Latest vulnerabilities for "ibm watsonx.data intelligence"

Where

Sort:

Versions

5.2.0, 5.2.1, 5.3.0, 5.3.1

IBM watsonx.data intelligence29 vulnerabilities

First published (updated )

Advisory

IBM-7270923

Vulnerabilities found

Risk 36

Severity

6.2

First published (updated )

CVE-2025-36335

flatted: Prototype Pollution via parse()

Risk 61

Severity

8.9

EPSS

0.03%

First published (updated )

CVE-2026-33228

undici is vulnerable to Unhandled Exception in undici WebSocket Client Due to Invalid server_max_window_bits Validation

Risk 43

Severity

7.5

First published (updated )

CVE-2026-2229

undici is vulnerable to Malicious WebSocket 64-bit length overflows undici parser and crashes the client

Risk 43

Severity

7.5

First published (updated )

CVE-2026-1528

undici is vulnerable to CRLF Injection via upgrade option

Risk 30

Severity

4.6

First published (updated )

CVE-2026-1527

undici is vulnerable to Unbounded Memory Consumption in undici WebSocket permessage-deflate Decompression

Risk 43

Severity

7.5

First published (updated )

CVE-2026-1526

undici is vulnerable to Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Risk 86

Severity

9.8

First published (updated )

CVE-2026-1525

fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity names

Risk 43

Severity

9.3

EPSS

0.04%

First published (updated )

CVE-2026-25896

Swiper has a Prototype Pollution Vulnerability

Risk 57

Severity

9.4

EPSS

0.06%

First published (updated )

CVE-2026-27212

minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern

Risk 33

Severity

8.7

EPSS

0.05%

First published (updated )

CVE-2026-26996

Zip Slip Vulnerability in nltk/nltk Leading to Remote Code Execution

Risk 87

Severity

First published (updated )

CVE-2025-14009

node-tar has Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in Extraction

Risk 38

Severity

7.1

EPSS

0.01%

First published (updated )

CVE-2026-26960

Apache Tomcat Native, Apache Tomcat: OCSP revocation bypass

Risk 31

Severity

7.5

EPSS

0.02%

First published (updated )

CVE-2026-24734

qs's arrayLimit bypass in comma parsing allows denial of service

Risk 31

Severity

6.3

EPSS

0.02%

First published (updated )

CVE-2026-2391

Pillow has an out-of-bounds write when loading PSD images

Risk 61

Severity

8.9

EPSS

0.02%

First published (updated )

CVE-2026-25990

cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves

Risk 33

Severity

8.2

EPSS

0.01%

First published (updated )

CVE-2026-26007

Axios affected by Denial of Service via proto Key in mergeConfig

Risk 31

Severity

7.5

EPSS

0.03%

First published (updated )

CVE-2026-25639

IBM WebSphere Application Server Liberty Path Traversal

Risk 60

Severity

7.6

First published (updated )

CVE-2025-14914

fast-xml-parser has RangeError DoS Numeric Entities Bug

Risk 31

Severity

7.5

EPSS

0.03%

First published (updated )

CVE-2026-25128

Buffer Overflow

Risk 86

Severity

6.9

First published (updated )

CVE-2026-1188

node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal

Risk 38

Severity

8.2

EPSS

0.01%

First published (updated )

CVE-2026-24842

Python-Multipart has Arbitrary File Write via Non-Default Configuration

Risk 65

Severity

8.6

Exploited

EPSS

0.02%

First published (updated )

CVE-2026-24486

AssertJ has XML External Entity (XXE) vulnerability when parsing untrusted XML via isXmlEqualTo assertion

Risk 47

Severity

8.2

EPSS

0.01%

First published (updated )

CVE-2026-24400

Denial of Service in Python Protobuf

Risk 43

Severity

8.2

First published (updated )

CVE-2026-0994

node-tar has Race Condition in Path Reservations via Unicode Ligature Collisions on macOS APFS

Risk 46

Severity

8.8

EPSS

0.01%

First published (updated )

CVE-2026-23950

node-tar Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization

Risk 36

Severity

8.2

EPSS

0.01%

First published (updated )

