#cwe-1124

共收录 6 条相关情报。

← 返回所有主题
安全公告2026-10-16 发布INFO

lopdf has a stack overflow via deeply nested PDF objects

`lopdf::Document::load_mem` (and the other `load*` entry points) parses nested PDF arrays and dictionaries with unbounde

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-25 发布INFO

eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, eml_parser.rout...

CVE-2026-55620

eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, eml_parser.pars...

CVE-2026-55619

eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well

历史摘要 · 未重新核验 · NVD

安全公告2026-08-25 发布INFO

eml_parser vulnerable to DoS via deeply nested parens in Received headers

CVE-2026-55620

### Summary `eml_parser` strips parenthesised CFWS comments from `Received:` headers using a regex-based fix-point loop

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-25 发布INFO

eml_parser has parser DoS via deeply nested parentheses in e-mail headers

CVE-2026-55619

### Summary `eml_parser` uses the `email.utils.getaddresses()` function from the CPython standard library to parse e-ma

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-26 发布INFO

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, destructor of JSON Object results in stack o...

CVE-2026-48042

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3,

历史摘要 · 未重新核验 · NVD