CVE-2026-112021 snac2 before 2.93 Heap-Based Buffer Overflow via JSON Parser _xs_json_load_lexer()

snac2 before 2.93 contains a heap-based buffer overflow vulnerability in xsjsonloadlexer that allows unauthenticated remote attackers to corrupt heap memory by sending JSON strings containing a \u0000 escape. Attackers can send a single crafted application/activity+json POST to...

CVE-2026-112021 snac2 before 2.93 Heap-Based Buffer Overflow via JSON Parser _xs_json_load_lexer()

snac2 before 2.93 contains a heap-based buffer overflow vulnerability in xsjsonloadlexer that allows unauthenticated remote attackers to corrupt heap memory by sending JSON strings containing a \u0000 escape. Attackers can send a single crafted application/activity+json POST to...

CVE-2026-112021

The snac2 software prior to version 2.93 is vulnerable to a heap-based buffer overflow in the _xs_json_load_lexer() function. An unauthenticated remote attacker can trigger this by sending a crafted application/activity+json POST request to activitypub_post_handler(). The vulnerability occurs bec...

CVE-2026-112021

snac2 before 2.93 contains a heap-based buffer overflow vulnerability in xsjsonloadlexer that allows unauthenticated remote attackers to corrupt heap memory by sending JSON strings containing a \u0000 escape. Attackers can send a single crafted application/activity+json POST to...

EUVD-2026-103474

snac2 before 2.93 contains a heap-based buffer overflow vulnerability in xsjsonloadlexer that allows unauthenticated remote attackers to corrupt heap memory by sending JSON strings containing a \u0000 escape. Attackers can send a single crafted application/activity+json POST to...

PT-2026-116625

snac2 before 2.93 contains a heap-based buffer overflow vulnerability in xs json load lexer that allows unauthenticated remote attackers to corrupt heap memory by sending JSON strings containing a u0000 escape. Attackers can send a single crafted application/activity+json POST to activitypub post...

CVE-2026-112021: Heap-based Buffer Overflow

snac2 before 2.93 contains a heap-based buffer overflow vulnerability in xsjsonloadlexer that allows unauthenticated remote attackers to corrupt heap memory by sending JSON strings containing a \u0000 escape. Attackers can send a single crafted application/activity+json POST to...

PT-2026-116634

Xinference through 4.0.1 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to write and delete arbitrary .json files via backslash sequences in model name. Attackers can register a persisted custom model through POST /v1/model registrations/model type with...

CVE-2026-112051: Improper Limitation of a Pathname to a Restricted Directory

Xinference through 4.0.1 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to write and delete arbitrary .json files via backslash sequences in modelname. Attackers can register a persisted custom model through POST /v1/modelregistrations/modeltype with name...

Xorbits Inference Path Traversal Vulnerability

Xorbits Inference versions 4.0.1 and earlier have a path traversal vulnerability. This vulnerability arises due to the backslash sequence in the modelname parameter on Windows, which allows for path traversal. Unauthenticated attackers can register persistent custom models via POST...

CLEANSTART-2026-JD77891 jackson-databind binds a JSON string to a javax

Security vulnerability affects the apache-zookeeper package. jackson-databind binds a JSON string to a javax...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS due to delayed enforcement of maximum property name length in the ReaderBasedJsonParser process. An attacker can exhaust system memory and cause a crash by submitting a JSON object with an excessively long property...

PT-2026-116484

Admidio from 5.0.11 before 5.0.16 contains a broken access control vulnerability in modules/inventory/inventory data.php that allows authenticated users to bypass the inventory module enabled restriction. Attackers with any valid login can request the DataTables JSON feed to read every inventory...

Linux Distros Unpatched Vulnerability : CVE-2026-68498

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - StreamReadConstraints.maxNameLength default 50,000 characters is intended to bound how much memory a single JSON Object property name can consume while being...

CVE-2026-111914: Missing Authorization

Admidio from 5.0.11 before 5.0.16 contains a broken access control vulnerability in modules/inventory/inventorydata.php that allows authenticated users to bypass the inventorymoduleenabled restriction. Attackers with any valid login can request the DataTables JSON feed to read every inventory ite...

Linux Distros Unpatched Vulnerability : CVE-2026-95155

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial of service by...

DEBIAN-CVE-2026-68498

StreamReadConstraints.maxNameLength default 50,000 characters is intended to bound how much memory a single JSON Object property name can consume while being parsed, independently of the much larger maxStringLength default 100,000,000 characters that bounds ordinary string values. For parsers bui...

CVE-2026-68498

StreamReadConstraints.maxNameLength default 50,000 characters is intended to bound how much memory a single JSON Object property name can consume while being parsed, independently of the much larger maxStringLength default 100,000,000 characters that bounds ordinary string values. For parsers bui...

CVE-2026-68498

A flaw was found in jackson-core. When parsing JSON data from character-based inputs, the parser does not enforce configured property name length limits while reading object keys into memory. A remote, unauthenticated attacker can exploit this flaw by submitting a crafted JSON payload containing ...

CVE-2026-68498

The jackson-core library (specifically versions 2.16.0 and 3.0.0 ) is vulnerable to a memory-exhaustion Denial of Service (DoS) via CVE-2026-68498 . The root cause is that ReaderBasedJsonParser fails to enforce the StreamReadConstraints.maxNameLength (default 50,000 characters) for character-back...