Advisoriesby IbisAll advisories
17,904 advisories for 286 projects, newest first
60 of 17,904 advisories
Issues with Amazon Braket SDKAWSCVE-2026-124034no fix yetRelative path traversal in the log export commands in AWS ParallelCluster CLIAWSCVE-2026-124033no fix yetIssues with Babelfish for Aurora PostgreSQLAWSCVE-2026-119923no fix yetIssue with Trusted Remote Execution Setup Guide - OS command injection in the example SSM...AWSCVE-2026-122193no fix yetAPT package manager that affects Ubuntu and Debian operating systemsAWSCVE-2026-109518no fix yetGluonTS arbitrary file write during archive extractionGluonTSCVE-2026-119083no fix yetImproper isolation of shared resources in aws-network-policy-agent in Amazon EKSAWSCVE-2026-122266no fix yetGuest Access to Firecracker Process Memory After a Failed Memory DiscardAWSCVE-2026-122192no fix yetAWS API MCP Server OAuth token audience validation bypassAWSCVE-2026-115413no fix yetRemote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection...Amazon Redshift JDBC DriverCVE-2026-119084no fix yetStored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup renderingAWSCVE-2026-121652no fix yetBabelfish for PostgreSQL Privilege EscalationAWSCVE-2026-119922no fix yetAuthorization bypass through a user-controlled key in the Amazon Q Business Lambda hook...AWSCVE-2026-105811no fix yetStored cross-site scripting in the HTML report generator of aidlc-traceability in AWS...AWSCVE-2026-120497no fix yetImproper limitation of a pathname to a restricted directory in the deployment status...AWSCVE-2026-116635no fix yetTemplate injection in the publishing component of Virtual Engineering WorkbenchAWSCVE-2026-119085no fix yetImproper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in...AWSCVE-2026-119301no fix yetLinux kernel IPv4 TCP use-after-free IssueAWSCVE-2026-98432no fix yetInsertion of sensitive information into a log file and process argument list in the...Amazon Kinesis Producer Library for JavaCVE-2026-119117no fix yetMissing type validation in xQueueSelectFromSet in FreeRTOS-KernelAWSCVE-2026-119086no fix yetIssues in AWS Nitro Enclaves SDK for CAWSCVE-2026-119116no fix yetIncorrect authorization in issuer resolution in AWS Private CA Connector for KubernetesAWSCVE-2026-119115no fix yet
mem0: information disclosuremem0CVE-2026-116575fixed in 2.0.18
ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rankONNXCVE-2026-115920fixed in 1.22.0ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIsONNXCVE-2026-115922fixed in 1.22.0ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required AttributeONNXCVE-2026-115921fixed in 1.22.0ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check)ONNXCVE-2026-115919fixed in 1.22.0
vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP servervLLMCVE-2026-115917fixed in 0.32.0vLLM: resource exhaustionvLLMCVE-2026-115913fixed in 0.32.0vLLM DeepSeek-OCR image processing vulnerable to denial of servicevLLMCVE-2026-115914fixed in 0.32.0vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCEvLLMCVE-2026-115915fixed in 0.32.0vLLM: unsafe deserializationvLLMCVE-2026-115912fixed in 0.32.0vLLM: improper array index validationvLLMCVE-2026-115916fixed in 0.32.0vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargsvLLMCVE-2026-115918fixed in 0.32.0vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread poolvLLMCVE-2026-115911fixed in 0.32.0
LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requestsLangGraphCVE-2026-118667fixed in 1.2.14Native Brotli Decoder Remote Code Execution and Memory DisclosureAWSCVE-2026-111497no fix yetSecret masking bypass in the environment tool in Strands Agents ToolsAWSCVE-2026-115415no fix yetUnverified ownership of the default Athena query result location in AWS SDK for pandasAWSCVE-2026-118029no fix yet
MLflow vulnerable to arbitrary file read on unauthenticated servers via prompt model version sourceMLflowCVE-2026-116690fixed in 3.17.0MLflow CrewAI autologging records LLM provider API keys in logged trace spansMLflowCVE-2026-116691fixed in 3.17.0MLflow: unsafe deserializationMLflowCVE-2026-116692fixed in 3.17.0
MCP SDKs: improper authorizationMCP SDKsCVE-2026-116684fixed in 1.30.0 +1MCP SDKs: information disclosureMCP SDKsCVE-2026-116685fixed in 1.30.0 +1MCP SDKs: server-side request forgeryMCP SDKsCVE-2026-116686fixed in 1.30.0 +1MCP SDKs: resource exhaustionMCP SDKsGHSA-f897-62hf-6gxqfixed in 1.30.1vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code executionvLLMCVE-2026-114053fixed in 0.31.0
LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`LiteLLMGHSA-g5ff-637f-6q2mfixed in 1.95.0LiteLLM vulnerable to reflected XSS in /sso/debug/callbackLiteLLMGHSA-hhww-mrg2-969hfixed in 1.85.0LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt KeyLiteLLMCVE-2026-114612fixed in 1.100.4 +4
NLTK: path traversalNLTKCVE-2026-109956fixed in 3.10.4vllm p2p never connected zmq_exhaustionvLLMCVE-2026-94624fixed in 0.32.0
Agno: Arbitrary code execution via `eval()` on `field_type` in `FunctionCall`agnoCVE-2026-35002fixed in 2.3.24