Issues found
858
Potential bugs reported
Last updated · Jul 20, 2026
The State of
Patch the Planet
Bugs found, patches shipped, and fixes merged at the speed of AI across all the open-source projects in the initiative.
Awaiting patch
595
reported + confirmed
Patches open
120
fix open upstream
Patches accepted
143
merged upstream
Projects
41
codebases under review
Issues over time
Per day
Cumulative
Peak: 224 on Jun 2
Report pipeline
- Issues found 858
- Awaiting patch 595
- Patches open 120
- Patches accepted 143
Most reported projects
Accepted
Open
Awaiting patch
- crypto-bigint 117
- keycloak 91
- ansible 73
- nats-server 65
- gem.coop 54
- securedrop-client 39
- containerd 29
- kubernetes-client 29
- openssl 26
- crypto 24
Top 10 of 41 projects
Patch activity
Patch the Planet
PTP begins
Booked
Mon Wed Fri
Accepted fixes by severity
143 total high 10 7.0% medium 38 26.6% low 38 26.6% info 28 19.6% undetermined 29 20.3%
CVEs disclosed
13 assigned- CVE-2026-42530 high · nginx
- CVE-2026-9080 medium · curl
- CVE-2026-54277 medium · aiohttp
- CVE-2026-54274 medium · aiohttp
- CVE-2026-54278 medium · aiohttp
- CVE-2026-34986 medium · go-jose
- CVE-2026-11564 low · curl
- CVE-2026-54279 low · aiohttp
- CVE-2026-54276 low · aiohttp
- CVE-2026-54275 low · aiohttp
- CVE-2026-54273 low · aiohttp
- CVE-2026-54280 low · aiohttp
- CVE-2018-10903 low · cryptography
Accepted fixes
143 fixes| Project | Severity | Issue | CVE | Fix |
|---|---|---|---|---|
| noble-curves | info | FROST DKG round-two retry is not bound to the first roster | — | PR |
| noble-curves | info | FROST DKG round-two docs call raw private shares encrypted | — | PR |
| noble-curves | info | Recovered ECDSA verification ignores the recovery byte and accepts noncanonical signature encodings | — | PR |
| noble-curves | info | Jubjub and BabyJubJub expose unsupported Edwards-to-Montgomery conversion helpers | — | PR |
| noble-curves | info | Ed448 toMontgomery uses the E448 birational map instead of the Ed448 4-isogeny | — | PR |
| noble-curves | low | BLS verify accepts uncompressed signatures that the Signature codec rejects | — | PR |
| noble-curves | low | BLS12-381 accepts modularly equivalent non-canonical encodings | — | PR |
| curl | medium | --ssl overrides --ftp-ssl-control and permits plaintext FTP login fallback | — | PR |
| curl | low | Protocol-relative authority-changing redirects keep CURLOPT_PORT when absolute redirects clear it | — | PR |
| curl | medium | Redirected transfers can reuse TLS state established without the configured pinned public key | — | PR |
| curl | low | Native CA trust can persist after an easy handle switches to custom CA material | CVE-2026-11564 | PR |
| curl | medium | FTP wildcard LIST parsing exposes stale symlink targets to callbacks | — | PR |
| curl | low | Bare CR in response headers creates internal-parser and callback desync | — | PR |
| curl | low | CURLOPT_DISALLOW_USERNAME_IN_URL is not applied to CURLOPT_CURLU handles | — | PR |
| curl | low | Windows case-insensitive environments can make HTTP_PROXY satisfy curl's http_proxy lookup | — | PR |
| curl | medium | Windows SSPI SOCKS5 GSSAPI accepts negotiated protection that is not used | — | PR |
| curl | medium | Windows SSPI GSSAPI unwrapped data is freed with the SSPI allocator | — | PR |
| curl | low | Redirected SigV4 URL credentials can inject HTTP/1.x request headers | — | PR |
| curl | medium | Server NTLM state is not origin-bound for non-tunneled proxy reuse | — | PR |
| curl | medium | Non-secure host-only cookies can shadow Secure domain cookies | — | PR |
| curl | medium | Schannel sends origin client certificates to HTTPS proxies | — | PR |
| curl | low | Schannel automatic client certificates survive cross-origin redirects | — | PR |
| curl | low | Multiplexed non-tunneled HTTP/2 proxy reuse can store one origin's cookie under another origin | — | PR |
| curl | low | Redirected Digest URL userinfo can inject HTTP/1.x request headers | — | PR |
| curl | medium | CURL_POLL_REMOVE callback reentry can invalidate socket hash state still in use | CVE-2026-9080 | PR |
