#cwe-176

共收录 26 条相关情报。

← 返回所有主题
漏洞预警2026-06-10 发布INFO

FrankenPHP is a modern application server for PHP. From version 1.11.2 to before version 1.12.3, the splitPos() function in cgi.go misuses golang.org/x/text/search with search.I...

CVE-2026-45062

FrankenPHP is a modern application server for PHP. From version 1.11.2 to before version 1.12.3, the splitPos() function

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

SQLite 'sqldiff.exe' does not securely handle the way the Microsoft Windows C runtime converts Unicode characters to ANSI codepages. An attacker could use the '-L' option to lo...

CVE-2025-71316

SQLite 'sqldiff.exe' does not securely handle the way the Microsoft Windows C runtime converts Unicode characters to ANS

历史摘要 · 未重新核验 · NVD

安全公告2026-05-15 发布INFO

FrankenPHP: Unsafe Unicode Handling in CGI Path Splitting Allows Execution of Non-PHP Files

CVE-2026-45062

### Summary The `splitPos()` function in [`cgi.go`](https://github.com/php/frankenphp/blob/main/cgi.go) misuses `golang

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-13 发布INFO

protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs includes a minimal UTF-8 decoder that accepted overlong UTF-8 byte ...

CVE-2026-44288

protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs includes a

历史摘要 · 未重新核验 · NVD

安全公告2026-05-12 发布INFO

protobufjs has overlong UTF-8 decoding

CVE-2026-44288

## Summary protobufjs includes a minimal UTF-8 decoder used in non-Node and fallback decoding paths. The affected decod

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-27 发布INFO

Text::Minify::XS versions from v0.3.0 before v0.7.8 for Perl have a heap overflow when processing some malformed UTF-8 characters. The minify functions mishandled some malforme...

CVE-2026-7040

Text::Minify::XS versions from v0.3.0 before v0.7.8 for Perl have a heap overflow when processing some malformed UTF-8 c

历史摘要 · 未重新核验 · NVD