Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. From versions 0.4.0 to before 0.4.24, 0.5.0 to before 0.5.14, and 0.6.0 to before 0.6....

CVE-2026-42256

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. From versions 0.4.0 to before

历史摘要 · 未重新核验 · NVD

Volcano's webhook server vulnerable to OOM due to unbounded HTTP request body size

CVE-2026-44247

### Impact The Volcano webhook server does not enforce a size limit on incoming HTTP request bodies. Any in-cluster pod

历史摘要 · 未重新核验 · GitHub Advisory

Phoenix: Long-poll NDJSON body splitting causes large memory allocation

CVE-2026-32689

### Summary An unauthenticated denial-of-service vulnerability in Phoenix's long-poll transport allows a remote client

历史摘要 · 未重新核验 · GitHub Advisory

Russh is a Rust SSH client & server library. Prior to version 0.60.1, a pre-authentication denial-of-service vulnerability exists in the server's keyboard-interactive authentica...

CVE-2026-42189

Russh is a Rust SSH client & server library. Prior to version 0.60.1, a pre-authentication denial-of-service vulnerabili

历史摘要 · 未重新核验 · NVD

Zebra has Permanent Block Discovery Halt via Gossip Queue Saturation and Syncer Poisoning

CVE-2026-44499

## Summary A composite denial-of-service vulnerability in Zebra's block discovery pipeline allows an unauthenticated re

历史摘要 · 未重新核验 · GitHub Advisory

ZEBRA is a Zcash node written entirely in Rust. Prior to version 4.4.0, a composite denial-of-service vulnerability in Zebra's block discovery pipeline allows an unauthenticated...

CVE-2026-44499

ZEBRA is a Zcash node written entirely in Rust. Prior to version 4.4.0, a composite denial-of-service vulnerability in Z

历史摘要 · 未重新核验 · NVD

Allocation of Resources Without Limits or Throttling vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via atom table exhaustion when parsing a...

CVE-2026-42793

Allocation of Resources Without Limits or Throttling vulnerability in absinthe-graphql absinthe allows unauthenticated d

历史摘要 · 未重新核验 · NVD

ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.4.0, prior to zebra-chain version 7.0.0, and prior to zebra-network version 6.0.0, several inbound dese...

CVE-2026-44500

ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.4.0, prior to zebra-chain version 7.0.0, and p

历史摘要 · 未重新核验 · NVD

Due to multiple time-of-check time-of-use race conditions in the resource count check and increment logic, as well as missing validations, users of the platform are able to exce...

CVE-2025-69233

Due to multiple time-of-check time-of-use race conditions in the resource count check and increment logic, as well as mi

历史摘要 · 未重新核验 · NVD

A security vulnerability has been detected in GPAC up to 26.02.0. This affects the function sidx_box_read of the file src/isomedia/box_code_base.c. The manipulation leads to all...

CVE-2026-8124

A security vulnerability has been detected in GPAC up to 26.02.0. This affects the function sidx_box_read of the file sr

历史摘要 · 未重新核验 · NVD

A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an...

CVE-2026-7541

A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to

历史摘要 · 未重新核验 · GitHub Advisory

A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause service disruption by sending crafted requests wit...

CVE-2026-7541

A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to

历史摘要 · 未重新核验 · NVD

Ech0 allows PUT /api/echo/like/:id unauthenticated: anonymous callers to modify any echo's fav_count

## Summary `PUT /api/echo/like/:id` at `internal/router/echo.go:12` is registered on `PublicRouterGroup` with no authen

历史摘要 · 未重新核验 · GitHub Advisory

Zebra Vulnerable to Allocation Amplification in Inbound Network Deserializers

CVE-2026-44500

# CVE-2026-44500: Allocation Amplification in Inbound Network Deserializers ## Summary Several inbound deserialization

历史摘要 · 未重新核验 · GitHub Advisory

Incus is a system container and virtual machine manager. Prior to version 7.0.0, uploads of large amount of data by authenticated users can run the Incus server out of disk spac...

CVE-2026-41685

Incus is a system container and virtual machine manager. Prior to version 7.0.0, uploads of large amount of data by auth

历史摘要 · 未重新核验 · NVD

Incus is a system container and virtual machine manager. Prior to version 7.0.0, user provided image and backup tarballs would be unpacked and YAML files parsed without any size...

CVE-2026-41648

Incus is a system container and virtual machine manager. Prior to version 7.0.0, user provided image and backup tarballs

历史摘要 · 未重新核验 · NVD

Improperly controlled modification of Dynamically-Determined object attributes, Allocation of resources without limits or throttling vulnerability in DivvyDrive Information Tech...

CVE-2025-14341

Improperly controlled modification of Dynamically-Determined object attributes, Allocation of resources without limits o

历史摘要 · 未重新核验 · NVD

monetr is a budgeting application for recurring expenses. Prior to version 1.12.5, a server-side request forgery (SSRF) vulnerability in monetr's Lunch Flow integration allowed ...

CVE-2026-41644

monetr is a budgeting application for recurring expenses. Prior to version 1.12.5, a server-side request forgery (SSRF)

历史摘要 · 未重新核验 · NVD

vm2 Sandbox Access to Host Buffer.alloc Allows timeout Bypass Resulting in Memory Exhaustion

CVE-2026-44004

### Summary Sandboxed code can call `Buffer.alloc()` with an arbitrary size to allocate memory directly on the host heap

历史摘要 · 未重新核验 · GitHub Advisory

Bandit HTTP/2 Frame Size Limit Bypass via Late Buffer Check Enables Memory Exhaustion

CVE-2026-42788

### Summary Bandit's HTTP/2 parser checks frame size *after* it has already buffered the full body, instead of when it

历史摘要 · 未重新核验 · GitHub Advisory