ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2.23 and 6.9.13-48, due to a missing check in the MIFF decod...

CVE-2026-46522

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2.2

历史摘要 · 未重新核验 · NVD

image-size 1.1.0 before 1.2.1 and 2.0.0 before 2.0.2 contain a denial of service vulnerability in the findBox function when processing specially crafted images with zero-sized b...

CVE-2025-71319

image-size 1.1.0 before 1.2.1 and 2.0.0 before 2.0.2 contain a denial of service vulnerability in the findBox function w

历史摘要 · 未重新核验 · NVD

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the mod_proxy_ftp module in Apache HTTP Server with an attacker controlled backend FTP server. This issu...

CVE-2026-44186

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the mod_proxy_ftp module in Apache HTTP Server w

历史摘要 · 未重新核验 · NVD

Billy is an interface filesystem abstraction for Go. Prior to versions 5.9.0 and 6.0.0-alpha.1, multiple components may improperly handle crafted or malformed input, resulting i...

CVE-2026-44740

Billy is an interface filesystem abstraction for Go. Prior to versions 5.9.0 and 6.0.0-alpha.1, multiple components may

历史摘要 · 未重新核验 · NVD

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.6 and 11.15.0, there is a denial-of-service attack when ren...

CVE-2026-41150

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.6

历史摘要 · 未重新核验 · NVD

In OpenStack Swift before 2.36.2 and 2.37.2, s3api middleware enters an infinite loop when...

CVE-2026-49017

In OpenStack Swift before 2.36.2 and 2.37.2, s3api middleware enters an infinite loop when processing a truncated aws-ch

历史摘要 · 未重新核验 · GitHub Advisory

In OpenStack Swift before 2.36.2 and 2.37.2, s3api middleware enters an infinite loop when processing a truncated aws-chunked PUT request body. The StreamingInput class repeated...

CVE-2026-49017

In OpenStack Swift before 2.36.2 and 2.37.2, s3api middleware enters an infinite loop when processing a truncated aws-ch

历史摘要 · 未重新核验 · NVD

OpenTofu: Excessive resource usage in "tofu init" when installing dependencies from attacker-controlled server

### Impact Unauthenticated denial of service. ### Summary When installing provider or module packages from attacker-co

历史摘要 · 未重新核验 · GitHub Advisory

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 800-byte HEIF sequence file causes an infinite loop in Box_stts::get_sample_d...

CVE-2026-32739

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 800-byte HEIF sequen

历史摘要 · 未重新核验 · NVD

Dasel: Denial of service in dasel selector lexer due to infinite loop on unterminated regex literal

CVE-2026-46378

### Summary `dasel`'s selector lexer enters a non-terminating loop when tokenizing an unterminated regex pattern such a

历史摘要 · 未重新核验 · GitHub Advisory

OpenMcdf: Uncatchable infinite loop in DirectoryTree.TryGetDirectoryEntry on crafted CFB directory cycle

CVE-2026-45785

### Summary The BST name-lookup loop in `DirectoryTree.TryGetDirectoryEntry` (`OpenMcdf/DirectoryTree.cs:35-46`) walks d

历史摘要 · 未重新核验 · GitHub Advisory

ImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustion

CVE-2026-46522

Due to a missing check in the MIFF decoder a crafted file could cause an infinite loop resulting in CPU exhaustion.

历史摘要 · 未重新核验 · GitHub Advisory

ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression

CVE-2026-46521

When using LZMA compression in the MIFF encoder an out of bounds write can occur due to a missing check.

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-42899 – ASP.NET Core Denial of Service Vulnerability

CVE-2026-42899

## Executive Summary: Microsoft is releasing this security advisory to provide information about a vulnerability in .N

历史摘要 · 未重新核验 · GitHub Advisory

iskorotkov/avro: CPU Exhaustion in Decoder

CVE-2026-46385

# CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration ## Summary The Avro array and map decoders looped

历史摘要 · 未重新核验 · GitHub Advisory

When a Client SSL profile is configured with Allow Dynamic Record Sizing on a UDP virtual server,...

CVE-2026-42920

When a Client SSL profile is configured with Allow Dynamic Record Sizing on a UDP virtual server, undisclosed traffic ca

历史摘要 · 未重新核验 · GitHub Advisory

When embedded Packet Velocity Acceleration (ePVA) acceleration is configured, undisclosed local...

CVE-2026-42781

When embedded Packet Velocity Acceleration (ePVA) acceleration is configured, undisclosed local ethernet traffic can cau

历史摘要 · 未重新核验 · GitHub Advisory

When a Client SSL profile is configured with Allow Dynamic Record Sizing on a UDP virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to termi...

CVE-2026-42920

When a Client SSL profile is configured with Allow Dynamic Record Sizing on a UDP virtual server, undisclosed traffic ca

历史摘要 · 未重新核验 · NVD

When embedded Packet Velocity Acceleration (ePVA) acceleration is configured, undisclosed local ethernet traffic can cause an increase in ePVA and Traffic Management Microkernel...

CVE-2026-42781

When embedded Packet Velocity Acceleration (ePVA) acceleration is configured, undisclosed local ethernet traffic can cau

历史摘要 · 未重新核验 · NVD

go-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustion

CVE-2026-44740

### Impact Multiple components may improperly handle crafted or malformed input, resulting in panics, infinite loops, un

历史摘要 · 未重新核验 · GitHub Advisory