netty-incubator-codec-ohttp BinaryHttpParser: Unauthenticated CPU-exhaustion DoS via infinite loop in field-section decoding

CVE-2026-63202

# BinaryHttpParser: Unauthenticated CPU-exhaustion DoS via infinite loop in field-section decoding - **ID:** BHTTP-LOOP

历史摘要 · 未重新核验 · GitHub Advisory

Winter: Local File Inclusion through @import directives in LESS compilation of backend customizable stylesheets and theme assets

CVE-2026-63179

### Impact Affected versions of Winter CMS allow authenticated backend users with the following permissions to disclose

历史摘要 · 未重新核验 · GitHub Advisory

netty-incubator-codec-ohttp: BinaryHttpParser should enforce limits for variable lengths fields

CVE-2026-61827

We don't enforce any limits for the encoded variable lengths that are used for fields. As the remote peer controls these

历史摘要 · 未重新核验 · GitHub Advisory

netty-incubator-codec-ohttp: Binary HTTP parser infinite loop on known-length field section boundary

CVE-2026-63124

## Summary `io.netty.incubator:netty-incubator-codec-bhttp` can enter a non-terminating parse loop when a known-length

历史摘要 · 未重新核验 · GitHub Advisory

netty-incubator-codec-ohttp: Binary HTTP parser unchecked varint length overflow causes decoder crash

CVE-2026-61799

## Summary `io.netty.incubator:netty-incubator-codec-bhttp` uses attacker-controlled Binary HTTP variable-length intege

历史摘要 · 未重新核验 · GitHub Advisory

netty-incubator-codec-ohttp: BoringSSL HPKE private key bytes exposed through toString() and exception messages

CVE-2026-61798

## Summary `io.netty.incubator:netty-incubator-codec-ohttp-hpke-classes-boringssl` exposes raw HPKE private key bytes i

历史摘要 · 未重新核验 · GitHub Advisory

django CMS: Missing authorization in `render_object_structure` discloses non-PageContent placeholder structure to low-privileged staff

CVE-2026-61663

## Summary The django-cms frontend-editing structure endpoint ``` GET //admin/cms/placeholder/object//structure// ```

历史摘要 · 未重新核验 · GitHub Advisory

django CMS: Broken access control in page *Duplicate* allows reading the content of any page (cross-site / restriction bypass)

CVE-2026-63003

## Impact The only authorization gate on the duplicate flow is `PageAdmin.has_add_permission`, which checks `user_can_a

历史摘要 · 未重新核验 · GitHub Advisory

django CMS: Stored XSS in edit-mode plugin exception rendering

CVE-2026-75526

## Summary When plugin rendering fails in edit mode, django CMS renders a `cms-rendering-exception` block so editors ca

历史摘要 · 未重新核验 · GitHub Advisory

Laravel Backpack CRUD: HasMany/MorphMany relation fields allow cross-tenant record re-parenting (IDOR) via attachManyRelation

CVE-2026-57570

## Vulnerability Details Affected area: HasMany / MorphMany relation handling during CRUD create and update operations

历史摘要 · 未重新核验 · GitHub Advisory

Wagtail: Improper restriction handling on Pages admin API

CVE-2026-55468

### Impact The internal Pages admin [API](https://docs.wagtail.org/en/stable/advanced_topics/api/index.html) incorrectl

历史摘要 · 未重新核验 · GitHub Advisory

NocoBase: Arbitrary File Write chained with Local file Inclusion leads to Remote code execution

## Executive Summary Two vulnerabilities were identified and chained to achieve authenticated remote code execution Th

历史摘要 · 未重新核验 · GitHub Advisory

django CMS: Structure endpoint bypasses page-view permission

CVE-2026-54624

### Summary The structure-board endpoint (`render_object_structure`) renders a page's plugin structure without verifying

历史摘要 · 未重新核验 · GitHub Advisory

libgit2: HTTP transport can leak credentials to an offsite redirect target

CVE-2026-53586

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing

历史摘要 · 未重新核验 · OSV.dev

Frappe: User Enumeration via PDDR

CVE-2026-66002

Frappe is a full-stack web application framework. Prior to 15.115.0 and 16.27.0, the public request-data web form and Pe

历史摘要 · 未重新核验 · OSV.dev

django CMS: Broken access control in page *Duplicate* allows reading the content of any page (cross-site / restriction bypass)

CVE-2026-63003

django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0

历史摘要 · 未重新核验 · OSV.dev

Libevent: HTTP header handling bugs create risk of access control bypass.

CVE-2026-63385

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has two HTTP parsing weaknesses in

历史摘要 · 未重新核验 · OSV.dev

Libevent: Dangling Pointer in `evbuffer_add_buffer_reference`

CVE-2026-63381

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a use-after-free in buffer.c wh

历史摘要 · 未重新核验 · OSV.dev

Libevent: Heap out-of-bounds write in bufferevent_socket_set_conn_address_ reachable via AF_UNIX accept

CVE-2026-63388

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of-bounds write in b

历史摘要 · 未重新核验 · OSV.dev

Mongoose: HTTP/1.0 detection off-by-one enables request smuggling via chunked TE

CVE-2026-73256

Mongoose is an embedded web server and network library. Prior to 7.22, a remote unauthenticated attacker can exploit an

历史摘要 · 未重新核验 · OSV.dev