EUVD-2026-109383

NiubiGEO before 0.3.2 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch internal addresses by supplying a crafted domain value to POST /audit-plan. Attackers can submit IP literals, localhost, or private and link-local host...

Crow 1.3.3 Uncontrolled Recursion Denial of Service

Crow versions before 1.3.4 contain an uncontrolled recursion vulnerability in crow::json::load that allows remote unauthenticated attackers to crash the server with deeply nested JSON...

PT-2026-122972

NiubiGEO before 0.3.2 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch internal addresses by supplying a crafted domain value to POST /audit-plan. Attackers can submit IP literals, localhost, or private and link-local host...

[SECURITY] Fedora 44 Update: perl-Cpanel-JSON-XS-4.80-1.fc44

This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C...

[SECURITY] Fedora 43 Update: perl-Cpanel-JSON-XS-4.80-1.fc43

This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C...

CVE-2026-116011

Crow before 1.3.4 contains an uncontrolled recursion vulnerability in crow::json::load that allows remote unauthenticated attackers to crash the server by sending deeply nested JSON. Attackers can send a request body with thousands of nested objects to exhaust the worker thread stack, terminating...

CVE-2026-116011

Crow before 1.3.4 contains an uncontrolled recursion vulnerability in crow::json::load that allows remote unauthenticated attackers to crash the server by sending deeply nested JSON. Attackers can send a request body with thousands of nested objects to exhaust the worker thread stack, terminating...

CVE-2026-116011 Crow before 1.3.4 Denial of Service via Deeply Nested JSON in crow::json::load()

Crow before 1.3.4 contains an uncontrolled recursion vulnerability in crow::json::load that allows remote unauthenticated attackers to crash the server by sending deeply nested JSON. Attackers can send a request body with thousands of nested objects to exhaust the worker thread stack, terminating...

CVE-2026-116011 Crow before 1.3.4 Denial of Service via Deeply Nested JSON in crow::json::load()

Crow before 1.3.4 contains an uncontrolled recursion vulnerability in crow::json::load that allows remote unauthenticated attackers to crash the server by sending deeply nested JSON. Attackers can send a request body with thousands of nested objects to exhaust the worker thread stack, terminating...

CVE-2026-116011

Crow versions prior to 1.3.4 are susceptible to a Denial of Service (DoS) vulnerability due to uncontrolled recursion in the crow::json::load() function. Remote unauthenticated attackers can crash the server by submitting a request body containing thousands of deeply nested JSON objects . This ac...

CVE-2026-116011 Crow before 1.3.4 Denial of Service via Deeply Nested JSON in crow::json::load()

Crow before 1.3.4 contains an uncontrolled recursion vulnerability in crow::json::load that allows remote unauthenticated attackers to crash the server by sending deeply nested JSON. Attackers can send a request body with thousands of nested objects to exhaust the worker thread stack, terminating...

EUVD-2026-109269

Crow before 1.3.4 contains an uncontrolled recursion vulnerability in crow::json::load that allows remote unauthenticated attackers to crash the server by sending deeply nested JSON. Attackers can send a request body with thousands of nested objects to exhaust the worker thread stack, terminating...

Exploit for CVE-2026-114509

CVE-2026-114509 — Laravel TokenGuard authentication bypass PoC...

EUVD-2026-109192

A security flaw has been discovered in Kakao khaiii up to 0.4. The impacted element is the function khaiii::nn::Linear::open of the file src/main/cpp/khaiii/nn/Linear.cpp of the component JSON Config File Handler. The manipulation of the argument hiddendim/classnum results in out-of-bounds read...

PT-2026-122592

Crow before 1.3.4 contains an uncontrolled recursion vulnerability in crow::json::load that allows remote unauthenticated attackers to crash the server by sending deeply nested JSON. Attackers can send a request body with thousands of nested objects to exhaust the worker thread stack, terminating...

Fedora 44 : perl-Cpanel-JSON-XS (2026-3ab4727120)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3ab4727120 advisory. Current upstream release, with multiple security fixes, updates for performance and correctness. Tenable has extracted the preceding description blo...

Crowcpp Crow resource management error vulnerability

Versions of Crowcpp prior to 1.3.4 contain a resource management error vulnerability. This vulnerability stems from uncontrolled recursion in crow::json::load. Remote unauthenticated attackers can exploit it by sending deeply nested JSON, thereby exhausting the work thread stack and causing the...

Fedora 43 : perl-Cpanel-JSON-XS (2026-4447e52d23)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4447e52d23 advisory. Current upstream release, with multiple security fixes, updates for performance and correctness. Tenable has extracted the preceding description blo...

CVE-2026-115801

A security flaw has been discovered in Kakao khaiii up to 0.4. The impacted element is the function khaiii::nn::Linear::open of the file src/main/cpp/khaiii/nn/Linear.cpp of the component JSON Config File Handler. The manipulation of the argument hiddendim/classnum results in out-of-bounds read...

CVE-2026-115801 Kakao khaiii JSON Config File Linear.cpp open out-of-bounds

A security flaw has been discovered in Kakao khaiii up to 0.4. The impacted element is the function khaiii::nn::Linear::open of the file src/main/cpp/khaiii/nn/Linear.cpp of the component JSON Config File Handler. The manipulation of the argument hiddendim/classnum results in out-of-bounds read...