Aagronholm

Products

Exploited and recent CVEs

• CVE-2026-63374 Critical 9.3 AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing 0.3%
• CVE-2026-64847 Medium 6.8 AnyIO process-pool workers can block indefinitely on undrained stderr 0.2%
• CVE-2026-63349 High 7.0 AnyIO run_process/open_process ignores extra_groups and can retain parent supplementary groups 0.1%
• CVE-2026-26209 High 7.5 cbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loads 0.4%
• CVE-2025-68131 Medium 5.5 CBORDecoder reuse can leak shareable values across decode calls 0.5%
• CVE-2024-26134 High 7.5 CBOR2 decoder has potential buffer overflow 1.2%