CVE-2026-34827

Rack CVE-2026-34827 describes an algorithmic-DoS in Rack::Multipart::Parser#handle_mime_head where quoted multipart parameters are parsed with repeated String#index searches and slice! prefix deletion. Affected versions are 3.0.0.beta1 up to before 3.1.21, and 3.2.0 up to before 3.2.6. An unauthe...

GHSA-Q8XJ-8XG3-W432 Uncontrolled Resource Consumption in spray-json

Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service resource consumption because of Algorithmic Complexity during the parsing of many JSON object fields with keys that have the same hash code...

Perl Email-Address Module Denial of Service Vulnerability

Perl is a cross-platform programming language and Email-Address is one of the email address modules. An algorithmic complexity vulnerability in the Address.pm file of Perl Email-Address allows remote attackers to submit special strings for denial of service attacks...