Labs

Short research notes on newly disclosed vulnerabilities: the problem, the payload, and the fix.

• highCVE-2026-55379

  CVE-2026-55379: Pillow BdfFontFile Decompression Bomb Protection Bypass

  A crafted BDF font file can make Pillow silently allocate gigabytes of memory, completely bypassing the decompression bomb limits that protect Image.open().

• highCVE-2026-61835

  CVE-2026-61835: Directus SSRF Protection Bypass via 0.0.0.0 in File Import

  Directus's file-import feature blocks localhost by IP address, but an attacker can use 0.0.0.0 (which the OS routes to localhost) to slip past the blocklist and read internal services as…

• highCVE-2026-62685

  CVE-2026-62685: File Browser Username Normalization Home Directory Collision

  When self-registration is open, two users with differently-spelled usernames can end up sharing the exact same home directory, letting an attacker read and overwrite another user's private files.

• highCVE-2026-13311

  CVE-2026-13311: shell-quote Quadratic Complexity DoS in parse()

  Passing a long space-separated string to shell-quote's parse() triggers O(n²) array copying that can freeze a Node.js server for minutes with a single small HTTP request.

• highCVE-2026-59725

  CVE-2026-59725: engine.io Polling Transport Connection Exhaustion (DoS)

  An unauthenticated attacker can exhaust all server-side HTTP connections in Socket.IO servers by repeatedly sending malformed binary POST requests to the Engine.IO polling endpoint, because the…

• highCVE-2026-59874

  CVE-2026-59874: node-tar Infinite Loop via Negative Base-256 Entry Size

  A crafted tar archive with a negative entry size can make node-tar's replace operation loop forever, letting an attacker freeze a worker process with a single malicious file.

• highCVE-2026-59731

  CVE-2026-59731: Astro Middleware Authorization Bypass via URL Decode Iteration Limit

  A specially over-encoded URL path lets an attacker slip past Astro middleware access checks and reach protected routes, because middleware and the router decode the path a different number of times…

• highCVE-2026-55380

  CVE-2026-55380: Pillow GdImageFile Decompression Bomb (DoS)

  Pillow's GD image reader accepts image dimensions of up to 65535x65535 without any size limit check, letting an attacker crash or stall a server with a 1,037-byte crafted file that triggers a ~4.3…

• highCVE-2026-59922

  CVE-2026-59922: mistune Quadratic Parsing DoS in Formatting Plugins

  Mistune's strikethrough, mark, and insert plugins parse repeated marker pairs (~~x~~, ==x==, ^^x^^) in O(N²) time, so a small crafted markdown string can peg the CPU for seconds and deny service to…

• criticalCVE-2026-61736

  CVE-2026-61736: lightrag-hku CORS Wildcard + Credentials Any-Origin Takeover

  LightRAG's API server pairs a wildcard CORS origin with credentials-allowed, letting any malicious website silently make authenticated requests on behalf of a logged-in user and steal or destroy all…

• criticalCVE-2026-61740

  CVE-2026-61740: LightRAG Authentication Bypass via Hardcoded JWT Secret and Guest Token Short-Circuit

  LightRAG servers configured with only an API key for protection can be fully bypassed by any anonymous attacker using a JWT minted offline with a hardcoded secret that ships in the source code, or…

• highCVE-2026-54560

  CVE-2026-54560: Cloudreve OAuth Access Token Scope Bypass

  Cloudreve issues OAuth access tokens without the client_id claim, so a token granted only a minimal scope like 'openid' silently passes all scope checks and can call privileged file, admin, and…