Sunday, November 8, 2026 brief
pypdf: possible large memory usage when parsing cross-reference streams (GHSA-59jv-x5x2-gg4c)
GitHub Security Advisory (pypdf)
This story is part of the morning brief Agent Router's MCP proxy let anything on the pod network skip gateway auth. The reporting lives at the original source.
Read at GitHub Security Advisory (pypdf)
Plus Radware counts real prompt injections aimed at GitHub triage bots, a TorchServe CVE nobody will fix, and patches for Junie and pypdf.