GraphQL-core: Denial of service via quadratic complexity in the OverlappingFieldsCanBeMerged validation rule
CVE-2026-75507
### Summary The `OverlappingFieldsCanBeMerged` validation rule can be driven into quadratic — and in the worst case `O(
#severity:high
共收录 5396 条相关情报。
← 返回所有主题DOMPurify IN_PLACE: hook that removes a parent or sibling leaves the detached subtree's event handlers armed (incomplete fix for GHSA-p98j-92pf-mc4p)
### Summary The 3.4.16 fix for GHSA-p98j-92pf-mc4p only covers a hook that removes the node it was called for. If an `I
Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5 is affected by a server-side...
CVE-2026-114730
Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5 is affected by a server-side request forgery filter bypass
HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service ...
CVE-2026-110354
HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worker-thread C
HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service ...
CVE-2026-110353
HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-thread CPU exhaus
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in...
CVE-2026-114724
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in rcube_session::unserial
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content into...
CVE-2026-114727
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content into ImageMagick when resizing
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an IMAP command injection...
CVE-2026-114720
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an IMAP command injection vulnerability. A remote
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection...
CVE-2026-114716
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_send
Vyper 0.4.0b1 through 0.5.0b1 miscompiles unfoldable constants and omitted default arguments from...
CVE-2026-114663
Vyper 0.4.0b1 through 0.5.0b1 miscompiles unfoldable constants and omitted default arguments from imported modules, beca
Frappe Framework before 16.33.0 contains a blind SQL injection vulnerability in the frappe.desk...
CVE-2026-114664
Frappe Framework before 16.33.0 contains a blind SQL injection vulnerability in the frappe.desk.doctype.event.event.get_
Obot before 0.26.0 contains an authentication bypass vulnerability in the CLI login flow that...
CVE-2026-114662
Obot before 0.26.0 contains an authentication bypass vulnerability in the CLI login flow that allows unauthenticated att
Grav from 2.0.0 before 2.2.5 contains an improper access control vulnerability in FlexDirectory:...
CVE-2026-114660
Grav from 2.0.0 before 2.2.5 contains an improper access control vulnerability in FlexDirectory::dynamicFlexField() that
Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX...
CVE-2026-114636
Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX provider, where the HTT
Grav Login plugin from 3.6.0 before 3.9.13 contains a missing authorization vulnerability in the...
CVE-2026-114658
Grav Login plugin from 3.6.0 before 3.9.13 contains a missing authorization vulnerability in the login.invite task that
Grav Flex Objects plugin 1.4.0 before 1.4.17 contains an authorization bypass because its generic...
CVE-2026-114659
Grav Flex Objects plugin 1.4.0 before 1.4.17 contains an authorization bypass because its generic /api/v1/flex-objects/p
virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax
CVE-2026-113722
## Summary A destination path supplied to virtualenv can be interpreted as shell syntax by a generated POSIX console la
Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags
CVE-2026-112902
``` ============================================================================ Memory disclosure and segfault in libti
Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle
CVE-2026-112406
``` ============================================================================ Infinite loop in PdfParser.rewrite_page
Pillow: APNG background disposal allocates full canvas before decompression bomb check
CVE-2026-112399
``` ============================================================================ APNG background disposal allocates full