Recent Advisories

Severity ID Title Vendor Product Date Type
LOW 2 CVE-2026-10800

PaddlePaddle FastDeploy MultimodalHasher hasher.py hash_features weak hash_CVE-2026-10800

A weakness has been identified in PaddlePaddle FastDeploy up to 2.4.1. Affected by this issue is the function hash_features of the file fastdeploy/...

PaddlePaddle FastDeploy 2.4.0 CVE
LOW 2 CVE-2026-10783

gradio-app gradio Audio Cache Key save_audio_to_cache weak hash_CVE-2026-10783

A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Han...

gradio-app gradio 6.14.0 CVE
LOW 2 CVE-2026-10775

sgl-project SGLang Cache data_hash denial of service_CVE-2026-10775

A vulnerability was determined in sgl-project SGLang up to 0.5.11. Affected by this vulnerability is the function data_hash of the component Cache ...

sgl-project SGLang 0.5.0 CVE
LOW 2 CVE-2026-10766

mlrun DataFrame Hash helpers.py mlrun.utils.helpers.calculate_dataframe_hash weak hash_CVE-2026-10766

A vulnerability has been found in mlrun up to 1.12.0-rc3. This impacts the function mlrun.utils.helpers.calculate_dataframe_hash of the file mlrun/...

n/a mlrun 1.12.0-rc1 CVE
LOW 3.1 CVE-2026-8404

Potential exposure of private data via case-sensitive Cache-Control directives in UpdateCacheMiddleware_CVE-2026-8404

An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. `django.middleware.cache.UpdateCacheMiddleware` in Django does not match ...

djangoproject Django 6.0 CVE
LOW 3.1 CVE-2026-7666

Potential unencrypted email transmission via STARTTLS in the SMTP backend_CVE-2026-7666

An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15. `django.core.mail.backends.smtp.EmailBackend` in Django fails to prevent ...

djangoproject Django 6.0 CVE
LOW 3.1 CVE-2026-6873

Signed cookie salt namespace collision in django.http.HttpRequest.get_signed_cookie_CVE-2026-6873

An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15. `django.http.HttpRequest.get_signed_cookie` in Django uses a non-injectiv...

djangoproject Django 6.0 CVE
LOW 3.1 CVE-2026-48587

Potential exposure of private data via whitespace padding in Vary header_CVE-2026-48587

An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. `django.utils.cache.has_vary_header()` in Django does not strip leading o...

djangoproject Django 6.0 CVE
LOW 3.7 CVE-2026-44546

Header injection via WebSocket upgrade parser differential allows ASGI scope header spoofing_CVE-2026-44546

daphne before 4.2.2 reconstructs a raw HTTP request from Twisted's parsed headers and feeds it to autobahn for WebSocket handshake processing. Twis...

djangoproject daphne 4.2.0 CVE
LOW 3.1 CVE-2026-35193

Potential exposure of private data via missing Vary: Authorization in UpdateCacheMiddleware_CVE-2026-35193

An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. `django.middleware.cache.UpdateCacheMiddleware` in Django does not add `A...

djangoproject Django 6.0 CVE