CVE Vulnerabilities - 27 March 2026

MapServer versions 4.2 to 8.6.1 are vulnerable to a crash when processing certain types of Styled Layer Descriptor (SLD) files. This can be exploited by attackers to take down a server. Update to vers...

A malicious PDF file can cause the pypdf library to get stuck in an infinite loop when trying to read it. This could lead to a freeze or crash of your application. Update to the latest version of pypd...

Open WebUI versions prior to 0.8.6 may leak the server's directory path, potentially exposing sensitive information. This is fixed in version 0.8.6, so update to the latest version to prevent disclosu...

Older versions of Open WebUI allow anyone with an account to read notes or files from other users. This means that if you're using an affected version, anyone who can log in can access sensitive infor...

A security weakness in the Exam Form Submission 1.0 software allows attackers to inject malicious code on websites, potentially harming users. This weakness can be exploited remotely by anyone with th...

An attacker can execute arbitrary code on the server without a password, potentially allowing them to gain control of the system. This could lead to data theft, disruption of services, or other malici...