1211 matches found
CVE-2026-106554
The jackson-dataformat-cbor module in jackson-dataformats-binary is vulnerable to an algorithmic-complexity denial of service (CWE-407) . An attacker can exploit an unbounded run of CBOR tags in the CBORParser.java file; because the TagList backing array grows by a fixed increment (+8) instead of...
EUVD-2026-115866
svg-sanitizer from 0.11.0 before 1.1.0 contains an algorithmic complexity denial of service vulnerability in hasInfiniteLoop and countUse of the use reference-graph analysis. Attackers can upload a small layered SVG with 15 levels of fanned-out use elements, forcing exponential path enumeration...
CVE-2026-121444
The svg-sanitizer library (versions 0.11.0 before 1.1.0 ) is vulnerable to an algorithmic complexity denial of service (DoS) . The flaw exists within the hasInfiniteLoop() and countUse() functions during use reference-graph analysis . An attacker can exploit this by uploading a small, layered SVG...
CVE-2026-121444 svg-sanitizer 0.11.0 before 1.1.0 Algorithmic Complexity DoS via use Reference Graph
svg-sanitizer from 0.11.0 before 1.1.0 contains an algorithmic complexity denial of service vulnerability in hasInfiniteLoop and countUse of the use reference-graph analysis. Attackers can upload a small layered SVG with 15 levels of fanned-out use elements, forcing exponential path enumeration...
pyasn1 Decode DoS
The vulnerability in the decode function of the ASN.1 library pyasn1 in Python is related to algorithmic complexity. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...
CVE-2026-121444: darylldoyle svg-sanitizer: svg-sanitizer from 0.11.0 before 1.1.0 contains an algorithmic complexity denial of service vulnerability in…
svg-sanitizer from 0.11.0 before 1.1.0 contains an algorithmic complexity denial of service vulnerability in hasInfiniteLoop and countUse of the use reference-graph analysis. Attackers can upload a small layered SVG with 15 levels of fanned-out use elements, forcing exponential path enumeration...
Security Bulletin: Vulnerability in linkify-it affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.
Summary Potential vulnerability in linkify-it has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...
SUSE CVE-2019-25781
Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerability in inline link parsing that allows remote attackers to exhaust CPU through unmatched brackets. Attackers can submit short Markdown containing repeated or ! characters, forcing LinkInlineProcessor.getText and getLi...
CVE-2019-25781
Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerability in inline link parsing that allows remote attackers to exhaust CPU through unmatched brackets. Attackers can submit short Markdown containing repeated or ! characters, forcing LinkInlineProcessor.getText and getLi...
CVE-2026-6042-PoC
CVE-2026-6042: Algorithmic Complexity DoS in musl libc iconv Gap-skipping loops in musl's iconv GB18030 4-byte decoder allow a small crafted input to consume disproportionate CPU time. A 40 KB adversarial payload can pin a CPU core for over 40 minutes. Advisory :...
Inefficient Algorithmic Complexity
Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the OctetStringPayloadDecoder class and the AnyPayloadDecoder.indefLenValueDecoder method in pyasn1/codec/ber/decoder.py. An attacker can exhaust a decoding worker during a decode or StreamingDecode...
Inefficient Algorithmic Complexity
Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the ConstructedPayloadDecoderBase.decodeComponentsSchemaless method in pyasn1/codec/ber/decoder.py. An attacker can exhaust CPU during a schemaless decode of a BER, CER, or DER container by supplyin...
CVE-2019-25781
A flaw was found in Python-Markdown. An algorithmic complexity vulnerability in inline link parsing allows a remote attacker to cause a Denial of Service DoS by exhausting CPU resources. By submitting specially crafted Markdown text containing repeated unmatched brackets, an attacker can force th...
Security Bulletin: Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
Summary Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access Vulnerability Details CVEID:CVE-2026-75596 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, the default...
UBUNTU-CVE-2019-25781
Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerability in inline link parsing that allows remote attackers to exhaust CPU through unmatched brackets. Attackers can submit short Markdown containing repeated or ! characters, forcing LinkInlineProcessor.getText and getLi...
CVE-2019-25781
Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerability in inline link parsing that allows remote attackers to exhaust CPU through unmatched brackets. Attackers can submit short Markdown containing repeated or ! characters, forcing LinkInlineProcessor.getText and getLi...
Linux Distros Unpatched Vulnerability : CVE-2019-25781
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerability in inline link parsing that allows remote attackers to exhaust CPU through...
AZL-112457 CVE-2019-25781 affecting package python-markdown 3.8.2-3
Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerability in inline link parsing that allows remote attackers to exhaust CPU through unmatched brackets. Attackers can submit short Markdown containing repeated or ! characters, forcing LinkInlineProcessor.getText and getLi...
AZL-112517 CVE-2019-25781 affecting package tensorflow 2.16.1-11
Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerability in inline link parsing that allows remote attackers to exhaust CPU through unmatched brackets. Attackers can submit short Markdown containing repeated or ! characters, forcing LinkInlineProcessor.getText and getLi...
CVE-2019-25781
Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerability in inline link parsing that allows remote attackers to exhaust CPU through unmatched brackets. Attackers can submit short Markdown containing repeated or ! characters, forcing LinkInlineProcessor.getText and getLi...