Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)
CVE-2026-112894
``` ============================================================================ Quadratic-time DoS in PDF save_all (Pdf
#cwe-407
共收录 257 条相关情报。
← 返回所有主题Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion
CVE-2026-96640
Pillow is a Python imaging library. From 5.1.0 until 13.0.0, PdfParser.linearize_page_tree() in src/PIL/PdfParser.py tre
Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time
CVE-2026-96643
Pillow is a Python imaging library. From 11.0.0 until 13.0.0, Exif.load() in src/PIL/Image.py repeatedly slices the rema
Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()
CVE-2026-112401
``` ============================================================================ Quadratic GIF comment concatenation all
Pillow: Quadratic GIF comment copying during save
CVE-2026-112891
On Pillow 12.3.0 and upstream `main` (`ad277e2761b489681e71b51e91367d46b0ceabb9`), a GIF with a long comment makes `_get
toml-node: Quadratic-complexity DoS via long dotted keys or table paths in toml.parse()
CVE-2026-114143
toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() repeatedly slices and rejoins every
toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse()
CVE-2026-114141
toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, the toml.parse() compiler's addTableArray() func
Django REST framework: Accept header with many large quoted parameters burns ~19s of CPU per request in content negotiation
CVE-2026-114138
Django REST framework is a toolkit for building Web APIs. Prior to 3.18.2, DefaultContentNegotiation.get_accept_list in
stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. From 2.0.0 until 3.7.0, FlexAssembler compiles string and regu...
CVE-2026-114129
stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. From
stream-json: FlexAssembler string/RegExp path filters join the full key stack per container start, giving O(depth^2) CPU denial of service
CVE-2026-114129
stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. From
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF that causes large memory usage or long runtimes when an application retriev...
CVE-2026-113789
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF that causes large
Moov signedxml is a pure Go library for processing signed XML documents. Prior to 1.4.1, ExclusiveCanonicalization in exclusivecanonicalization.go copies the complete accumulate...
CVE-2026-113729
Moov signedxml is a pure Go library for processing signed XML documents. Prior to 1.4.1, ExclusiveCanonicalization in ex
markdown-it is a Markdown parser. From versions 14.1.0 to before 14.3.3, and 15.0.0 to before 15.0.3, a link reference definition whose label or title is never closed is O(n²) w...
CVE-2026-111758
markdown-it is a Markdown parser. From versions 14.1.0 to before 14.3.3, and 15.0.0 to before 15.0.3, a link reference d
markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options (regression since 14.0)
CVE-2026-111758
### Summary A link reference definition whose label or title is never closed is O(n²) in markdown-it 15.0.2 with defaul
markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled
CVE-2026-111766
### Summary With `html: true`, markdown-it takes quadratic time to parse repeated unterminated HTML constructs inside a
Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow takes quadratic time to reserve PDF object identifiers when saving many frames with save_all enabled. PdfPars...
CVE-2026-112894
Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow takes quadratic time to reserve PDF object identifie
Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow performs quadratic copying when saving a GIF with a long comment. _get_global_header() repeatedly copies port...
CVE-2026-112891
Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow performs quadratic copying when saving a GIF with a
Pillow is a Python imaging library. From 5.4.0 until 13.0.0, Pillow performs quadratic copying while parsing GIF comments. GifImageFile._seek() repeatedly appends immutable byte...
CVE-2026-112401
Pillow is a Python imaging library. From 5.4.0 until 13.0.0, Pillow performs quadratic copying while parsing GIF comment
Cpanel::JSON::XS versions from 4.51 before 4.80 for Perl allow quadratic CPU use by revalidating the remaining buffer per value in incr_parse. At the first non-ASCII byte in a ...
CVE-2026-110688
Cpanel::JSON::XS versions from 4.51 before 4.80 for Perl allow quadratic CPU use by revalidating the remaining buffer pe
containerd: Unpack DoS via repeated opaque whiteouts
CVE-2026-95838
### Impact A vulnerability exists in containerd's layer unpack handler where the processing of certain image layers cau