共收录 1180 条相关情报。
← 返回所有主题CVE-2026-92961
vm2 before 3.11.6 fails to enforce bufferAllocLimit on ArrayBuffer, SharedArrayBuffer, and TypedArray constructors, allo
CVE-2026-92915
WWBN AVideo through commit e01e41ecc (no patched version available) contains a broken access control flaw in objects/use
CVE-2026-25281
Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation.
CVE-2026-57173
### Summary The audio decode-duration guard (`max_duration_s`, env `VLLM_MAX_AUDIO_DECODE_DURATION_S`, default 600s) tha
CVE-2026-81176
Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the
CVE-2026-85501
Novel vulnerabilities to launch algorithmic complexity attacks on DNSSEC have been researched under the term 'ReTrap'. T
CVE-2026-80225
In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulnerability is present in the TCP/DoT readin
CVE-2026-1168
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and
CVE-2025-14871
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and
CVE-2026-69218
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, When Ember receives an HTTP/2 HEADERS or
CVE-2026-69203
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, An Ember server with HTTP/2 enabled throu
CVE-2026-69202
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s HTTP/2 flow-control window is rep
CVE-2026-69218
When Ember receives an HTTP/2 `HEADERS` or `PUSH_PROMISE` frame without the `END_HEADERS` flag, it buffers the header bl
CVE-2026-69213
Ember's HTTP/2 connection serializes all outgoing frames through a single unbounded queue drained by one writer fiber (`
CVE-2026-69203
An ember server with HTTP/2 enabled (`.withHttp2`) does not enforce `SETTINGS_MAX_CONCURRENT_STREAMS` on streams opened
CVE-2026-69202
Ember's HTTP/2 stack replenishes the inbound flow-control window based on bytes received off the wire, not bytes consume
CVE-2026-69213
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember HTTP/2 serializes outbound frames t
CVE-2026-69209
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The shared WebSocket decoder permits unbo
CVE-2026-53941
Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Li
CVE-2026-91990
Tornado before 6.5.8 contains a memory amplification vulnerability in parse_multipart_form_data that splits multipart da