CVE-2026-34054

creationtimestamp| type| source ---|---|--- 2026-03-31 04:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3midc3x3gyw2p 2026-03-31 05:17:42+00:00| seen| Telegram/62pZ0M7EEU9QzqUpq3hJFXhFPR-ebrkyPJ1cBwC7xQpoTU0...

CVE-2026-34054 openssl on Windows built with openssldir set from the build machine (Uncontrolled Search Path Element)

vcpkg is a free and open-source C/C++ package manager. Prior to version 3.6.13, vcpkg's Windows builds of OpenSSL set openssldir to a path on the build machine, making that path be attackable later on customer machines. This issue has been patched in version 3.6.13...

CVE-2025-34054

creationtimestamp| type| source ---|---|--- 2025-07-01 15:08:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20053 2025-07-02 21:02:16+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lsz4dplb7x2s 2026-03-23 00:00:00+00:00| exploited| The Shadowserv...

CVE-2022-34054

The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2023-34054

creationtimestamp| type| source ---|---|--- 2023-12-17 17:12:19+00:00| seen| https://t.me/ctinow/155642...

africa.absa:inception-application (>=1.0.0, <=1.2.0), ai.onehouse:lakeview (>=0.26.0, <=0.33.0) +2847 more potentially affected by CVE-2023-34054 via io.projectreactor.netty:reactor-netty-core (>=1.0.0, <=1.0.38)

io.projectreactor.netty:reactor-netty-core MAVEN version =1.0.0, =1.0.0, =0.26.0, =0.26.0, =j8.2.4.0, =v0.3.12, =v0.3.10, =v0.3.12, =1.3, =3.1.242, =3.1.242, =3.1.242, =3.1.242, =3.1.496 and more Source cves: CVE-2023-34054 Source advisory: GHSA-Q24V-HPG3-V3JP...

africa.absa:inception-application (>=1.0.0, <=1.2.0), ai.onehouse:lakeview (>=0.26.0, <=0.33.0) +2847 more potentially affected by CVE-2023-34054 via io.projectreactor.netty:reactor-netty-core (>=1.0.0, <=1.0.38)

io.projectreactor.netty:reactor-netty-core MAVEN version =1.0.0, =1.0.0, =0.26.0, =0.26.0, =j8.2.4.0, =v0.3.12, =v0.3.10, =v0.3.12, =1.3, =3.1.242, =3.1.242, =3.1.242, =3.1.242, =3.1.496 and more Source cves: CVE-2023-34054 Source advisory: OSV:GHSA-Q24V-HPG3-V3JP...

ai.optfor:spring-openai-api (>=0.2.2, <=0.3.25), be.vlaanderen.informatievlaanderen.ldes.ldio:ldio-azure-blob-out (2.12.0) +1063 more potentially affected by CVE-2023-34054 via io.projectreactor.netty:reactor-netty-core (>=1.1.0, <=1.1.12)

io.projectreactor.netty:reactor-netty-core MAVEN version =1.1.0, =0.2.2, =0.14.0, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0 and more Source cves: CVE-2023-34054 Source advisory:...

ai.optfor:spring-openai-api (>=0.2.2, <=0.3.25), be.vlaanderen.informatievlaanderen.ldes.ldio:ldio-azure-blob-out (2.12.0) +1063 more potentially affected by CVE-2023-34054 via io.projectreactor.netty:reactor-netty-core (>=1.1.0, <=1.1.12)

io.projectreactor.netty:reactor-netty-core MAVEN version =1.1.0, =0.2.2, =0.14.0, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0 and more Source cves: CVE-2023-34054 Source advisory:...

CVE-2023-34054 vulnerabilities

Vulnerabilities for packages: elasticsearch...

CVE-2023-34054

In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Specifically, an application is vulnerable if Reactor Netty HTTP Server built-in...

CVE-2023-34054 Reactor Netty HTTP Server Metrics DoS Vulnerability

In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Specifically, an application is vulnerable if Reactor Netty HTTP Server built-in...

ai.optfor:spring-openai-api (>=0.2.2, <=0.3.25), be.vlaanderen.informatievlaanderen.ldes.ldio:ldio-azure-blob-out (2.12.0) +1063 more potentially affected by CVE-2023-34054 via io.projectreactor.netty:reactor-netty-core (>=1.1.0, <=1.1.12)

io.projectreactor.netty:reactor-netty-core MAVEN version =1.1.0, =0.2.2, =0.14.0, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0-rc2, =0.15.0 and more Source cves: CVE-2023-34054 Source advisory:...

africa.absa:inception-application (>=1.0.0, <=1.2.0), ai.onehouse:lakeview (>=0.26.0, <=0.33.0) +2847 more potentially affected by CVE-2023-34054 via io.projectreactor.netty:reactor-netty-core (>=1.0.0, <=1.0.38)

io.projectreactor.netty:reactor-netty-core MAVEN version =1.0.0, =1.0.0, =0.26.0, =0.26.0, =j8.2.4.0, =v0.3.12, =v0.3.10, =v0.3.12, =1.3, =3.1.242, =3.1.242, =3.1.242, =3.1.242, =3.1.496 and more Source cves: CVE-2023-34054 Source advisory: MEND:CVE-2023-34054...

CVE-2023-34054

CVE-2023-34054 affects the Reactor Netty HTTP Server. In versions 1.1.x prior to 1.1.13 and 1.0.x prior to 1.0.39, a user can send specially crafted HTTP requests that may cause a denial-of-service (DoS) if the Reactor Netty HTTP Server is used with Micrometer integration enabled. The available c...

CVE-2022-34054

The CVE-2022-34054 entry concerns the Perdido package on PyPI (versions 0.0.1–0.0.2) that allegedly contains a code execution backdoor introduced via the request package. Reported impact in sources includes access to sensitive user information and digital currency keys, with privilege escalation....