https://vulnogram.org/ Most recent CVEs assigned by Bombadil Systems LLC (bombadilsystems). https://vulnogram.org/seaview/icons/bombadilsystems.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:08 GMT https://vulnogram.org/CVE-2026-14535 https://vulnogram.org/CVE-2026-14535 In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis pass unconditionally calls AnalysisContext.shorten_code(node) on every import node it inspects, regardless of whether the import is flagged as unsafe. This ca… High Network Exploitable Sat, 04 Jul 2026 13:31:14 GMT https://vulnogram.org/CVE-2026-14534 https://vulnogram.org/CVE-2026-14534 Trail of Bits fickling versions up to and including 0.1.10 do not include the Python standard library modules _posixsubprocess, site, and atexit in the UNSAFE_IMPORTS denylist (fickle.py). Because these modules are absent from the denylist, fickling'… High Network Exploitable Sat, 04 Jul 2026 13:25:55 GMT