| curl | info | Reused easy handles keep stale .netrc contents after NETRC_FILE changes | — | PR |
| curl | medium | DoH resolver sub-transfers do not inherit parent proxy policy | — | PR |
| curl | info | DoH inherits the Schannel automatic client-certificate option from the origin transfer | — | PR |
| crypto-bigint | info | [KEMs] Non-P-256 HPKE DHKEM helpers use the P-256 suite ID | — | PR |
| crypto-bigint | low | Fixed-width DER decode panics on oversized INTEGER values | — | PR |
| crypto-bigint | info | Montgomery bounded exponentiation panics with accidental index error for oversized exponent_bits | — | PR |
| crypto-bigint | info | Int serde impl is unreachable because Int does not implement Encoding | — | PR |
| crypto-bigint | info | Zeroize can violate NonZero/Odd wrapper invariants | — | PR |
| nginx | high | HTTP/3 QPACK encoder stream reset leaves stale insert buffer pointer | CVE-2026-42530 | PR |
| aiohttp | low | Host-only cookies become domain cookies after CookieJar persistence | CVE-2026-54279 | PR |
| aiohttp | low | DigestAuthMiddleware uses credentials for redirect target challenges | CVE-2026-54276 | PR |
| aiohttp | medium | C HTTP parser bypasses max_line_size across fragmented lines | CVE-2026-54277 | PR |
| aiohttp | medium | WebSocket max_msg_size Is Enforced Only After Full Frame Buffering | CVE-2026-54274 | PR |
| aiohttp | low | TLS SNI/Hostname Verification Bypass Via Client Connection Reuse | CVE-2026-54275 | PR |
| aiohttp | low | HTTP/1 pipelined requests queue without a count limit | CVE-2026-54273 | PR |
| aiohttp | medium | Unread compressed request bodies bypass client_max_size during cleanup | CVE-2026-54278 | PR |
| aiohttp | low | Payload response resources stay open after mid-body disconnect | CVE-2026-54280 | PR |
| cryptography | low | GCM delayed-tag decryption accepts sub-4-byte authentication tags | CVE-2018-10903 | PR |
| go-jose | medium | Missing protected JWE header causes panic after successful decryption | CVE-2026-34986 | PR |
| freenginx | medium | HTTP/3 DATA prefix can exceed its heap allocation | — | PR |
| freenginx | low | mail auth HTTP can leave a stale session ctx after temp-pool destroy | — | PR |
| freenginx | low | mail proxy leaves a stale upstream connection pointer after close | — | PR |
| freenginx | low | gzip filter leaves `ctx->preallocated` stale after `ngx_pfree()` | — | PR |
| freenginx | medium | HTTP Perl async callbacks store unrefcounted `SV`/`CV` pointers | — | PR |
| freenginx | high | gRPC request serialization overflows on oversized HPACK :path | — | PR |
| freenginx | medium | Script no-cacheable variable re-evaluation can overflow generated buffers | — | PR |
| simplexmq | medium | IPv6 server URLs render ambiguous raw host and port pairs | — | PR |
| simplex-chat | medium | [Bug]: Downloaded image attachments can be decoded at full dimensions and exhaust client memory | — | PR |
| simplex-chat | medium | [Bug]: Android shared content size checks trust provider metadata before unbounded copy | — | PR |
| ansible | undetermined | security: C# FailJson exceptions leak no_log values | — | — |
| urllib3 | low | urllib3 accepts raw CR/LF in URL hosts and emits them in proxy CONNECT requests | — | PR |
| ansible | undetermined | security: password lookup follows symlinks when creating secret files | — | — |
| ansible | undetermined | security: async_status jid escapes async directory | — | — |
| ansible | undetermined | security: apt_key keyring paths inject extra key imports | — | — |
| ansible | undetermined | security: file recurse follows symlinks outside managed directories | — | — |
| kubernetes-client | undetermined | JDK HTTP client sends bodyless non-GET requests as GET | — | PR |
| sqlite | undetermined | Late vtab module registration leaves shadow tables writable | — | PR |
| kubernetes-client | undetermined | Kubeconfig `http://` proxy-url is bypassed for HTTPS clusters | — | PR |
| kubernetes-client | undetermined | `https://` proxy URL schemes are treated as plaintext HTTP proxies | — | PR |
| sqlite | undetermined | `%!J` UTF-8 precision expansion narrows four-gigabyte input | — | PR |
