Dulwich has unbounded memory allocation in receive-pack from crafted thin packs

CVE-2026-47734

## Impact An uncontrolled-resource-consumption (memory exhaustion) denial-of-service vulnerability (CWE-400 / CWE-789).

历史摘要 · 未重新核验 · GitHub Advisory

nebula-mesh: GET /api/v1/audit-log discloses all entries to any operator

CVE-2026-47726

`internal/api/audit.go:12` — `handleGetAuditLog` does no admin check. The route is bearer-auth gated only; any operator

历史摘要 · 未重新核验 · GitHub Advisory

nebula-mesh: Host advanced overrides allow YAML injection into agent config.yml

CVE-2026-47722

`internal/configgen/generator.go:86,108,119` interpolates the operator-supplied `ListenHost` and `TunDevice` fields raw

历史摘要 · 未重新核验 · GitHub Advisory

FUXA's scheduler API missing admin check enables operator-to-admin escalation via scheduled device actions

CVE-2026-47721

## Summary An authorization issue in the Scheduler API allowed authenticated non-admin users to create or modify schedu

历史摘要 · 未重新核验 · GitHub Advisory

Dulwich doesn't sanitize commit subjects in `porcelain.format_patch`

CVE-2026-47712

### Impact dulwich.porcelain.format_patch(outdir=...) derives each patch filename from the commit's subject line. Prior

历史摘要 · 未重新核验 · GitHub Advisory

Netty HTTP/2: Advertised MAX_CONCURRENT_STREAMS are not enforced

CVE-2026-47244

### Impact DefaultHttp2Connection.DefaultEndpoint initialises maxActiveStreams/maxStreams to Integer.MAX_VALUE, and Http

历史摘要 · 未重新核验 · GitHub Advisory

Netty: SCTP reassembly nests buffers without bound

CVE-2026-46340

For each non-complete SctpMessage fragment the handler does `fragments.put(streamId, Unpooled.wrappedBuffer(frag, byteBu

历史摘要 · 未重新核验 · GitHub Advisory

Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records

CVE-2026-45674

### Summary Netty's DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses. ### D

历史摘要 · 未重新核验 · GitHub Advisory

Netty: DNS Cache Poisoning due to Predictable PRNG and Default Static Source Port

CVE-2026-45673

### Summary Netty's DNS resolver uses a predictable PRNG for generating DNS transaction IDs and defaults to a static UDP

历史摘要 · 未重新核验 · GitHub Advisory

Netty: Unix-socket fd receive leaks descriptors when peer sends two at once

CVE-2026-45536

netty_unix_socket_recvFd sets msg_control to `char control[CMSG_SPACE(sizeof(int))]` (line 940) — 24 bytes on 64-bit Lin

历史摘要 · 未重新核验 · GitHub Advisory

Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes

CVE-2026-45416

SslClientHelloHandler.decode() reads the 24-bit TLS handshake length and, when the ClientHello does not fit in the first

历史摘要 · 未重新核验 · GitHub Advisory

PHPSpreadsheet has a patch bypass for CVE-2026-34084

CVE-2026-45034

## Summary CVE-2026-34084 was patched by the helper `File::prohibitWrappers`. The helper calls `parse_url($filename, PH

历史摘要 · 未重新核验 · GitHub Advisory

Netty's Default QUIC token handler accepts any client-supplied token

CVE-2026-44894

NoQuicTokenHandler is the tokenHandler used when the application does not set one. Its writeToken() returns false (serve

历史摘要 · 未重新核验 · GitHub Advisory

Netty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length

CVE-2026-44893

When decoding a PP2_TYPE_SSL TLV, HAProxyMessage.readNextTLV() first calls `header.retainedSlice(header.readerIndex(), l

历史摘要 · 未重新核验 · GitHub Advisory

Netty has a Vulnerable Default Configuration Which Leads to Denial of Service via Unbounded HTTP/3 Header Size

CVE-2026-44892

### Summary The default configuration of the `Http3ConnectionHandler` in the Netty HTTP/3 codec lacks an enforced maximu

历史摘要 · 未重新核验 · GitHub Advisory

Netty has Unbounded Direct Memory Consumption in its RedisDecoder

CVE-2026-44890

### Summary An attacker can cause DoS by sending crafted Redis payloads across multiple connections without `\r\n`. This

历史摘要 · 未重新核验 · GitHub Advisory

Netty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays

CVE-2026-44250

### Summary An attacker can cause DoS by sending a crafted Redis payload with deeply nested arrays. This forces the serv

历史摘要 · 未重新核验 · GitHub Advisory

Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking

CVE-2026-44249

### Summary An attacker can bypass IPv6 subnet rules due to an incorrect masking operation in IpSubnetFilterRule.compare

历史摘要 · 未重新核验 · GitHub Advisory

Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。

Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。

历史摘要 · 未重新核验 · 知道创宇 / Seebug

Cookie settings

Cookie settings

历史摘要 · 未重新核验 · Mozilla Security Advisories