Seroval `fromJSON`/`fromCrossJSON` denial of service via unvalidated array node length
CVE-2026-116584
### Summary `fromJSON` and `fromCrossJSON` did not check that an array node's element list is an array. A small crafted
#cwe-770
共收录 1180 条相关情报。
← 返回所有主题Echo is a Go web framework. From 4.0.0 until 4.16.1, Echo v4's opt-in BodyDump middleware reads complete request bodies into memory before handlers run and retains complete resp...
CVE-2026-118260
Echo is a Go web framework. From 4.0.0 until 4.16.1, Echo v4's opt-in BodyDump middleware reads complete request bodies
HTTP::Body versions before 1.24_01 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies. In chunked mode, used when no content length is given, ad...
CVE-2026-117501
HTTP::Body versions before 1.24_01 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies.
MIME::Parser versions before 5.521 for Perl set no limit on the number of message parts by default, allowing memory exhaustion. The max_parts option defaulted to -1, which disa...
CVE-2026-116273
MIME::Parser versions before 5.521 for Perl set no limit on the number of message parts by default, allowing memory exha
HTTP::Body versions before 1.23_01 for Perl allow memory exhaustion via an unbounded multipart part header block. The multipart parser takes everything up to the first blank li...
CVE-2026-116134
HTTP::Body versions before 1.23_01 for Perl allow memory exhaustion via an unbounded multipart part header block. The m
HTTP::Body versions before 1.23_01 for Perl allow memory and temporary file exhaustion via an unlimited number of form fields and multipart parts. The urlencoded parser splits ...
CVE-2026-116131
HTTP::Body versions before 1.23_01 for Perl allow memory and temporary file exhaustion via an unlimited number of form f
Apache Kafka's code-generated protocol readers pre-size an array's collection from the element count declared by the sender. That count is checked only against the bytes remaini...
CVE-2026-111108
Apache Kafka's code-generated protocol readers pre-size an array's collection from the element count declared by the sen
The broker-side PushTelemetry API (KIP-714) validates only the compressed size of a client's metrics payload against telemetry.max.bytes (default 1 MB) before decompressing it. ...
CVE-2026-111073
The broker-side PushTelemetry API (KIP-714) validates only the compressed size of a client's metrics payload against tel
Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 request body reader of mtrudel bandit allows an unauthenticated remote attacker to exhaust serve...
CVE-2026-116078
Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 request body reader of mtrudel bandit a
In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop, inefficient algorithmic complexity and resource allocati...
CVE-2026-118036
In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop,
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....
CVE-2026-92665
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7
LibreSSL ocspcheck through 4.4.0 contains a memory exhaustion vulnerability that allows malicious...
CVE-2026-118374
LibreSSL ocspcheck through 4.4.0 contains a memory exhaustion vulnerability that allows malicious OCSP responders to exh
LibreSSL ocspcheck through 4.4.0 contains a memory exhaustion vulnerability that allows malicious OCSP responders to exhaust memory by sending unbounded HTTP responses. Attacker...
CVE-2026-118374
LibreSSL ocspcheck through 4.4.0 contains a memory exhaustion vulnerability that allows malicious OCSP responders to exh
pageant provides a PageantStream type that implements AsyncRead and AsyncWrite traits and can be used to communicate with a running Pageant instance. From 0.2.0 until 0.2.5, Pag...
CVE-2026-116775
pageant provides a PageantStream type that implements AsyncRead and AsyncWrite traits and can be used to communicate wit
russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.65.0, the client Session::process_packet path in russh/src/client/en...
CVE-2026-116773
russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.65.0, the c
russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.65.0, russh::keys::agent::server::serve in russh/src/keys/agent/serv...
CVE-2026-116696
russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.65.0, russh
OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.0, JaegerPropagator.extract() in opentelemetry-propagator-jaeger processes inbound uberctx-...
CVE-2026-116694
OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.0, JaegerPropagator.extract() in o
OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagation
CVE-2026-116694
## Summary `JaegerPropagator.extract()` in `opentelemetry-propagator-jaeger` did not enforce limits when extracting inb
undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering
CVE-2026-109932
### Impact undici's WebSocket client (including Node.js's bundled `globalThis.WebSocket`) can be driven to exhaust proc
MCP TypeScript SDK: HTTP server transports and handlers did not limit request body size or JSON-RPC batch length
### Summary In affected versions, MCP servers reachable over HTTP put no limit on the size of a POST body or on the numb