| sqlite | undetermined | Side-effect `sqlite_log()` is treated as innocuous | — | PR |
| sqlite | undetermined | `sqlite3_drop_modules()` races module hash iteration | — | PR |
| sqlite | undetermined | Serial type 10 smuggles virtual-table no-change value | — | — |
| sqlite | undetermined | json_pretty() reads past malformed JSONB object payload | — | PR |
| sqlite | undetermined | .archive extraction allows absolute sibling path escape | — | PR |
| sqlite | undetermined | Corrupt index cell pointer crosses page boundary | — | PR |
| sqlite | undetermined | Malformed UTF-8 precision in `%!s` allows oversized memcpy | — | PR |
| sqlite | undetermined | Crafted Rollback Journal Can Delete an Arbitrary File | — | PR |
| sqlite | undetermined | Heap buffer overflow in sqlite3ParseUri for over-1GiB file: URI filenames | — | PR |
| sqlite | undetermined | Odd UTF-16 prepare length reads past caller buffer | — | PR |
| kubernetes-client | undetermined | Fix CI auth safety bug | — | PR |
| sigstore | low | Key validity period not checked for verifications involving long-lived keys | — | PR |
| nss | undetermined | Heap Buffer Overflow in NSS Legacy libpkix HTTP OCSP Client | — | PR |
| pythondotorg | low | [PTP-PYTHON-007] Bug: release-file APIs accept new HTTP python.org URLs | — | PR |
| pythondotorg | medium | [PTP-PYTHON-001] Bug: ReleaseFile sidecar URLs can point to different artifacts | — | PR |
| release-tools | low | [PTP-PYTHON-008] Bug: add_to_pydotorg can leave partial release-file metadata after post failure | — | PR |
| borp | medium | borp UpdateColumns cached plan bypasses column filter | — | PR |
| borp | medium | Generated SQL does not escape identifier quote characters | — | PR |
| pythondotorg | medium | [PTP-PYTHON-004] Bug: inactive staff API keys still authorize v1 writes | — | PR |
| pythondotorg | medium | [PTP-PYTHON-003] Bug: v1 Tastypie writes accept staff sessions without API keys | — | PR |
| pythondotorg | medium | [PTP-PYTHON-005] Bug: v1 Tastypie accepts API keys in query strings | — | PR |
| pythondotorg | medium | [PTP-PYTHON-006] Bug: v1 Tastypie resources allow broad collection mutations | — | PR |
| pythondotorg | low | [PTP-PYTHON-009] Bug: delete_by_release silently honors extra filters | — | PR |
| release-tools | info | [PTP-PYTHON-012] Bug: free-threaded Windows artifacts are skipped by add_to_pydotorg | — | PR |
| pythondotorg | low | [PTP-PYTHON-014] Bug: custom 404 legacy link can point to an external URL | — | PR |
| go-jose | high | go-jose VerifyMulti can return a victim kid for an attacker-signed JWS | — | — |
| go-jose | medium | ParseSigned strips whitespace before JSON parsing and can smuggle unprotected JWS headers | — | PR |
| simplex-chat | medium | [Bug]: Desktop call localhost WebSocket accepts cross-origin browser control | — | PR |
| simplex-chat | medium | [Bug]: WebRTC call switch leaves abandoned preview media active | — | PR |
| simplex-chat | high | [Bug]: Relay short-link decompression can exhaust memory | — | PR |
| simplexmq | medium | Client-selectable APNS test provider sends APNS bearer traffic to localhost | — | PR |
| warehouse | info | README sanitizer allows active input controls | — | PR |
| warehouse | info | pip-audit release workflow exposes PyPI OIDC token before publish step | — | PR |
| warehouse | info | Warehouse can publish broadened Requires-Dist markers after packaging round trip | — | PR |
| simplex-chat | high | [Bug]: Inbound group role changes allow admin owner promotion | — | PR |
| simplex-chat | medium | [Bug]: Negative file invitations can bypass auto-receive and file-size gating | — | PR |
| rust | undetermined | rustc: unsafe checker skips `ExprKind::Reborrow { source }` and allows unsafe ops under `#![deny(unsafe_code)]` (`#![feature(reborrow)]`) | — | PR |
| rust | undetermined | rustc: `become` tail calls between `extern "rust-call"` fns can pass stale/uninitialized indirect tuple args at `-O` | — | PR |
| rust | undetermined | rustc: by-value `#[track_caller]` trait method called via `Box<dyn Trait>` uses a vtable shim that drops the caller-location ABI argument (`unsized_fn_params`) | — | PR |
