pwned.coffeeUpdated 53 min ago

Today's specials: 13 live security incidents, brew temperature 319°C

21°100° boilingHELL

Everything is fine. I checked twice.Decaf. Everything is fine. Really.Quiet morning. Suspiciously quiet.

Brewed for everyone. Tell us your usual
Today's specials13
Critical10
Not fully patched4
Days since the last spill1Record calm: 8 days

297 spills in 12 months

Each square is a day. Tap one to see what spilled. Heat = critical 4, high 3, medium 2, low 1, update half.

Today's specials

7 of 13 specials. Clear

  1. criticalpatched Pillow: Argument Injection in Ghostscript call, potentially leading into RCE Pillow (pip) ### Summary `PIL.EpsImagePlugin.Ghostscript()` builds the Ghostscript command line using the input file path (`fp.name`) **without sanitization**, placing it at `-f <infile>`. A filename beginning with `-` is interpreted by Ghostscript as an option, giving command-line argument injection; chainable to RCE (see Impact). Reproduces with Pillow's default… fixed in Pillow 13.0.0CVE-2026-1129006 sources
  2. criticalpatched Next.js: Unauthenticated Remote Code Execution in `use cache` functions returning typed arrays next (npm) ## Impact A vulnerability in applications using App router with Cache Component can lead to remote code execution. The application needs to have a `use cache` function that returns multiple typed arrays. ## Workaround There is no known workaround for affected applications with such `use cache` functions. You should upgrade immediately even if your… fixed in next 16.4.1no CVE4 sources
  3. criticalpatched Pillow multi-frame loaders can reuse stale native image storage after mode transitions Pillow (pip) ### Summary Pillow multi-frame image loaders can retain native `ImagingCore` storage allocated for one frame while changing the Python-side image `mode` and decoder tiles for a later frame. If frame 0 allocates storage for a narrow mode such as `L`, and a later frame of the same dimensions switches to a wider mode such as `RGB` or `CMYK`, Pillow may… fixed in Pillow 13.0.0CVE-2026-966395 sources
  4. criticalpatched Sentry-Javascript: Middleware Bypass when using Tunnel route @sentry/nextjs (npm) ### Impact The `tunnelRoute` option makes the SDK send browser events to a path on your own Next.js server (for example `/monitoring`), where a rewrite forwards them to Sentry to prevent ad blockers from blocking them. To keep those envelope requests from being rejected by your middleware, the SDK skips middleware for them. The middleware skip was wider… fixed in @sentry/nextjs 9.47.2 +2CVE-2026-1141395 sources
  5. criticalpatched Next.js: Unauthenticated Remote Code Execution in Image Optimization API when SVG files are used next (npm) ## Impact A memory-related vulnerability has been discovered in an upstream library used for Image Optimization can lead to possible remote code execution (RCE) when Next.js runs on glibc-based Linux. ## Workaround Ensure the version of `sharp` used by Next.js is greater than or equal to `0.35.5`. Fresh installs automatically get a fixed version of… fixed in next 15.5.28 +1no CVE5 sources
  6. criticalpatched Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO Pillow (pip) ``` ============================================================================ Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO Location: src/libImaging/TiffDecode.c:94 in _tiffWriteProc() Commit: a707c6b21c313880d0771e54965d142dd42358b6 ============================================================================ ``` Pillow can write… fixed in Pillow 13.0.0CVE-2026-1123935 sources
  7. criticalpatched Pillow: Heap buffer overflow in ImagingJpegDecode Pillow (pip) ## Summary `JpegImageFile.draft()` — which `Image.thumbnail()` calls automatically — requests 1/2, 1/4 or 1/8 scaled JPEG output and shrinks `self._size` and the tile extents to match, so `_setimage()` allocates a single-row decode buffer of `ceil(W/s)` samples. `ImagingJpegDecode()` sets `cinfo.scale_num`/`scale_denom`, calls `jpeg_start_decompress()`,… fixed in Pillow 13.0.0CVE-2026-1124035 sources