decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input

CVE-2026-45822

### Impact An attacker who can supply input to `decodeUriComponent()` (directly or via a dependency that uses this packa

历史摘要 · 未重新核验 · GitHub Advisory

Attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU when applications pass unbounded input to ...

CVE-2026-18503

Attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume si

历史摘要 · 未重新核验 · NVD

Nerdbank.MessagePack has Inefficient CPU Computation

### Impact Applications that call `OptionalConverters.WithExpandoObjectConverter` and deserialize untrusted data are op

历史摘要 · 未重新核验 · GitHub Advisory