共收录 308 条相关情报。
← 返回所有主题CVE-2026-102496
Apache XmlSchema doesn't limit how deeply schema structures can be nested when it builds its schema model, so a maliciou
CVE-2026-102495
Apache XmlSchema doesn't limit how deeply schema imports and includes can be nested, so a malicious schema can make pars
CVE-2026-102281
Nest is a framework for building scalable Node.js server-side applications. Prior to 11.2.4 and 12.0.2, a single message
CVE-2026-102278
The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3
CVE-2026-102276
The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3
CVE-2026-102265
PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWS._load in jwt/api_jws.py is
CVE-2026-100702
Nodemailer before 10.0.2 fails to properly flatten deeply nested arrays in recipient fields such as to, cc, and bcc, all
CVE-2026-100702
Nodemailer before 10.0.2 fails to properly flatten deeply nested arrays in recipient fields such as to, cc, and bcc, all
CVE-2026-100702
Nodemailer before 10.0.2 fails to properly flatten deeply nested arrays in recipient fields such as to, cc, and bcc, all
CVE-2026-95844
Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, Moquette does not limit the depth of topic names and topic
CVE-2026-85724 · CVE-2026-95842 · CVE-2026-95843 · CVE-2026-95845 · CVE-2026-95846 · CVE-2026-95847 · CVE-2026-95848 · CVE-2026-95844
Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, Moquette does not limit the depth of topic names and topic
CVE-2026-78253
Uncontrolled recursion in QXmlStreamReader::readElementText() in Qt Group Qt allows attackers to cause a denial of servi
CVE-2026-95861
A malicious actor with access to the network could exploit an Uncontrolled Recursion vulnerability found in certain UniF
CVE-2026-75655
Bridge is affected by an Uncontrolled Recursion vulnerability that could result in arbitrary code execution in the conte
CVE-2026-63386
js-toml is a TOML parser for JavaScript. Prior to 1.1.3, load() does not bound nesting or dotted-key depth in the recurs
CVE-2026-63386
js-toml is a TOML parser for JavaScript. Prior to 1.1.3, load() does not bound nesting or dotted-key depth in the recurs
CVE-2026-61551
Icinga 2 is an open source monitoring system. Prior to 2.14.9, 2.15.4, and 2.16.2, parsing deeply nested JSON can exhaus
CVE-2026-61551
Icinga 2 is an open source monitoring system. Prior to 2.14.9, 2.15.4, and 2.16.2, parsing deeply nested JSON can exhaus
CVE-2026-93687
braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attack
CVE-2026-68914
Mojolicious is a real-time web framework for Perl. Prior to 9.47, the pure-Perl implementation of Mojo::JSON does not li