CVE-2026-23745

Java SE is vulnerable to a denial of service, caused by an easily exploitable vulnerability issue th…

Risk 31

Severity

7.5

EPSS

0.05%

First published (updated )

CVE-2026-21945

XSS, CRLF Injection

Risk 27

Severity

6.1

EPSS

0.03%

First published (updated )

CVE-2026-21933

Desktop.browse() will run a program if the URI is a filename while the documentation says that the d…

Risk 30

Severity

7.4

EPSS

0.03%

First published (updated )

CVE-2026-21932

Trending

Versions

IBM watsonx.data intelligence29 vulnerabilities

Vulnerabilities found

flatted: Prototype Pollution via parse()

undici is vulnerable to Unhandled Exception in undici WebSocket Client Due to Invalid server_max_window_bits Validation

undici is vulnerable to Malicious WebSocket 64-bit length overflows undici parser and crashes the client

undici is vulnerable to CRLF Injection via upgrade option

undici is vulnerable to Unbounded Memory Consumption in undici WebSocket permessage-deflate Decompression

undici is vulnerable to Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity names

Swiper has a Prototype Pollution Vulnerability

minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern

Zip Slip Vulnerability in nltk/nltk Leading to Remote Code Execution

node-tar has Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in Extraction

Apache Tomcat Native, Apache Tomcat: OCSP revocation bypass

qs's arrayLimit bypass in comma parsing allows denial of service

Pillow has an out-of-bounds write when loading PSD images

cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves

Axios affected by Denial of Service via proto Key in mergeConfig

IBM WebSphere Application Server Liberty Path Traversal

fast-xml-parser has RangeError DoS Numeric Entities Bug

Buffer Overflow

node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal

Python-Multipart has Arbitrary File Write via Non-Default Configuration

AssertJ has XML External Entity (XXE) vulnerability when parsing untrusted XML via isXmlEqualTo assertion

Denial of Service in Python Protobuf

node-tar has Race Condition in Path Reservations via Unicode Ligature Collisions on macOS APFS

node-tar Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization

Java SE is vulnerable to a denial of service, caused by an easily exploitable vulnerability issue th…

XSS, CRLF Injection

Desktop.browse() will run a program if the URI is a filename while the documentation says that the d…

Company

Resources

Contact

Trending

Versions

IBM watsonx.data intelligence29 vulnerabilities

Vulnerabilities found

flatted: Prototype Pollution via parse()

undici is vulnerable to Unhandled Exception in undici WebSocket Client Due to Invalid server_max_window_bits Validation

undici is vulnerable to Malicious WebSocket 64-bit length overflows undici parser and crashes the client

undici is vulnerable to CRLF Injection via upgrade option

undici is vulnerable to Unbounded Memory Consumption in undici WebSocket permessage-deflate Decompression

undici is vulnerable to Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity names

Swiper has a Prototype Pollution Vulnerability

minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern

Zip Slip Vulnerability in nltk/nltk Leading to Remote Code Execution

node-tar has Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in Extraction

Apache Tomcat Native, Apache Tomcat: OCSP revocation bypass

qs's arrayLimit bypass in comma parsing allows denial of service

Pillow has an out-of-bounds write when loading PSD images

cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves

Axios affected by Denial of Service via __proto__ Key in mergeConfig

IBM WebSphere Application Server Liberty Path Traversal

fast-xml-parser has RangeError DoS Numeric Entities Bug

Buffer Overflow

node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal

Python-Multipart has Arbitrary File Write via Non-Default Configuration

AssertJ has XML External Entity (XXE) vulnerability when parsing untrusted XML via isXmlEqualTo assertion

Denial of Service in Python Protobuf

node-tar has Race Condition in Path Reservations via Unicode Ligature Collisions on macOS APFS

node-tar Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization

Java SE is vulnerable to a denial of service, caused by an easily exploitable vulnerability issue th…

XSS, CRLF Injection

Desktop.browse() will run a program if the URI is a filename while the documentation says that the d…

Company

Resources

Contact

Axios affected by Denial of Service via proto Key in mergeConfig