| simplexmq | low | XFTP CLI receive path allows sender-controlled filename traversal | — | PR |
| simplexmq | medium | SNTRUP761 KEM bindings accept unchecked public key and ciphertext lengths | — | PR |
| simplexmq | medium | STM queue store LSET can hijack existing short-link ids | — | PR |
| simplexmq | high | XFTP FNEW creates durable metadata before upload or quota reservation | — | PR |
| simplexmq | low | Scripted SMP installs enable HTTPS without provisioning web credentials | — | PR |
| simplexmq | low | simplex-servers-update writes release metadata before creating parent directory | — | PR |
| simplexmq | high | XFTP redirected-description parser error reaches production innerHTML sink and can expose file secrets | — | PR |
| simplexmq | medium | XFTP web host gate accepts any referenced current host but fetches first replicas | — | PR |
| simplexmq | low | Production XFTP web bundle logs DH secrets and decrypted chunk bytes | — | PR |
| simplex-chat | low | [Bug]: Remote controller file upload path allows filename traversal | — | PR |
| simplex-chat | medium | [Bug]: Postgres delivery pagination can redeliver group events | — | PR |
| simplex-chat | high | [Bug]: Demoted admins keep a live group link that continues accepting joiners | — | PR |
| simplex-chat | high | [Bug]: Demoted channel owners can republish stale owner metadata into short-link data | — | PR |
| simplex-chat | high | [Bug]: Accepted senders can grow XFTP file descriptions without a total length or part-count limit before file acceptance | — | PR |
| simplex-chat | medium | [Bug]: Chat tag and TTL APIs mutate chats by raw ID without user ownership checks | — | PR |
| simplex-chat | low | [Bug]: Oversized relay delivery tasks can create durable empty delivery jobs | — | PR |
| crypto-bigint | info | UintRef slice copy length checks disappear in release builds | — | PR |
| crypto-bigint | low | BoxedUint BitOrAssign drops high limbs from wider RHS | — | PR |
| crypto-bigint | info | limb::nlimbs overflows before rounding large bit counts | — | PR |
| crypto-bigint | info | Uint div_exact panics on wide divisors with dividend-precision trailing zeros | — | PR |
| crypto-bigint | info | Modulus-one edge cases need canonicalization or rejection | — | PR |
| crypto-bigint | info | UintRef bytes_precision returns limb count instead of byte count | — | PR |
| crypto-bigint | low | MontyParams constant-time equality ignores mod_leading_zeros | — | PR |
| urllib3 | low | Absolute request targets include URL fragments | — | PR |
| aiohttp | medium | Numeric IPv4 host forms bypass aiohttp resolver policies | — | PR |
| aiohttp | low | Environment Proxy Credentials Leak to Different Proxy After Redirect | — | PR |
| warehouse | low | packaging DirectUrl credential stripping can leak password fragments | — | PR |
| simplex-chat | undetermined | [Bug]: Android service watchdog does not restart after normal teardown | — | PR |
| warehouse | info | README sanitizer ignores stricter policy overrides | — | PR |
| zlib | undetermined | Truncated gzip header name/comment reuse can over-read deflateSetHeader | — | — |
| warehouse | info | Linehaul ingestor retries poison gzip objects indefinitely | — | PR |
| warehouse | info | pipx: address zizmor findings in GitHub Actions | — | PR |
| warehouse | info | trove-classifiers release workflow exposes PyPI OIDC token before publish step | — | PR |
| warehouse | info | pipx release workflow exposes PyPI OIDC token before publish step | — | PR |
| warehouse | info | stdlib-list release workflow exposes PyPI OIDC token before publish step | — | PR |
| warehouse | info | linehaul release workflow exposes PyPI OIDC token before publish step | — | PR |
| warehouse | info | CI installs unpinned lint and test tooling from live PyPI | — | PR |
| warehouse | undetermined | pypa/build: backend-path containment can allow sibling directories | — | PR |
| pythondotorg | undetermined | [PTP-PYTHON-013] Bug: Fastly purge workflow executes path-derived keys in a secret-bearing shell | — | PR |
No matching fixes.
