kin-openapi deepObject query decoding repeatedly compiles an invariant regular expression
CVE-2026-100350
### Summary `openapi3filter` decodes `deepObject`-style query parameters by looping over **every** key in the request's
#cwe-1050
共收录 10 条相关情报。
← 返回所有主题A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and memory exhaustion.
CVE-2026-94287
A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attacke
Denial of service via unsigned underflow in libXpm's write path
CVE-2026-94287
A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attacke
league/commonmark: Denial of service via distinctly-named attributes in the Attributes extension
### Impact `AttributesExtension` ships with the library but must be explicitly registered on the `Environment`; it is n
league/commonmark: Denial of service in the SmartPunct and Attributes extensions
### Impact Two first-party extensions contain quadratic parsing paths. Both ship with the library but must be explicitl
league/commonmark: Denial of service via crafted code fences, reference links, and emphasis delimiters
### Impact Affected versions of `league/commonmark` perform super-linear work on three independent parsing paths, all o
Sieve CPU resource usage is tracked in the compiled script, so an attacker that has valid credentials can reset the accounting by repeatedly changing the active script. Compiled...
CVE-2026-52681
Sieve CPU resource usage is tracked in the compiled script, so an attacker that has valid credentials can reset the acco
league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 0.6.0 until 2.9.0, specially crafted Markdown lines can cause the parser to have quadratic...
CVE-2026-71488
league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 0.6.0 until 2.9.0, specially craf
league/commonmark: Quadratic-time denial of service when parsing crafted Markdown
CVE-2026-71488
### Impact Affected versions of `league/commonmark` can have quadratic time complexity when parsing specially crafted M
league/commonmark: Quadratic-time denial of service when parsing crafted Markdown
CVE-2026-71488
league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 0.6.0 until 2.9.0, specially craf