Skip to content
OpenAdvisories

Package · Wolfi

py3.13-hf-xet

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.2
    CVE-2026-32829

    lz4_flex: Decompression can leak information from uninitialized memory or reused output buffer

    lz4_flex is a pure Rust implementation of LZ4 compression/decompression. In versions 0.11.5 and below, and 0.12.0, decompressing invalid LZ4 data can leak sensitive information from uninitialized memory or from previous decompression operations. The library f…

    PSeitz lz4_flex qdrant vector Debian Ubuntu Wolfi crates.io
  • High 8.7
    CVE-2026-31812

    Quinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsing

    Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial p…

    quinn-rs quinn zed wasmcloud Debian Ubuntu Wolfi crates.io