Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by constructing an XML document that would cause pathological hash collisions in Expat's internal data structures, consuming large amounts CPU and RAM. The vulnerability exists in Python versions 3.7.0, 3.6.0 through 3.6.6, 3.5.0 through 3.5.6, 3.4.0 through 3.4.9, 2.7.0 through 2.7.15.
Affected: PyPI: PraisonAI
### Summary Injection Defense is a purpose-built prompt injection defense layer. It scans LLM inputs through six detection categories: instruction overrides, authority claims, boundary manipulation, obfuscation, financial manipulation, and self-harm instructions.
The defense is misconfigured by default. The block threshold defaults to Threat Level. CRITICAL, which is only reached when 3 or more detection checks fire simultaneously. A si…
Withdrawn by the publisher.
Affected: PyPI: praisonai
### Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-fj8f-m44g-c479. This link is maintained to preserve external references.
### Original Description PraisonAI versions before 4.6.78 contain a prompt injection defense misconfiguration where the block threshold defaults to CRITICAL severity, allowing HIGH-level threats to pass through unblocked. Att…
Affected: npm: ghost
### Impact
An image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary commands being run on the Ghost server.
### Vulnerable versions
This vulnerability is present in Ghost from v6.56.0 up to v6.65.0.
### Patches
v6.67.0 contains a fix for this issue.
Affected: npm: ghost
### Impact
Embed cards in the Ghost editor could be used to bypass the fix for GHSA-8vhf-xxpj-4qrg. Any staff user, including Contributors, could store scripts in post content that ran when another staff user opened the post in the editor, possibly resulting in compromise of that user's admin session.
Self-hosted sites should leave the new `security.embedPreviewUrl` config option at its default.
### Vulnerable versions
…Affected: npm: ghost
### Impact
SVG images included in content imports were stored without sanitization. An attacker who convinced an Administrator to import a crafted file could host scripts on the site's domain, possibly resulting in compromise of staff users' admin sessions.
### Vulnerable versions
This vulnerability is present in Ghost from v4.0.0 up to v6.65.0.
### Patches
v6.67.0 contains a fix for this issue.
###…
Affected: npm: ghost
### Impact
A crafted request to the external media inliner could cause excessive CPU usage, making the Ghost server unresponsive. Exploiting this requires Administrator access.
### Vulnerable versions
This vulnerability is present in Ghost from v5.37.0 up to v6.65.0.
### Patches
v6.67.0 contains a fix for this issue.
### How to update
For self-hosters using Docker, find [Docker's official Ghost i…
Affected: npm: ghost
### Impact
A crafted content import file could cause excessive CPU usage, making the Ghost server unresponsive. Exploiting this requires Administrator access.
### Vulnerable versions
This vulnerability is present in Ghost from v4.0.0 up to v6.65.0.
### Patches
v6.67.0 contains a fix for this issue.
### How to update
For self-hosters using Docker, find [Docker's official Ghost image here](https://…
Affected: Maven: com.rabbitmq:amqp-client
## Summary
`com.rabbitmq.tools.json.JSONReader.read()` never returns when its input ends inside a quoted string or a `//` line comment. Both scanners walk the input with `StringCharacterIterator.next()` but only compare against a delimiter, so once the iterator reaches `CharacterIterator.DONE` (``) they loop forever. The string scanner (`string()`, line 210, `while (c != sep)`) also appends `` to a `StringBuilder` every …
Affected: PyPI: docling, PyPI: docling-slim
### Summary
`HTMLBackendOptions.headers` is documented for passing authentication headers (API keys, bearer tokens) when fetching remote images. docling sends these headers on every remote image request, to whichever host the document names. An untrusted document that references an attacker-controlled image URL receives the caller's credentials.
### Details
`docling/backend/utils/image_resource_loader…