60460 matches found
com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (>=4.0.2, <=5.0.6), com.jgeppert.struts2.jquery:struts2-jquery-grid-showcase (>=5.0.0, <=5.0.7) +4 more potentially affected by CVE-2026-73633 via org.apache.struts:struts2-json-plugin (>=6.0.0, <=6.10.0)
org.apache.struts:struts2-json-plugin MAVEN version =6.0.0, =4.0.2, =5.0.0, =5.0.0, =5.0.0, =6.0.0, =6.0.0, =6.10.0 Source cves: CVE-2026-73633 Source advisory: MEND:CVE-2026-73633...
CVE-2026-73633 Apache Struts: Unbounded read of a JSON request body
Uncontrolled resource consumption vulnerability in the JSON plugin of Apache Struts. When an application is configured to populate actions from a JSON request body, the plugin reads that body into memory without bounding how much it will accept, so a single request can exhaust the heap and deny...
CVE-2026-73633 Apache Struts: Unbounded read of a JSON request body
Uncontrolled resource consumption vulnerability in the JSON plugin of Apache Struts. When an application is configured to populate actions from a JSON request body, the plugin reads that body into memory without bounding how much it will accept, so a single request can exhaust the heap and deny...
CVE-2026-73633
The Apache Struts JSON plugin is vulnerable to an uncontrolled resource consumption issue (S2-072) when an application is configured to populate actions from a JSON request body. The underlying cause is that the plugin reads the request body into memory without a proper bound, as the configurable...
CVE-2026-73633
Uncontrolled resource consumption vulnerability in the JSON plugin of Apache Struts. When an application is configured to populate actions from a JSON request body, the plugin reads that body into memory without bounding how much it will accept, so a single request can exhaust the heap and deny...
CVE-2026-73633
Uncontrolled resource consumption vulnerability in the JSON plugin of Apache Struts. When an application is configured to populate actions from a JSON request body, the plugin reads that body into memory without bounding how much it will accept, so a single request can exhaust the heap and deny...
Malicious code in @zalastax/nolb-json-r (npm)
The package @zalastax/nolb-json-r was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in @zalastax/nolb-json-l (npm)
The package @zalastax/nolb-json-l was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in @zalastax/nolb-json-z (npm)
The package @zalastax/nolb-json-z was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in @zalastax/nolb-json-m (npm)
The package @zalastax/nolb-json-m was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in @zalastax/nolb-json-g (npm)
The package @zalastax/nolb-json-g was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in @zalastax/nolb-json-d (npm)
The package @zalastax/nolb-json-d was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in @zalastax/nolb-json-e (npm)
The package @zalastax/nolb-json-e was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in @zalastax/nolb-json-b (npm)
The package @zalastax/nolb-json-b was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in @zalastax/nolb-json-q (npm)
The package @zalastax/nolb-json-q was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in @zalastax/nolb-json-s (npm)
The package @zalastax/nolb-json-s was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in @zalastax/nolb-json-h (npm)
The package @zalastax/nolb-json-h was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in @zalastax/nolb-json-u (npm)
The package @zalastax/nolb-json-u was found to contain malicious code. --- Credit: OpenSSF source...