共收录 1383 条相关情报。
← 返回所有主题CVE-2026-48834
Improper Handling of Length Parameter Inconsistency vulnerability in Apache Answer. This issue affects Apache Answer: t
CVE-2026-70489
## Summary In every affected release, automation recurrence parsing anchors minutely and hourly rules at a fixed date of
CVE-2026-58042
A flaw in Node.js can cause dns.resolveAny() Aborts the Node.js Process When a DNS Response Contains More Than 256 A Rec
CVE-2026-56846
A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable remote memor
CVE-2026-58045
A flaw in Node.js allows a spoofed `TypedArray` `byteLength` to trigger a reachable assertion in the synchronous `node:z
CVE-2026-58045
CVE-2026-58045 是 Node.js 中的一个拒绝服务（DoS）漏洞。攻击者可以利用伪造的 TypedArray 的 byteLength 属性，触发同步 node:zlib API 中可到达的断言失败，导致整个 Node.js
CVE-2026-58042
CVE-2026-58042 是 Node.js 中发现的一个拒绝服务（DoS）漏洞，具体存在于 dns.resolveAny() 函数中。当该函数处理的 DNS 响应包含超过 256 条 A 记录时，Node.js 进程会异常中止（abo
CVE-2026-56846
CVE-2026-56846 是 Node.js 中一个与 HTTP/2 处理相关的安全漏洞。该漏洞源于 HTTP/2 保留的头部块（retained header blocks）未能正确计入 maxSessionMemory 限制，导致远
CVE-2026-69249
python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to
CVE-2026-69249
### Summary When resolving invalid certificate chains that include duplicate copies of self-signed certificates, the pro
CVE-2026-69244
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.3, an out-of-bounds heap r
CVE-2026-69244
### Summary An out-of-bounds heap read could occur in the C response parser while building an error message for a malfo
CVE-2026-69152
The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3
CVE-2026-69152
### Summary The `maxLength` mitigation added in `5.0.8` for GHSA-mh99-v99m-4gvg / CVE-2026-14257 is incomplete. It boun
CVE-2026-67318
axios versions >=1.13.0 (Node.js HTTP adapter) fail to enforce the configured maxBodyLength limit on streamed request bo
CVE-2026-67313
axios versions 0.28.0 and later contain uncontrolled recursion in formDataToJSON when processing FormData field names wi
CVE-2026-67312
axios versions from 0.28.0 before 0.33.0 and from 1.0.0 before 1.18.0 contain uncontrolled recursion in formDataToJSON (
CVE-2026-67318
axios versions >=1.13.0 (Node.js HTTP adapter) fail to enforce the configured maxBodyLength limit on streamed request bo
CVE-2026-67313
axios versions 0.28.0 and later contain uncontrolled recursion in formDataToJSON when processing FormData field names wi
CVE-2026-67312
axios versions from 0.28.0 before 0.33.0 and from 1.0.0 before 1.18.0 contain uncontrolled recursion in formDataToJSON (