#cwe-1333

共收录 223 条相关情报。

漏洞预警2026-07-14 发布INFO

linkify-it is a links recognition library with full Unicode support. Prior to 5.0.1, LinkifyIt.prototype.match, the package's primary public API, has O(N²) algorithmic complexit...

CVE-2026-48801

linkify-it is a links recognition library with full Unicode support. Prior to 5.0.1, LinkifyIt.prototype.match, the pack

历史摘要 · 未重新核验 · NVD

#cve #cwe-1333

漏洞预警2026-07-14 发布INFO

UAParser.js is a JavaScript library to detect browsers, operating systems, CPUs, and devices from user-agent data. From 2.0.1 until 2.0.10, a regular expression denial-of-servic...

CVE-2026-48125

UAParser.js is a JavaScript library to detect browsers, operating systems, CPUs, and devices from user-agent data. From

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-1333

安全公告2026-07-14 发布INFO

UAParser.js: Unbounded `Sec-CH-UA-Model` parsing can trigger ReDoS in `withClientHints()`

CVE-2026-48125

UAParser.js is a JavaScript library to detect browsers, operating systems, CPUs, and devices from user-agent data. From

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1333 #cwe-400

安全公告2026-07-14 发布INFO

Soup Sieve: Regular Expression Denial of Service (ReDoS) in soupsieve Selector Parser

CVE-2026-49477

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1333 #cwe-400

安全公告2026-07-14 发布INFO

linkify-it: Quadratic algorithmic complexity in LinkifyIt#match scan loop

CVE-2026-48801

linkify-it is a links recognition library with full Unicode support. Prior to 5.0.1, LinkifyIt.prototype.match, the pack

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1333

漏洞预警2026-07-14 发布INFO

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, Symfony\Component\Yaml\Parser::cle...

CVE-2026-45305

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.4

历史摘要 · 未重新核验 · NVD

#cve #cwe-1333

漏洞预警2026-07-14 发布INFO

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, when the parser is exposed to atta...

CVE-2026-45133

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.4

历史摘要 · 未重新核验 · NVD

#cve #cwe-674 #cwe-776 #cwe-1333

漏洞预警2026-07-14 发布INFO

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 7.3.0-BETA1 until 7.4.12 and 8.0.12, the JsonPath component compiles attac...

CVE-2026-45756

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 7.3.0-BETA1 until

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-1333

漏洞预警2026-07-13 发布INFO

Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to validate the length and content of message attachment field values, which allows an authentic...

CVE-2026-6850

Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to validate the length and content of m

历史摘要 · 未重新核验 · NVD

#cve #cwe-1333

漏洞预警2026-07-10 发布INFO

Phalcon is a high-performance, full-stack PHP framework. Prior to 5.15.0, every Phalcon MVC application built with a default router registers a built-in route whose compiled PCR...

CVE-2026-57584

Phalcon is a high-performance, full-stack PHP framework. Prior to 5.15.0, every Phalcon MVC application built with a def

历史摘要 · 未重新核验 · NVD

#cve #cwe-1333

安全公告2026-07-09 发布INFO

Mistune: Potential DoS via quadratic-time parsing in parse_link_text

CVE-2026-49851

### Summary Mistune is vulnerable to a CPU exhaustion DoS due to superlinear (approximately O(n²)) behavior in parse_lin

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-400 #cwe-1333 #severity:high

安全公告2026-07-09 发布INFO

YesWiki has Unsafe eval() in its Formula Calculato, Leading to Remote Code Execution & Denial of Service

CVE-2026-52778

### Summary An unsafe execution vulnerability exists in the Bazar form field calculator (CalcField.php) of YesWiki. The

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-94 #cwe-1333 #severity:critical

漏洞预警2026-07-09 发布INFO

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.2 before 0.10.0, the SKILL_MENTION_RE and strip_re regular expressions in backend/...

CVE-2026-59220

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.2 before 0.10.0, the SKIL

历史摘要 · 未重新核验 · NVD

#cve #cwe-1333

安全公告2026-07-09 发布INFO

Open WebUI: ReDoS in skill-mention regexes causes whole-instance DoS on default config

CVE-2026-59220

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.2 before 0.10.0, the SKIL

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1333

漏洞预警2026-07-08 发布INFO

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.10, the fix for CVE-2026-45367 incompletely patched the DST...

CVE-2026-55470

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.10

历史摘要 · 未重新核验 · NVD

#cve #cwe-1333

安全公告2026-07-08 发布INFO

A flaw was found in `guardrails-detectors`, a component of Red Hat OpenShift AI. This...

CVE-2026-15154

A flaw was found in `guardrails-detectors`, a component of Red Hat OpenShift AI. This vulnerability, known as Regular Ex

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-1333 #severity:medium

安全公告2026-07-08 发布INFO

HAPI FHIR: DSTU2 FHIRPathEngine.matches() missing RegexTimeout protection allows ReDoS

CVE-2026-55470

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.10

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1333

漏洞预警2026-07-08 发布INFO

A flaw was found in `guardrails-detectors`, a component of Red Hat OpenShift AI. This vulnerability, known as Regular Expression Denial of Service (ReDoS), allows a remote attac...

CVE-2026-15154

A flaw was found in `guardrails-detectors`, a component of Red Hat OpenShift AI. This vulnerability, known as Regular Ex

历史摘要 · 未重新核验 · NVD

#cve #cwe-1333

漏洞预警2026-07-08 发布INFO

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a Markdown document containing many repeated or distinct reference-link definitions causes quadra...

CVE-2026-59928

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a Markdown document containing many repe

历史摘要 · 未重新核验 · NVD

#cve #cwe-407 #cwe-1333

漏洞预警2026-07-08 发布INFO

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, long sequences of well-formed double-asterisk or triple-asterisk emphasis pairs around a characte...

CVE-2026-59925

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, long sequences of well-formed double-ast

历史摘要 · 未重新核验 · NVD

#cve #cwe-407 #cwe-1333