#cwe-400

共收录 1360 条相关情报。

漏洞预警2026-09-28 发布INFO

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.21, 2.1.7, 3.0.9, and 5.0.12, the expand function handles untrusted {...

CVE-2026-102277

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.21, 2.1.7, 3

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-407

漏洞预警2026-09-28 发布INFO

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted brace patterns can exhaust the ...

CVE-2026-102276

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-674

安全公告2026-09-28 发布INFO

jackson-databind: Duration XMLGregorianCalendar Unbounded Number Parse DoS

CVE-2026-68497

### Summary `jackson-databind` 3.2.1 deserializes a JSON **string** bound to a `javax.xml.datatype.Duration` or `javax.x

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #maven #cwe-400 #severity:high

安全公告2026-09-28 发布INFO

A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affected by...

CVE-2026-101098

A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affected by this issue is the funct

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-400 #severity:medium

漏洞预警2026-09-28 发布INFO

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the Address6 constructor, Address6.isValid, and parse code in src/ip...

CVE-2026-101911

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the Address

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-770

漏洞预警2026-09-28 发布INFO

Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.0 until 1.20.0, Axios shouldBypassProxy applies a quadratic trailing-dot regular expression to redire...

CVE-2026-101906

Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.0 until 1.20.0, Axios shouldBypassProxy appl

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-1333

漏洞预警2026-09-28 发布INFO

Axios is a promise-based HTTP client for the browser and Node.js. From 1.13.0 until 1.20.0, Http2Sessions does not install adequate error handling for a ClientHttp2Session durin...

CVE-2026-101901

Axios is a promise-based HTTP client for the browser and Node.js. From 1.13.0 until 1.20.0, Http2Sessions does not insta

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

安全公告2026-09-28 发布INFO

ip-address: Address6 builds a parse diagnostic proportional to the input with no length bound, allowing a single long string to stall or crash the process

CVE-2026-101911

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the Address

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-400 #cwe-770

安全公告2026-09-28 发布INFO

Axios: ReDoS (O(N²)) in shouldBypassProxy host normalization, reachable via untrusted redirect Location

CVE-2026-101906

Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.0 until 1.20.0, Axios shouldBypassProxy appl

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1333 #cwe-400

漏洞预警2026-09-28 发布INFO

A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affected by this issue is the function readAllBytes of the file JdkAgentHttpHandler.java of ...

CVE-2026-101098

A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affected by this issue is the funct

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-404

安全公告2026-09-28 发布INFO

Axios: Denial of Service via Unhandled 'error' Event in HTTP/2 ClientHttp2Session Initialization

CVE-2026-101901

Axios is a promise-based HTTP client for the browser and Node.js. From 1.13.0 until 1.20.0, Http2Sessions does not insta

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-400

安全公告2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via...

CVE-2026-94399

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-400 #severity:medium

安全公告2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via...

CVE-2026-94397

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-400 #severity:medium

安全公告2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead denial of service via Excessive...

CVE-2026-94400

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead denial of service via Excessive Allocation (CAPEC-130)

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-400 #severity:medium

安全公告2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via...

CVE-2026-94408

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-400 #severity:medium

安全公告2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via...

CVE-2026-94398

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-400 #severity:medium

安全公告2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via...

CVE-2026-94396

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-400 #severity:medium

安全公告2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via...

CVE-2026-82294

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAP

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-400 #severity:medium

安全公告2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via...

CVE-2026-82300

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAP

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-400 #severity:medium

漏洞预警2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

CVE-2026-94408

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-

历史摘要 · 未重新核验 · NVD

#cve #cwe-400