Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 937d0e9, an assertion failure is raised when the total numb...

CVE-2026-44435

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 93

历史摘要 · 未重新核验 · NVD

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 8b178e6, an adversarial peer could send a STREAM frame carr...

CVE-2026-44433

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 8b

历史摘要 · 未重新核验 · NVD

Quicly: Remote Denial of Service via assertion failure when CRYPTO stream handshake data exceeds 32KB

CVE-2026-44435

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 93

历史摘要 · 未重新核验 · OSV.dev

Quicly is vulnerable to memory exhaustion

CVE-2026-44433

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 8b

历史摘要 · 未重新核验 · OSV.dev

Docling Core defines core data types and transformations for the document processing application Docling. In versions 2.5.0 and above, prior to 2.74.1, docling-core could allow ...

CVE-2026-44019

Docling Core defines core data types and transformations for the document processing application Docling. In versions 2.

历史摘要 · 未重新核验 · NVD

Docling Core has insufficient validation of image reference URIs

CVE-2026-44019

Docling Core defines core data types and transformations for the document processing application Docling. In versions 2.

历史摘要 · 未重新核验 · OSV.dev

Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions support. Prior to 0.8.0, the decode_unknown_field function in buffa's protobuf decoder al...

CVE-2026-55407

Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions support. Prior to 0.8.0, the dec

历史摘要 · 未重新核验 · NVD

Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.7, the COMMAND_RESULTS handler in ufo/server/ws/handler.py called get_o...

CVE-2026-55440

Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.7, the COMMAND

历史摘要 · 未重新核验 · NVD

Buffa: Memory Exhaustion Denial of Service in decode_unknown_field via Unbounded Allocation

CVE-2026-55407

Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions support. Prior to 0.8.0, the dec

历史摘要 · 未重新核验 · OSV.dev

Microsoft UFO: COMMAND_RESULTS handler creates unowned sessions, allowing authenticated session-squatting denial of service

CVE-2026-55440

Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.7, the COMMAND

历史摘要 · 未重新核验 · OSV.dev

adawolfa/isdoc: Uncontrolled resource consumption (decompression bomb) when reading untrusted ISDOCX or PDF files

### Impact `adawolfa/isdoc` reads ISDOC invoices from ISDOCX (ZIP) archives and from PDF files with embedded ISDOC docu

历史摘要 · 未重新核验 · GitHub Advisory

Pomerium Pre-Auth Memory Exhaustion via Unbounded zstd Decompression in HPKE Callback

CVE-2026-50285

## Summary The HPKE V2 URL decode path in `pkg/hpke/url.go` decompresses attacker-controlled zstd data without any size

历史摘要 · 未重新核验 · GitHub Advisory

dd-trace-rb: Improper parsing of W3C baggage headers may lead to DoS

CVE-2026-50276

### Impact Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without

历史摘要 · 未重新核验 · GitHub Advisory

dd-trace-go: Improper parsing of W3C baggage headers may lead to DoS

CVE-2026-50274

### Impact Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without

历史摘要 · 未重新核验 · GitHub Advisory

dd-trace-dotnet: Improper parsing of W3C baggage headers may lead to DoS

CVE-2026-50273

### Impact Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without

历史摘要 · 未重新核验 · GitHub Advisory

dd-trace-js: Improper parsing of W3C baggage headers may lead to DoS

CVE-2026-50272

### Impact Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without

历史摘要 · 未重新核验 · GitHub Advisory

dd-trace-py: Improper parsing of W3C baggage headers may lead to DoS

CVE-2026-50271

### Impact Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without

历史摘要 · 未重新核验 · GitHub Advisory

dd-trace-java: Improper parsing of W3C baggage headers may lead to DoS

CVE-2026-50270

### Impact Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without

历史摘要 · 未重新核验 · GitHub Advisory

Wekan is open source kanban built with Meteor. Prior to 9.31, Wekan allows a logged-in board member to insert an attachment document through the /attachments/insert DDP method w...

CVE-2026-52890

Wekan is open source kanban built with Meteor. Prior to 9.31, Wekan allows a logged-in board member to insert an attachm

历史摘要 · 未重新核验 · NVD

An issue in EMQ NanoMQ v.0.24.9 allows a remote attacker to cause a denial of service via the nni_qos_db_set function in broker_tcp.c component

CVE-2026-36590

An issue in EMQ NanoMQ v.0.24.9 allows a remote attacker to cause a denial of service via the nni_qos_db_set function in

历史摘要 · 未重新核验 · NVD