Hono: Unbounded dot-notation nesting in `parseBody()` can cause memory exhaustion
CVE-2026-84364
Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.13.5, when parseBody()
#advisory
共收录 23717 条相关情报。
← 返回所有主题Hono: Query parser reads parameters after the URL fragment, causing cache-key and proxy interpretation differentials
CVE-2026-84363
Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.13.5, Hono's query help
league/commonmark: Denial of service in the SmartPunct and Attributes extensions
### Impact Two first-party extensions contain quadratic parsing paths. Both ship with the library but must be explicitl
league/commonmark XSS: `on*` event-handler filter in `AttributesExtension` bypassed with a U+000C form feed
### Summary The `AttributesExtension` documents a security guarantee: > **Note:** Attributes starting with `on` (e.g.
league/commonmark: Denial of service via crafted code fences, reference links, and emphasis delimiters
### Impact Affected versions of `league/commonmark` perform super-linear work on three independent parsing paths, all o
tornado: multipart split() creates huge temp list before max_parts check -> memory amplification DoS (httputil.py:34)
## Description ### Summary `parse_multipart_form_data` (httputil.py:34) calls `data.split(b"--"+boundary+b"\r\n")` **b
Tornado: Incomplete fix for CVE-2026-35536: cookie attribute injection re-opened via the legacy case-insensitive `**kwargs` path in `set_cookie`
## Summary The CVE-2026-35536 fix added a validation loop that rejects `[\x00-\x20\x3b\x7f]`, but only for the hardcoded
Mail: Email address spoofing via malformed RFC 2047 encoded-words
CVE-2026-63435
Mail is an internet library for Ruby designed to handle email generation, parsing, and sending. Prior to 2.9.1, Mail::Ut
Composer: Perforce source URL permits P4PORT `rsh:` command execution
CVE-2026-84361
Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and 2.10.3, a malicious dependency package
pypdf: Possible long runtimes/large memory usage when extracting XForm objects
CVE-2026-84311
pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/
pypdf: Possible infinite loop for TreeObject.insert_child
CVE-2026-84309
pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree
phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery
CVE-2026-84308
phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in ph
Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`
CVE-2026-73228
## Summary While investigating Django REST Framework's request parsing behavior, I identified that DRF's high-level `re
Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requests
CVE-2026-73229
Summary AdminRenderer may disclose data that would normally be protected by GET permissions when rendering a 400 Bad Re
nanoid: Integer Overflow or Wraparound
CVE-2026-73086
### Summary An integer overflow in `nanoid(size)` permanently corrupts the process-wide CSPRNG pool, causing all subseq
pnpm: Environment secrets exfiltrated via env-placeholder expansion in proxy settings read from an untrusted pnpm-workspace.yaml
## Summary pnpm expands `${VAR}` environment placeholders in the `httpProxy` / `httpsProxy` / `noProxy` settings read f
Filament: Password validity disclosure for accounts denied panel access on login page
CVE-2026-84307
Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.12.5 and 5.7.5
Filament: Multi-factor authentication (app) codes can still be used after a newer code has been used
CVE-2026-84306
Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.12.6 and 5.7.6
pnpm: pacquet trust-lockfile install can create dependency symlinks outside the project
## Summary A crafted lockfile alias could reach several install-time filesystem joins. With `--trust-lockfile` or a fro
Appium: Reflected XSS / arbitrary JS in @appium/base-driver /test/guinea-pig* routes
CVE-2026-58191
## Summary Appium's base-driver mounts the built-in `/test/guinea-pig`, `/test/guinea-pig-scrollable` and `/test/guinea