https://vulnogram.org/ Most recent CVEs assigned by Seal Security (seal). https://vulnogram.org/seaview/icons/seal.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-77118 https://vulnogram.org/CVE-2026-77118 A heap out-of-bounds write exists in the Photo CD (PCD) decoder of GraphicsMagick. In DecodeImage() (coders/pcd.c), the Huffman delta loop advances its output pointer with q++ after every decoded delta and never checks it against the end of the heap-… High Thu, 20 Aug 2026 12:42:42 GMT https://vulnogram.org/CVE-2026-19693 https://vulnogram.org/CVE-2026-19693 extract-zip through 2.0.1 containment-checks only the parent directory of each archive entry and never the entry's own final path component, so an archive containing two entries with identical names - a symlink whose target is outside the destination… High Network Exploitable Unsupported When Assigned Mon, 17 Aug 2026 13:30:22 GMT https://vulnogram.org/CVE-2026-45819 https://vulnogram.org/CVE-2026-45819 baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service. Medium Network Exploitable Thu, 13 Aug 2026 11:03:42 GMT https://vulnogram.org/CVE-2026-14257 https://vulnogram.org/CVE-2026-14257 brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expand() function limits the number of results with a max option (default 100,000) but does not bound the length of each result string. By chaining multiple b… High Network Exploitable Thu, 23 Jul 2026 12:54:23 GMT https://vulnogram.org/CVE-2026-45820 https://vulnogram.org/CVE-2026-45820 fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync(). A crafted ZIP archive with a central directory entry declaring compressed_size=0xFFFFFFFF (ZIP64 sentinel) but missing the required ZIP64 extra field tag 0x0… Medium Network Exploitable Wed, 22 Jul 2026 06:57:13 GMT https://vulnogram.org/CVE-2026-13149 https://vulnogram.org/CVE-2026-13149 brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding '{}' brace groups. An attacker who passes a crafted string to expand(), directly o… High Network Exploitable Tue, 30 Jun 2026 08:30:34 GMT https://vulnogram.org/CVE-2026-45822 https://vulnogram.org/CVE-2026-45822 decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode() function splits input on '%' producing N tokens and calls decodeComponents(), exhibiting super-linear parsing time: 200 '%ab' tokens takes approximately 0.7s, 700 tok… Medium Network Exploitable Tue, 30 Jun 2026 08:05:36 GMT https://vulnogram.org/CVE-2024-12905 https://vulnogram.org/CVE-2024-12905 An Improper Link Resolution Before File Access ("Link Following") and Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal"). This vulnerability occurs when extracting a maliciously crafted tar file, which can result in unauth… High Network Exploitable Thu, 27 Mar 2025 16:25:34 GMT