共收录 308 条相关情报。
← 返回所有主题CVE-2026-118035
In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, inefficient al
CVE-2026-109413
### Description `Yaml\Parser::lexInlineStructure()` recursed through `lexInlineMapping()` and `lexInlineSequence()` for
CVE-2026-108331
Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.
CVE-2026-116871
Semantic MediaWiki 3.0.0 before 7.3.1 contains an uncontrolled recursion vulnerability in LegacyParser::getSubqueryDescr
CVE-2026-116586
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including sup
CVE-2026-65628
jose_jwk:shared_secret/2 (exposed in Elixir as JOSE.JWK.shared_secret/2) derives an ECDH shared secret from two JWKs. It
CVE-2026-116011
Crow before 1.3.4 contains an uncontrolled recursion vulnerability in crow::json::load() that allows remote unauthentica
CVE-2026-114605
dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.from_wire_parser follows attacker-controlled DNS compres
CVE-2026-66282
In EmberZNet 9.1.1 and earlier, a malformed Publish Billing Period command can result in a recursive function call that
CVE-2026-110974
The org.json parser in com.vaadin.external.google:android-json recurses once per nesting level with no depth limit: JSON
CVE-2026-54427
Uncontrolled recursion in the AMF parser in Apache bRPC < 1.18.0 allows a remote RTMP peer to crash a bRPC process by se
CVE-2026-54426
Uncontrolled recursion in the Redis reply parser in Apache bRPC < 1.18.0 allows a remote Redis server peer to crash a bR
CVE-2026-54425
Uncontrolled recursion in the HTTP/2 HPACK decoder in Apache bRPC before 1.18.0 allows remote attackers to cause denial
CVE-2026-92822
A flaw was found in libmodulemd. When parsing module metadata, the xmd field is converted into nested GVariant values th
CVE-2026-92391
A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal
CVE-2026-112895
### Summary When an application appends to an existing PDF with `Image.save(..., format="PDF", append=True)`, Pillow par
CVE-2026-113650
ApostropheCMS is an open-source Node.js content management system. In sanitize-html 2.18.0, when an is not allowed and
CVE-2026-112895
Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can exhaust resources while parsing an existing PDF
CVE-2026-110673
Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allow_tags in decod
CVE-2026-111923
Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that all