Netty: Unbounded pre-allocation in RedisArrayAggregator from RESP array length

CVE-2026-50011

### Summary RedisArrayAggregator pre-allocates ArrayList with initial capacity equal to the RESP array element count dec

历史摘要 · 未重新核验 · GitHub Advisory

Netty: Wrapping plain trust manager silently disables hostname verification

CVE-2026-50010

SimpleTrustManagerFactory.engineGetTrustManagers() and related paths wrap any user-supplied plain X509TrustManager in X5

历史摘要 · 未重新核验 · GitHub Advisory

Netty: QUIC stateless reset token material exposed through header-visible connection IDs

CVE-2026-50009

### Summary Netty QUIC exposes the stateless reset token on the network path when using the default HMAC-based connectio

历史摘要 · 未重新核验 · GitHub Advisory

Netty HTTP/3 QPACK Blocked Streams Memory Exhaustion

CVE-2026-48748

### Summary A memory exhaustion vulnerability in the Netty HTTP/3 codec allows the creation of an infinite number of blo

历史摘要 · 未重新核验 · GitHub Advisory

markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations

CVE-2026-48988

### Summary A quadratic time complexity vulnerability exists in markdown-it's smartquotes rule (enabled via the `typogr

历史摘要 · 未重新核验 · GitHub Advisory

Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS

CVE-2026-54283

### Summary `request.form()` accepts `max_fields` and `max_part_size` to bound resource consumption while parsing form d

历史摘要 · 未重新核验 · GitHub Advisory

Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname

CVE-2026-54282

### Summary In affected versions, the HTTP request path is not validated before being used to reconstruct `request.url`

历史摘要 · 未重新核验 · GitHub Advisory

python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service

CVE-2026-53539

### Summary When parsing `application/x-www-form-urlencoded` bodies, `QuerystringParser` located the field separator wi

历史摘要 · 未重新核验 · GitHub Advisory

python-multipart: Negative Content-Length in parse_form buffers the entire body in memory

CVE-2026-53540

### Summary `parse_form()` did not validate the `Content-Length` header before using it to bound its chunked read of th

历史摘要 · 未重新核验 · GitHub Advisory

Electron: Buffer performs incorrect byte length calculations resulting in heap buffer under/overflow

CVE-2026-54257

### Impact Most apps will crash and some may perform incorrect buffer allocations in the Node.js `Buffer` API resulting

历史摘要 · 未重新核验 · GitHub Advisory

Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient

CVE-2026-49853

## Summary When SimpleAsyncHTTPClient follows a 3xx redirect, it shallow-copies the original HTTPRequest, rewrites the

历史摘要 · 未重新核验 · GitHub Advisory

tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)

CVE-2026-49855

Tornado's gzip decompression routines work in limited-size chunks, but have no overall limit for the total size of decom

历史摘要 · 未重新核验 · GitHub Advisory

Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows

CVE-2026-48818

### Summary When serving static files on Windows, `StaticFiles` resolves the requested path with [`os.path.realpath`](h

历史摘要 · 未重新核验 · GitHub Advisory

Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`

CVE-2026-48817

### Summary When dispatching a request, `HTTPEndpoint` selects the handler by lowercasing the HTTP method and looking i

历史摘要 · 未重新核验 · GitHub Advisory

protobufjs-cli: Code injection in pbjs static output from crafted JSON descriptor names

CVE-2026-54271

## Summary A previous fix for unsafe name handling in `pbjs` static / static-module code generation was incomplete. Aff

历史摘要 · 未重新核验 · GitHub Advisory

protobufjs: Memory amplification from preserved unknown fields in binary decode

CVE-2026-54270

## Summary protobufjs 8.2.0 added support for preserving unknown fields encountered during binary decode. Affected vers

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-45591 – ASP.NET Core Denial of Service Vulnerability

CVE-2026-45591

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.

历史摘要 · 未重新核验 · GitHub Advisory

aiohttp: Incomplete websocket frame payloads bypass memory limits

CVE-2026-54274

### Summary If an attacker sends large incomplete websocket frame payloads, it may be possible to bypass the usual size

历史摘要 · 未重新核验 · GitHub Advisory

关于Microsoft ExchangeServer存在多个...

关于Microsoft ExchangeServer存在多个...

历史摘要 · 未重新核验 · CNCERT

关于家用路由器DNS被恶意篡改导致异常跳转风险的提示

关于家用路由器DNS被恶意篡改导致异常跳转风险的提示

历史摘要 · 未重新核验 · CNCERT