共收录 223 条相关情报。
← 返回所有主题CVE-2026-62672
Grav is a file-based Web platform. Prior to 2.0.4, Grav allowlists the regex_replace filter and function in system/confi
CVE-2026-74039
Wazuh 4.0.0 before 4.14.7 and 5.0.0-beta2 contain a denial of service vulnerability that allows authenticated attackers
CVE-2026-59893
### Summary sqlparse contains a Regular Expression Denial of Service (ReDoS) vulnerability in its dollar-quoted SQL lit
CVE-2026-54284
### Summary `sqlparse` ships hard limits (`MAX_GROUPING_DEPTH=100`, `MAX_GROUPING_TOKENS=10000`) intended to bound pars
CVE-2026-58436
ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests
CVE-2026-58436
ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests
CVE-2026-73556
vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the structured_outputs.regex paramet
CVE-2026-73556
vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the structured_outputs.regex paramet
CVE-2026-67991
crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular expression denial-o
CVE-2026-72912
CyberChef is a web app for encryption, encoding, compression, and data analysis. Prior to 11.3.0, CyberChef's pretty-rec
CVE-2026-69207
Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.34, the built-in COR
CVE-2026-67422
### Summary Four inline processors in pymdown-extensions contain regular expressions with exponential backtracking. A s
CVE-2026-66062
SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Prior to 2.70.2, the c
CVE-2026-66062
### Impact SvelteKit is vulnerable to remote CPU-exhaustion DoS attacks via specifically-crafted `Accept` headers. The i
CVE-2026-67422
pymdown-extensions is a collection of extensions for the Python Markdown library. In versions up to and including 11.0,
CVE-2026-67422
pymdown-extensions is a collection of extensions for the Python Markdown library. In versions up to and including 11.0,
CVE-2026-68749
Inefficient Regular Expression Complexity vulnerability in the CSS scrubber in rrrene html_sanitize_ex allows an unauthe
CVE-2026-68749
Inefficient Regular Expression Complexity vulnerability in the CSS scrubber in rrrene html_sanitize_ex allows an unauthe
CVE-2026-70493
## Summary The built-in knowledge search tools let a chat participant choose the pattern used to grep knowledge files. P
CVE-2026-70489
## Summary In every affected release, automation recurrence parsing anchors minutely and hourly rules at a fixed date of