Go JOSE: DoS when parsing JWKs that contain RSA keys
CVE-2026-116587
### Summary A crafted RSA key inside a JWK can cause operations that parse JWKs to consume excess CPU. ### Details go
#cwe-770
共收录 1180 条相关情报。
← 返回所有主题Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
CVE-2026-116659
Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
Tanium addressed a denial of service vulnerability in Enforce.
CVE-2026-116657
Tanium addressed a denial of service vulnerability in Enforce.
Tanium addressed a denial of service vulnerability in Tanium Server.
CVE-2026-108310
Tanium addressed a denial of service vulnerability in Tanium Server.
Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.
CVE-2026-108309
Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.
Knative pkg provides common packages shared across Knative repositories. Prior to 0.0.0-20260531000007-52dbd5ece63f, the knative.dev/pkg/webhook admissionHandler in webhook/admi...
CVE-2026-54462
Knative pkg provides common packages shared across Knative repositories. Prior to 0.0.0-20260531000007-52dbd5ece63f, the
knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion
CVE-2026-54462
Knative pkg provides common packages shared across Knative repositories. Prior to 0.0.0-20260531000007-52dbd5ece63f, the
Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows low-privilege editors to bypass smwgMaxNumRecurringEvents by s...
CVE-2026-116877
Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows low-p
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (J...
CVE-2026-116587
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including sup
Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. From 26.7.1 until 26.10.1, PerMessageBrotli.decompress_message_data in compr...
CVE-2026-116579
Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. From 26.7.1 until 2
Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, Tornado's HTTP header parser accepts obsolete line folding and repeatedly concatenates short...
CVE-2026-116577
Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, Tornado's HTTP header parser accept
Tornado is a Python web framework and asynchronous networking library. Prior to 6.6.0, Tornado decodes HTTP/1.1 chunked transfer encoding by processing body data that has alread...
CVE-2026-115927
Tornado is a Python web framework and asynchronous networking library. Prior to 6.6.0, Tornado decodes HTTP/1.1 chunked
vLLM is an inference and serving engine for large language models. From 0.16.0 until 0.32.0, the /v1/responses endpoint allows an authenticated caller to place an attacker-contr...
CVE-2026-115918
vLLM is an inference and serving engine for large language models. From 0.16.0 until 0.32.0, the /v1/responses endpoint
vLLM is an inference and serving engine for large language models. Prior to 0.32.0, the Phi-4 multimodal audio encoder in phi4mm_audio.py and phi4mm_utils.py uses eager attentio...
CVE-2026-115913
vLLM is an inference and serving engine for large language models. Prior to 0.32.0, the Phi-4 multimodal audio encoder i
vLLM is an inference and serving engine for large language models. From 0.19.0 until 0.32.0, authenticated callers can supply a request chat template when no server-side --chat-...
CVE-2026-115911
vLLM is an inference and serving engine for large language models. From 0.19.0 until 0.32.0, authenticated callers can s
Starman versions before 0.4019 for Perl allow a stalled request body to hold a worker...
CVE-2026-115817
Starman versions before 0.4019 for Perl allow a stalled request body to hold a worker indefinitely, as read_timeout cove
Starman versions before 0.4019 for Perl allow memory exhaustion via unbounded buffering of...
CVE-2026-115824
Starman versions before 0.4019 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies. The
vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API...
CVE-2026-116179
vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API clients to bypass the video/
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a policy bypass in the PS, PDF and...
CVE-2026-116143
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a policy bypass in the PS, PDF and XPS decoders that allow
vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API clients to bypass the video/jpeg frame-count cap by overriding num_frames through med...
CVE-2026-116179
vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API clients to bypass the video/