759b7e800e295ae01888
CVE-2026-11972: python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode
Component: python
Severity: Moderate
CWE: CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop'))
CVSS v3: 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2026-06-23T22:02:45.434000+00:00

A flaw was found in the Python `tarfile` module. When processing a specially crafted tar archive opened in 'streaming mode' (mode='r|'), the module does not properly handle the end-of-file (EOF) condition. This can cause the `tarfile` module to enter an infinite loop, leading to a Denial of Service (DoS) for applications processing such archives.

Statement: A flaw was found in the Python tarfile module. When processing a tar archive in streaming mode (mode='r|'), the _Stream.seek function does not properly check for end-of-file, which can cause an infinite loop when processing a specially crafted archive. Red Hat ships Python as part of many products, and applications using tarfile's streaming mode are potentially affected by this denial of service vulnerability.

Affected upstream versions: <= v3.13.14
Upstream repository: https://github.com/python/cpython
Upstream fix commit: 3f031d431f80668e14f3bc066bbf4369cd9281b9
CVE-2026-11979: libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow
Component: libxml2
Severity: Moderate
CWE: CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'))
CVSS v3: 4.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L)
Public date: 2026-06-29T13:21:42.697000+00:00

A flaw was found in libxml2, specifically within the xmlcatalog utility when operating in shell mode. An attacker can exploit multiple stack-based buffer overflows by providing an excessively long input line. This leads to memory corruption, which may cause the application to crash or potentially allow the attacker to execute arbitrary code within the context of the xmlcatalog process.


Affected upstream versions: <= CVE-2021-3541
Upstream repository: https://gitlab.gnome.org/GNOME/libxml2
Upstream fix commit: c2e233fc1b341685fc99621b2768b503f777a72e
CVE-2026-12087: perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read
Component: perl-Socket
Severity: Moderate
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Public date: 2026-06-15T21:11:09.876000+00:00

A flaw was found in the `perl-Socket` component. The `pack_ip_mreq_source()` function, which handles network socket operations, contains an out-of-bounds heap read vulnerability. An attacker providing a specially crafted input can cause the system to read beyond the intended memory buffer, potentially leading to information disclosure from adjacent memory regions.

Statement: A flaw was found in the Perl Socket module's pack_ip_mreq_source() function. An incorrect length validation may allow an out-of-bounds heap read, potentially exposing up to a few bytes of adjacent memory. Successful exploitation requires an application to call the affected function with attacker-controlled input, which limits the practical impact to information disclosure.

Affected upstream versions: <= v5.43.10
Fixed upstream versions: 2.041
Upstream repository: https://github.com/Perl/perl5
Upstream fix commit: de19a0b0ad1900fef976c5c1400bd8f11ec6c6cb
CVE-2026-12143: form-data: form-data: Form field override via CRLF injection
Component: form-data
Severity: Important
CWE: CWE-93 (Improper Neutralization of CRLF Sequences ('CRLF Injection'))
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Public date: 2026-06-12T18:01:30.362000+00:00

A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.

Statement: This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.

For RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.

Affected upstream versions: 3.0.0 < 3.0.5, 4.0.0 < 4.0.6
Fixed upstream versions: 2.5.6, 3.0.5, 4.0.6
Upstream repository: https://github.com/form-data/form-data
Upstream fix commit: 64190db548c0179e37206858e39f27cf513e9435
CVE-2026-12505: cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall
Component: cifs-utils
Severity: Important
CWE: CWE-250 (Execution with Unnecessary Privileges)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2026-06-16T00:00:00+00:00

A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low privileged attacker can exploit this by using a crafted request_key payload to trick the root-owned helper into entering a custom environment (namespace) containing a malicious NSS module. This forces the system to load the attacker's controlled NSS Module and configuration, allowing them to execute arbitrary commands as the root user, elevating their privileges and fully compromising the system.

Statement: This vulnerability affects the cifs.upcall helper in cifs-utils. Red Hat Product Security has assessed this issue as an Important severity vulnerability.

The flaw occurs because cifs.upcall performs user and group resolution operations after entering attacker-controlled namespaces but before fully dropping its elevated privileges. A local attacker may abuse this behavior to influence NSS module loading and execute arbitrary code with root privileges.

Successful exploitation requires local access to the system and several environmental conditions, including registration of the cifs.spnego key type, the presence of the cifs-utils request-key rule, and the ability to create unprivileged user namespaces. However, once these conditions are met, exploitation may allow a local user to obtain root privileges.

```

The issue has been fixed by upstream in cifs-utils v7.6

```

Fixed upstream versions: 0:7.0-5.el8_10, 0:7.6-1.el10_2, 0:7.6-2.el9_8, 4.22.9.8.202607220526-0
Upstream repository: https://git.samba.org/cifs-utils.git
Upstream fix commit: 972c5b5ff95e3e812bc8daa72d0383654ab0dba7
CVE-2026-1299: cpython: email header injection due to unquoted newlines
Component: cpython
Severity: Moderate
CWE: CWE-93 (Improper Neutralization of CRLF Sequences ('CRLF Injection'))
CVSS v3: 7.1 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N)
Public date: 2026-01-23T16:27:13.346000+00:00

A flaw was found in the email module in the Python standard library. When serializing an email message, the BytesGenerator class fails to properly quote newline characters for email headers. This issue is exploitable when the LiteralHeader class is used as it does not respect email folding rules, allowing an attacker to inject email headers and potentially modify message recipients or the email body, and spoof sender information.

Statement: This issue can only be exploitable by Python applications using the LiteralHeader class to write email headers, as it does not respect email folding rules. Additionally, this issue allows attackers to modify message recipients or the email body and spoof sender identity but it does not cause memory corruption or arbitrary code execution. Due to these reasons, this vulnerability has been rated with a moderate severity.

Affected upstream versions: 3.11.0 < 3.11.15, 3.12.0 < 3.12.13, 3.13.0 < 3.13.12, 3.14.0 < 3.14.3, 3.15.0a1 < 3.15.0a6
Fixed upstream versions: v3.15.0b1
Upstream repository: https://github.com/python/cpython
Upstream fix commit: 052e55e7d44718fe46cbba0ca995cb8fcc359413