#cwe-834

共收录 30 条相关情报。

← 返回所有主题
漏洞预警2026-10-26 发布MEDIUM

vLLM is an inference and serving engine for large language models. From 0.19.0 until 0.32.0, authenticated callers can supply a request chat template when no server-side --chat-...

CVE-2026-115911

vLLM is an inference and serving engine for large language models. From 0.19.0 until 0.32.0, authenticated callers can s

来源摘录 · NVD

安全公告2026-10-23 发布INFO

pypdf: Possible long runtimes for large xref table header limits

CVE-2026-115580

### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires opening

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-23 发布INFO

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an attacker can craft a PDF with a standard cross-reference table whose declared entry count exceeds wh...

CVE-2026-115580

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an attacker can craft a PDF with a standard cr

来源摘录 · NVD

漏洞预警2026-10-20 发布INFO

A missing circuit-breaker in the replicator in Apache CouchDB 3.5.2 and below on all platforms allows the owner of a replication source or target to cause a denial of service vi...

CVE-2026-90798

A missing circuit-breaker in the replicator in Apache CouchDB 3.5.2 and below on all platforms allows the owner of a rep

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Improper validation of specified quantity in input, Allocation of resources without limits or throttling, Excessive Iteration vulnerability in Apache Thrift PHP bindings. Thi...

CVE-2026-91137

Improper validation of specified quantity in input, Allocation of resources without limits or throttling, Excessive Iter

历史摘要 · 未重新核验 · NVD

安全公告2026-09-25 发布INFO

Containerd has image-pull DoS via crafted OCI index graph amplification

CVE-2026-53493

### Impact A vulnerability exists in containerd's image pull handlers where a crafted OCI image index containing deeply

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-22 发布INFO

icalendar is an RFC 5545 compatible parser and generator of iCalendar files for Python. From 6.1.0 until 7.2.2, vInt.from_ical accepts an attacker-controlled VALARM REPEAT value...

CVE-2026-77399

icalendar is an RFC 5545 compatible parser and generator of iCalendar files for Python. From 6.1.0 until 7.2.2, vInt.fro

历史摘要 · 未重新核验 · NVD

安全公告2026-09-22 发布INFO

icalendar: Denial of service via unbounded VALARM REPEAT expansion

CVE-2026-77399

icalendar is an RFC 5545 compatible parser and generator of iCalendar files for Python. From 6.1.0 until 7.2.2, vInt.fro

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-22 发布INFO

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Apple Preferred Executable Format loader was vulnerable because the PEF ...

CVE-2026-81880

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Apple Preferred

历史摘要 · 未重新核验 · NVD

安全公告2026-09-22 发布INFO

radare2: Uncontrolled resource consumption in radare2 PEF loader

CVE-2026-81880

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Apple Preferred

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-16 发布INFO

OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the go.opentelemetry.io/otel/sdk/log BatchingProcessor can enter a tight CPU loop when attac...

CVE-2026-81872

OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the go.opentelemetry.io/otel/sdk/lo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration. A successful exploit of this vulnerability might lead to den...

CVE-2026-16497

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration. A s

历史摘要 · 未重新核验 · NVD

安全公告2026-09-01 发布INFO

pypdf: Possible long runtimes/large memory usage when retrieving outlines

CVE-2026-84310

### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consum

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-01 发布INFO

pypdf: Possible long runtimes/large memory usage when extracting XForm objects

CVE-2026-84311

### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consum

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-01 发布INFO

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/_page.py PageObject._extract_text and PageObject.extract_...

CVE-2026-84311

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/_doc_common.py _get_outline to consume long runtimes and ...

CVE-2026-84310

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/

历史摘要 · 未重新核验 · NVD

安全公告2026-09-01 发布INFO

pypdf: Possible long runtimes/large memory usage when extracting XForm objects

CVE-2026-84311

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-25 发布INFO

Mesop is a Python-based UI framework that allows users to build web applications. Prior to 1.3.3, applications running in debug mode expose a GET /hot-reload endpoint whose unbo...

CVE-2026-77357

Mesop is a Python-based UI framework that allows users to build web applications. Prior to 1.3.3, applications running i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause long runtimes and large memory consumption when pypdf/_font.py function Font._c...

CVE-2026-71852

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause long runtimes and larg

历史摘要 · 未重新核验 · NVD

安全公告2026-08-07 发布INFO

pypdf: Possible long runtimes/large memory usage for large CID font width ranges

CVE-2026-71852

### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consum

历史摘要 · 未重新核验 · GitHub Advisory