NVIDIA Triton Inference Server contains a vulnerability in the DALI backend, where an attacker could cause uncontrolled resource consumption. A successful exploit of this vulner...

CVE-2026-24215

NVIDIA Triton Inference Server contains a vulnerability in the DALI backend, where an attacker could cause uncontrolled

历史摘要 · 未重新核验 · NVD

SQLFluff: Uncontrolled Resource Consumption in SQLFluff Parser

CVE-2026-46374

### Impact In deployments where untrusted users can provide SQL queries to be linted, an untrusted user can submit a ma

历史摘要 · 未重新核验 · GitHub Advisory

@libp2p/kad-dht: Unvalidated PUT_VALUE records allow unbounded disk exhaustion on DHT server nodes

CVE-2026-45783

### Summary An unauthenticated remote peer can exhaust the disk storage of any `@libp2p/kad-dht` node running in server

历史摘要 · 未重新核验 · GitHub Advisory

Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderb...

CVE-2026-8968

Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firef

历史摘要 · 未重新核验 · NVD

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Versions 0.4.2 through 0.6.51 are vulnerable to an una...

CVE-2026-33232

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agent

历史摘要 · 未重新核验 · NVD

ImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustion

CVE-2026-46522

Due to a missing check in the MIFF decoder a crafted file could cause an infinite loop resulting in CPU exhaustion.

历史摘要 · 未重新核验 · GitHub Advisory

ImageMagick: Policy Bypass in MNG coder could

CVE-2026-45664

Because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would al

历史摘要 · 未重新核验 · GitHub Advisory

OpenTelemetry eBPF Instrumentation: Unbounded BPF internal metrics replay can exhaust CPU

CVE-2026-45680

### Summary OBI replays BPF probe hits into histogram observations by looping once per recorded run count. On busy syst

历史摘要 · 未重新核验 · GitHub Advisory

In tinyMQTT commit 6226ade15bd4f97be2d196352e64dd10937c1962 (2024-02-18), the broker mishandles...

CVE-2025-56352

In tinyMQTT commit 6226ade15bd4f97be2d196352e64dd10937c1962 (2024-02-18), the broker mishandles protocol violations duri

历史摘要 · 未重新核验 · GitHub Advisory

ImageMagick: Policy Bypass in PSD decoder

CVE-2026-45031

Due to a missing check in the PSD decoder it would be possible to bypass the `list-length` resource policy when decoding

历史摘要 · 未重新核验 · GitHub Advisory

iskorotkov/avro: CPU Exhaustion in Decoder

CVE-2026-46385

# CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration ## Summary The Avro array and map decoders looped

历史摘要 · 未重新核验 · GitHub Advisory

brace-expansion: Large numeric range defeats documented `max` DoS protection

CVE-2026-45149

The `max` option was being applied too late: When expanding a single large numeric range like `{1..10000000}`, the sequ

历史摘要 · 未重新核验 · GitHub Advisory

In tinyMQTT commit 6226ade15bd4f97be2d196352e64dd10937c1962 (2024-02-18), the broker mishandles protocol violations during CONNECT packet parsing. When receiving a CONNECT packe...

CVE-2025-56352

In tinyMQTT commit 6226ade15bd4f97be2d196352e64dd10937c1962 (2024-02-18), the broker mishandles protocol violations duri

历史摘要 · 未重新核验 · NVD

iskorotkov/avro: Denial-of-Service Vulnerability in Decoder

# Memory Exhaustion via Unbounded Map Allocations in Avro Decoder ## Summary The Avro map decoder accepted attacker-co

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function...

CVE-2026-8769

A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler/createJsonErrorResponseHandler of the file packages/prov...

CVE-2026-8769

A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler

历史摘要 · 未重新核验 · NVD

An issue in Nodemailer smtp_server before v.3.18.3 allows a remote attacker to cause a denial of...

CVE-2026-38728

An issue in Nodemailer smtp_server before v.3.18.3 allows a remote attacker to cause a denial of service via the SMTPStr

历史摘要 · 未重新核验 · GitHub Advisory

An issue in Nodemailer smtp_server before v.3.18.3 allows a remote attacker to cause a denial of service via the SMTPStream._write, lib/smtp-stream.js components

CVE-2026-38728

An issue in Nodemailer smtp_server before v.3.18.3 allows a remote attacker to cause a denial of service via the SMTPStr

历史摘要 · 未重新核验 · NVD

Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.4.0rc2, the twisted.names module is vulnerable to a Denial of Service (DoS) at...

CVE-2026-42304

Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.4.0rc2, the twisted.n

历史摘要 · 未重新核验 · NVD

Using the $__timeGroup macro, one can achieve an OOM by overloading the server. This requires a SQL datasource. If the server is set up to auto-restart, the impact is minimal or...

CVE-2026-33378

Using the $__timeGroup macro, one can achieve an OOM by overloading the server. This requires a SQL datasource. If the s

历史摘要 · 未重新核验 · NVD