Scriban before 7.0.0 (affected versions <= 6.6.0) contains a stack overflow vulnerability in...
CVE-2026-74792
Scriban before 7.0.0 (affected versions <= 6.6.0) contains a stack overflow vulnerability in nested array initializer pa
#cwe-674
共收录 308 条相关情报。
← 返回所有主题Scriban before 7.0.0 contains an uncontrolled recursion vulnerability in the object.to_json...
CVE-2026-74787
Scriban before 7.0.0 contains an uncontrolled recursion vulnerability in the object.to_json builtin function that lacks
Scriban versions 6.6.0 through 7.2.0 contain a non-enforcing ExpressionDepthLimit guard that...
CVE-2026-74783
Scriban versions 6.6.0 through 7.2.0 contain a non-enforcing ExpressionDepthLimit guard that fails to stop recursive des
Scriban before 6.6.0 contains an uncontrolled recursion vulnerability in its recursive-descent parser. The parser does not enforce a default expression depth limit (the Expressi...
CVE-2026-74795
CVE-2026-74795 影响 Scriban 6.6.0 之前的版本。Scriban 是一个常用于 .NET 环境的轻量级模板引擎。该漏洞源于其递归下降解析器未对模板表达式的嵌套深度进行默认限制（ParserOptions 中的 Ex
Scriban before 6.6.0 contains an infinite recursion vulnerability in object rendering when the ObjectRecursionLimit property defaults to unlimited. Attackers can supply circular...
CVE-2026-74794
CVE-2026-74794 是 Scriban 模板引擎中的一个拒绝服务漏洞，影响 6.6.0 之前的所有版本。漏洞根因在于对象渲染过程中，ObjectRecursionLimit 属性默认被设置为无限制（无限递归深度）。Scriban
Scriban before 7.0.0 (affected versions <= 6.6.0) contains a stack overflow vulnerability in nested array initializer parsing. Deeply nested array initializers recurse through a...
CVE-2026-74792
CVE-2026-74792 是 Scriban 模板引擎（一个流行的 .NET 模板解析库）中的一个拒绝服务漏洞。漏洞存在于 7.0.0 之前的所有版本（包括 6.6.0）。根本原因是嵌套数组初始化器的解析过程存在递归调用链：ParseA
Scriban before 7.0.0 contains an uncontrolled recursion vulnerability in the object.to_json builtin function that lacks depth limits and circular reference detection. Attackers ...
CVE-2026-74787
Scriban before 7.0.0 contains an uncontrolled recursion vulnerability in the object.to_json builtin function that lacks
Scriban versions 6.6.0 through 7.2.0 contain a non-enforcing ExpressionDepthLimit guard that fails to stop recursive descent parsing of deeply nested expressions. Attackers can ...
CVE-2026-74783
Scriban versions 6.6.0 through 7.2.0 contain a non-enforcing ExpressionDepthLimit guard that fails to stop recursive des
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service...
CVE-2026-17177
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to uncontrolled re
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.
CVE-2026-17177
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to uncontrolled re
A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request...
CVE-2026-72686
A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request containing a crafted user-
A flaw in Elasticsearch allows an authenticated user with the privileges required to invoke the...
CVE-2026-72683
A flaw in Elasticsearch allows an authenticated user with the privileges required to invoke the simulate pipeline API en
Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern...
CVE-2026-72679
Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an interva
A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request containing a crafted user-supplied input. A specific internal component validates t...
CVE-2026-72686
A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request containing a crafted user-
A flaw in Elasticsearch allows an authenticated user with the privileges required to invoke the simulate pipeline API endpoint (https://www.elastic.co/docs/api/doc/elasticsearch...
CVE-2026-72683
A flaw in Elasticsearch allows an authenticated user with the privileges required to invoke the simulate pipeline API en
Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an intervals query. Compiling a deeply nested pattern drives unboun...
CVE-2026-72679
Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an interva
Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads (CAPEC-230). An authenticated user holding only read pri...
CVE-2026-72647
Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads
Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153). An authenticated user holding only low-privileged index ...
CVE-2026-72638
Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153).
Uncontrolled Recursion (CWE-674) in the Elasticsearch wildcard matching helper can lead to a denial of service via Excessive Allocation (CAPEC-130). The matcher used to resolve ...
CVE-2026-72636
Uncontrolled Recursion (CWE-674) in the Elasticsearch wildcard matching helper can lead to a denial of service via Exces
node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.21, node-tar's filesFilter in src/list.ts uses the recursive mapHas helper to walk an archive entry path...
CVE-2026-73566
node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.21, node-tar's filesFilter in src/list.ts uses