dd-trace-go: Improper parsing of W3C baggage headers may lead to DoS
CVE-2026-50274
### Impact Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without
#cwe-770
共收录 1181 条相关情报。
← 返回所有主题dd-trace-dotnet: Improper parsing of W3C baggage headers may lead to DoS
CVE-2026-50273
### Impact Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without
dd-trace-js: Improper parsing of W3C baggage headers may lead to DoS
CVE-2026-50272
### Impact Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without
dd-trace-py: Improper parsing of W3C baggage headers may lead to DoS
CVE-2026-50271
### Impact Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without
dd-trace-java: Improper parsing of W3C baggage headers may lead to DoS
CVE-2026-50270
### Impact Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without
websocket-driver: Resource limit bypass via message compression
CVE-2026-54490
### Impact If this library is used in tandem with the `permessage-deflate` extension, a WebSocket server or client can
websocket-driver: Resource limit bypass via message compression
CVE-2026-54464
### Impact If this library is used in tandem with the `permessage-deflate` extension, a WebSocket server or client can
ws before 8.21.1 contains a memory exhaustion vulnerability in lib/receiver.js where the fragment...
CVE-2026-62389
ws before 8.21.1 contains a memory exhaustion vulnerability in lib/receiver.js where the fragment guard only triggers wh
ws before 8.21.1 contains a memory exhaustion vulnerability in lib/receiver.js where the fragment guard only triggers when fragment count reaches maxFragments, allowing attacker...
CVE-2026-62389
ws before 8.21.1 contains a memory exhaustion vulnerability in lib/receiver.js where the fragment guard only triggers wh
ws < 8.21.1 Default maxFragments Allows Memory Exhaustion DoS
CVE-2026-62389
ws before 8.21.1 contains a memory exhaustion vulnerability in lib/receiver.js where the fragment guard only triggers wh
When an HTTP/2 profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Impact: System performance can de...
CVE-2026-59762
When an HTTP/2 profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource
Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not Removed Before Reuse in the ASUS System Control Interface driver and ASUS Busines...
CVE-2026-13585
Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not Removed Before Reuse in
Twig is a template language for PHP. Prior to 3.26.0, twig/intl-extra memoises IntlDateFormatter and NumberFormatter instances in arrays keyed by template-controlled filter argu...
CVE-2026-46629
Twig is a template language for PHP. Prior to 3.26.0, twig/intl-extra memoises IntlDateFormatter and NumberFormatter ins
NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API, where an...
CVE-2026-24271
NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API, where an attacker could cause alloc
Twig: Unbounded formatter memoisation in twig/intl-extra keyed on template-controlled arguments
CVE-2026-46629
Twig is a template language for PHP. Prior to 3.26.0, twig/intl-extra memoises IntlDateFormatter and NumberFormatter ins
Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve allocates unbounded memory when compiling la...
CVE-2026-49476
Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser
NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API, where an attacker could cause allocation of GPU resources without limits or throttling. A su...
CVE-2026-24271
NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API, where an attacker could cause alloc
Soup Sieve: Memory Exhaustion via Large Comma-Separated Selector Lists in soupsieve
CVE-2026-49476
Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-50651
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a netw
Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.
CVE-2026-50648
Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service o