Ecosystem	Package	Version

Vulnerabilities

CVE-2026-24797

CVE-2026-24797

Out-of-bounds Write vulnerability in neka-nat cupoch (third_party/libjpeg-turbo/libjpeg-turbo modules). This vulnerability is associated with program files tjbench.C. This issue affects cupoch.

Published Jan 28, 2026

https://github.com/neka-nat/cupoch/pull/138

CVSS ScoreMedium

6.9

Ecosystem	Package	Version


pypi	cupoch	0.0.1.0
pypi	cupoch	0.0.2.0
pypi	cupoch	0.0.4.0
pypi	cupoch	0.0.5.0
pypi	cupoch	0.0.6.0
pypi	cupoch	0.0.7.0
pypi	cupoch	0.0.8.0
pypi	cupoch	0.0.9.0
pypi	cupoch	0.1.0.0
pypi	cupoch	0.1.1.0
pypi	cupoch	0.1.2.0
pypi	cupoch	0.1.3.0
pypi	cupoch	0.1.3.1
pypi	cupoch	0.1.3.2
pypi	cupoch	0.1.4.1
pypi	cupoch	0.1.5.0
pypi	cupoch	0.1.6.0
pypi	cupoch	0.1.7.0
pypi	cupoch	0.1.8.0
pypi	cupoch	0.1.9.0
pypi	cupoch	0.1.9.1
pypi	cupoch	0.2.0.0
pypi	cupoch	0.2.1.0
pypi	cupoch	0.2.10.0
pypi	cupoch	0.2.11.0
pypi	cupoch	0.2.2.0
pypi	cupoch	0.2.3.0
pypi	cupoch	0.2.4.0
pypi	cupoch	0.2.5.0
pypi	cupoch	0.2.6.0
pypi	cupoch	0.2.7.0
pypi	cupoch	0.2.7.1
pypi	cupoch	0.2.7.2
pypi	cupoch	0.2.7.3
pypi	cupoch	0.2.7.4
pypi	cupoch	0.2.8.0
pypi	cupoch	0.2.8.1
pypi	cupoch	0.2.9.0

CVE-2026-24797 | Components Impacted | Sonatype Guide | Sonatype Guide