Dasel: Denial of service in dasel selector lexer due to infinite loop on unterminated regex literal
CVE-2026-46378
### Summary `dasel`'s selector lexer enters a non-terminating loop when tokenizing an unterminated regex pattern such a
#severity:high
共收录 5513 条相关情报。
← 返回所有主题Dasel: Index-out-of-range panic in dasel selector lexer on trailing backslash in quoted string
CVE-2026-46377
### Summary `dasel`'s selector lexer panics with an index-out-of-range error when tokenizing a quoted string that ends
@libp2p/kad-dht: Unvalidated PUT_VALUE records allow unbounded disk exhaustion on DHT server nodes
CVE-2026-45783
### Summary An unauthenticated remote peer can exhaust the disk storage of any `@libp2p/kad-dht` node running in server
PenPot MCP REPL server binds to 0.0.0.0 with unauthenticated /execute endpoint — RCE
CVE-2026-45805
### Summary The MCP module's `ReplServer` binds to all interfaces (`0.0.0.0:4403`) and exposes a `/execute` endpoint th
Wire: skipGroup() missing negative-length check allows 10-byte payload to crash any Wire-decoding service
CVE-2026-45799
# CVE-2026-45799 ## Maintainer summary Wire's protobuf group-skipping logic did not reject negative lengths before ski
In mlflow/mlflow versions prior to 3.11.0, the `get_or_create_nfs_tmp_dir()` function in `mlflow...
CVE-2026-4137
In mlflow/mlflow versions prior to 3.11.0, the `get_or_create_nfs_tmp_dir()` function in `mlflow/utils/file_utils.py` cr
SOGo 5.12.7 contains a SQL injection vulnerability in the Access Control List management...
CVE-2026-8851
SOGo 5.12.7 contains a SQL injection vulnerability in the Access Control List management functionality that allows authe
Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability...
CVE-2026-47092
Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local attac
Summarize prior to 0.15.1 contains a path traversal vulnerability in the /v1/summarize daemon...
CVE-2026-45242
Summarize prior to 0.15.1 contains a path traversal vulnerability in the /v1/summarize daemon endpoint that allows authe
ImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustion
CVE-2026-46522
Due to a missing check in the MIFF decoder a crafted file could cause an infinite loop resulting in CPU exhaustion.
ImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions
CVE-2026-46520
When reading multiple images with different dimensions an out of bounds heap write can occur.
HAPI FHIR: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint
CVE-2026-45367
## Summary All implementations of FHIRPathEngine accept arbitrary FHIRPath expressions and evaluate them without input
NiceGUI: Local file disclosure via Docutils file insertion in ui.restructured_text()
CVE-2026-45553
### Summary `ui.restructured_text()` renders reStructuredText server-side with Docutils without disabling file insertio
OpenTelemetry eBPF Instrumentation: Memcached payload length overflow can crash OBI
CVE-2026-45686
### Summary A remotely reachable integer overflow in OBI's memcached text protocol parser can crash the OBI process and
OpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messages
CVE-2026-45685
### Summary Malformed MongoDB wire messages can trigger uncaught panics in the MongoDB TCP parser, allowing a remote un
Microsoft Security Advisory CVE-2026-35433 – .NET Elevation of Privilege Vulnerability
CVE-2026-35433
## Executive Summary: Microsoft is releasing this security advisory to provide information about a vulnerability in .N
Microsoft Security Advisory CVE-2026-42899 – ASP.NET Core Denial of Service Vulnerability
CVE-2026-42899
## Executive Summary: Microsoft is releasing this security advisory to provide information about a vulnerability in .N
Microsoft Security Advisory CVE-2026-32175 – .NET Core Tampering Vulnerability
CVE-2026-32175
## Executive Summary: Microsoft is releasing this security advisory to provide information about a vulnerability in .N
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-45495
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
DumbAssets through 1.0.11 contains a path traversal vulnerability in the POST /api/delete-file...
CVE-2026-45230
DumbAssets through 1.0.11 contains a path traversal vulnerability in the POST /api/delete-file endpoint and filesToDelet