java-json-tools jackson-coreutils URL Validation JsonLoader.java JsonLoader.fromURL server-side request forgery
CVE-2026-86321
A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this issue is the function JsonLoader.fr
#advisory
共收录 23717 条相关情报。
← 返回所有主题java-json-tools json-patch Patch Operation JsonPatch.java JsonPatch.apply resource consumption
CVE-2026-86319
A vulnerability has been found in java-json-tools json-patch up to 1.13. Affected by this vulnerability is the function
java-json-tools json-patch JsonMergePatchDeserializer.java JsonMergePatch.fromJson stack-based overflow
CVE-2026-86318
A flaw has been found in java-json-tools json-patch up to 1.13. Affected is the function JsonMergePatch.fromJson of the
ggml-org llama.cpp RPC Server ggml-rpc.cpp deserialize_tensor assertion
CVE-2026-86317
A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function rpc_server::deserialize_tensor
MISP Unauthenticated Mail Endpoints Allow Unbounded Storage Consumption and Request Flooding
CVE-2026-86452
Affected versions of MISP permit unauthenticated or weakly constrained request paths to perform persistent work without
MISP Event Graph Object Reference Lookup Exposes References from Unauthorized Objects
CVE-2026-86451
Affected versions of MISP allow authenticated users to retrieve object-reference records by UUID through EventGraphTool:
PocketMine-MP before 3.26.5 Input Validation via Book Pages
CVE-2022-51018
PocketMine-MP before 3.26.5 and 4.0.x before 4.0.5 does not limit book page text length, page count, or author/title len
PocketMine-MP before 3.26.5 and 4.0.5 Denial of Service via Skin Data
CVE-2022-51017
PocketMine-MP versions before 3.26.5 and 4.0.5 fail to validate the length of skin data fields submitted by players, all
PocketMine-MP before 4.0.6 Denial of Service via PlayerActionPacket
CVE-2022-51015
PocketMine-MP before 4.0.6 does not validate facing values in PlayerActionPacket (for START_BREAK and CRACK_BREAK action
PocketMine-MP before 4.0.7 Denial of Service via JSON Decoding
CVE-2022-51014
PocketMine-MP before 4.0.7 contains an unhandled exception vulnerability in the ModalFormResponsePacket handler when pro
PocketMine-MP before 4.2.3 Denial of Service via NBT Metadata
CVE-2022-51013
PocketMine-MP versions before 4.2.3 fail to validate damage metadata values in tool and armor item NBT data received fro
PocketMine-MP before 4.2.9 Denial of Service via NBT Deserialization
CVE-2022-51012
PocketMine-MP versions before 4.2.9 fail to properly validate NBT data types during deserialization of inventory transac
PocketMine-MP before 4.2.10 Denial of Service via Chat Messages
CVE-2022-51011
PocketMine-MP before 4.2.10 fails to validate the total length of incoming chat message blobs before splitting them by n
PocketMine-MP before 4.4.2 Server Crash via Item ID
CVE-2022-51010
PocketMine-MP versions before 4.4.2 fail to properly validate item IDs received from clients in itemstack NBT data. Atta
commonmark before 2.9.1 XSS via AttributesExtension form feed bypass
CVE-2026-86431
league/commonmark (thephpleague/commonmark) versions >= 2.7.0 and < 2.9.1 contain a cross-site scripting vulnerability i
league/commonmark before 2.9.1 Denial of Service via parsing
CVE-2026-86430
league/commonmark versions before 2.9.1 contain multiple denial of service vulnerabilities in fenced code block detectio
commonmark before 2.9.1 Denial of Service via SmartPunct and Attributes
CVE-2026-86429
The league/commonmark (thephpleague/commonmark) library in versions >= 1.5.0 and < 2.9.1 contains quadratic parsing comp
commonmark 1.5.0 before 2.10.0 Denial of Service via Attributes
CVE-2026-86428
commonmark versions from 1.5.0 before 2.10.0 contain a denial of service vulnerability in the AttributesExtension when p
LibreNMS before 26.8.0 Argument Injection via graph_title
CVE-2026-86427
LibreNMS before 26.8.0 contains an argument injection vulnerability in the graph_title parameter that allows authenticat
LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion
CVE-2026-86426
LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attac