共收录 169 条相关情报。
← 返回所有主题CVE-2026-114136
Django REST framework is a toolkit for building Web APIs. From 3.6.4 until 3.18.2, JSONParser.parse in rest_framework/pa
CVE-2026-114136
Django REST framework is a toolkit for building Web APIs. From 3.6.4 until 3.18.2, JSONParser.parse in rest_framework/pa
CVE-2026-92823
A flaw was found in libmodulemd. In builds with rpmio support enabled, compressed modulemd YAML is decompressed through
CVE-2026-90797
An unlimited gzip decompression routine in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any remote c
CVE-2026-112892
Pillow is a Python imaging library. From 4.1.0 until 13.0.0, Pillow's MSP RLE decoder can expand a small file into an un
CVE-2026-111924
Fleet before 4.83.0 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server m
CVE-2026-95502
A Git server that Grafana's Git Sync (provisioning) is configured to use can exhaust Grafana's memory by returning overs
CVE-2026-97334
The network messaging layer contained improper handling of highly compressed data affecting service availability. Softw
CVE-2026-109324
Grav before 2.1.7 contains a denial of service vulnerability that allows authenticated media authors to exhaust memory b
CVE-2026-105274
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex_core allows an untrusted rep
CVE-2026-96618
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex allows an untrusted package
CVE-2026-109398
Gumlet php-image-resize before 3.0.1 contains a denial of service vulnerability because the ImageResize constructor in l
CVE-2026-109229
SGLang through 0.5.21 contains a denial of service vulnerability that disables Pillow decompression bomb protection proc
CVE-2026-109226
SGLang through 0.5.21 contains a decompression amplification vulnerability in load_audio that allows remote attackers to
CVE-2026-108750
OpenDocMan 2.4.0 through 2.10.0 contains a decompression bomb vulnerability that allows authenticated users to exhaust P
CVE-2026-108750
OpenDocMan 2.4.0 through 2.10.0 contains a decompression bomb vulnerability that allows authenticated users to exhaust P
CVE-2026-91979
### Summary Vikunja lets you export your data as a zip and import it back. The import doesn't limit how large the archiv
CVE-2026-106585
In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decom
CVE-2026-106585
In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decom
CVE-2026-105747
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos