A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability...
CVE-2026-86513
A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability affects the function Tr
#cwe-400
共收录 1367 条相关情报。
← 返回所有主题A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this...
CVE-2026-86511
A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this vulnerability is the function BigDe
A security vulnerability has been detected in vgmstream up to r2117. Impacted is the function add_entry of the file src/meta/txtp_parser.c of the component txtp. Such manipulati...
CVE-2026-86515
A security vulnerability has been detected in vgmstream up to r2117. Impacted is the function add_entry of the file src/
A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability affects the function TreePointer.tokensFromInput of the file src/main/java/com/g...
CVE-2026-86513
A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability affects the function Tr
A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this vulnerability is the function BigDecimal.toPlainString of the file src/main/java/com/github/...
CVE-2026-86511
A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this vulnerability is the function BigDe
A vulnerability has been found in java-json-tools json-patch up to 1.13. Affected by this...
CVE-2026-86319
A vulnerability has been found in java-json-tools json-patch up to 1.13. Affected by this vulnerability is the function
A vulnerability has been found in java-json-tools json-patch up to 1.13. Affected by this vulnerability is the function JsonPatch.apply of the file src/main/java/com/github/fge/...
CVE-2026-86319
A vulnerability has been found in java-json-tools json-patch up to 1.13. Affected by this vulnerability is the function
java-json-tools json-patch Patch Operation JsonPatch.java JsonPatch.apply resource consumption
CVE-2026-86319
A vulnerability has been found in java-json-tools json-patch up to 1.13. Affected by this vulnerability is the function
Affected versions of MISP permit unauthenticated or weakly constrained request paths to perform persistent work without adequate input bounds or rate limiting. The users/forgo...
CVE-2026-86452
Affected versions of MISP permit unauthenticated or weakly constrained request paths to perform persistent work without
ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted MSL image triggers memory allocation without proper deallocation, allowing a...
CVE-2026-86421
ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted MSL image triggers
ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache fails. Repeated triggering of such failures can exhau...
CVE-2026-86420
ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCa
PocketMine-MP before 3.26.5 and 4.0.x before 4.0.5 does not limit book page text length, page count, or author/title length. A player who obtains a writable book can create over...
CVE-2022-51018
PocketMine-MP before 3.26.5 and 4.0.x before 4.0.5 does not limit book page text length, page count, or author/title len
MISP Unauthenticated Mail Endpoints Allow Unbounded Storage Consumption and Request Flooding
CVE-2026-86452
Affected versions of MISP permit unauthenticated or weakly constrained request paths to perform persistent work without
PocketMine-MP before 3.26.5 Input Validation via Book Pages
CVE-2022-51018
PocketMine-MP before 3.26.5 and 4.0.x before 4.0.5 does not limit book page text length, page count, or author/title len
ImageMagick before 7.1.2-30 Memory Leak via MSL decoder
CVE-2026-86421
ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted MSL image triggers
ImageMagick before 7.1.2-30 Denial of Service Memory Budget
CVE-2026-86420
ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCa
Affected versions of MISP allow any authenticated user to access TemplatesController::uploadFile() because the ACL entry for templates/uploadFile used the wildcard *. This bypas...
CVE-2026-86347
Affected versions of MISP allow any authenticated user to access TemplatesController::uploadFile() because the ACL entry
MISP Missing Authorization on Template File Upload Allows Authenticated Disk Exhaustion
CVE-2026-86347
Affected versions of MISP allow any authenticated user to access TemplatesController::uploadFile() because the ACL entry
vLLM: ReDoS via structured_outputs.regex in the lm-format-enforcer backend (no compile timeout) — missed sibling of GHSA-rwxx-mrjm-wc2m
CVE-2026-73556
### Summary The fix for `GHSA-rwxx-mrjm-wc2m` ("ReDoS via `structured_outputs.regex` compiled without timeout") wrapped
vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds
CVE-2026-71486
## Summary The `/v1/completions/derender` and `/v1/chat/completions/derender` endpoints accept caller-supplied `Generat