the-sanitizer-is-the-weapon-cve-2026-68749-cve-2026-68750-quadratic-dos-in-elixir-html-sanitize-ex

CVE-2026-68749 / CVE-2026-68750 — PoC Quadratic denial of service in htmlsanitizeex run of word chars with a trailing : CVE-2026-68750| HtmlSanitizeEx.Traverser.traverse/2| CWE-407 quadratic traversal| flat run of allowed sibling tags e.g. a × 20,000 CVE-2026-68749 is only reachable via html5/1 o...

PT-2026-123293

Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 implementation of mtrudel bandit allows an unauthenticated remote attacker to exhaust server memory via DATA frames sent past the advertised receive window. The attacker requests a response larger than the 65,535-byt...

PT-2026-125112

Name of the Vulnerable Software and Affected Versions potatosalad jose versions 1.0.0 through 1.11.12 Description An improper handling of highly compressed data, known as data amplification, allows a remote attacker to exhaust a node's memory using a small crafted JWE token. The jose jwe...

CVE-2025-31864

CVE-2025-31864 1️⃣ Component type WordPress plugin 2️⃣ Component details Component name Beam me up Scotty – Back to Top Button Vulnerable version = 1.0.23 Component slug beam-me-up-scotty Component link https://wordpress.org/plugins/beam-me-up-scotty/ 3️⃣ OWASP 2017: TOP 10 Vulnerability class A3:...

Denial of Service Attacks on Beam Allocation in Large LEO Constellations

We study the vulnerability of beam allocation approaches in large low-Earth-orbit LEO satellite constellations to adversarial demand inflation resulting in denial-of-service attacks. We consider an attack model in which an adversary places injects additional terminals and evaluate these attacks...

sendnn-inference (>=2.6.0, <=2.6.3), tq-quant (0.3.3) +1 more potentially affected by CVE-2026-109311 via vllm (>=0.27.1, <=0.28.0)

vllm PYPI version =0.27.1, =2.6.0, =2.6.3 - tq-quant 0.3.3 - vllm-beam-search-plugin 0.1.4 Source cves: CVE-2026-109311 Source advisory: MEND:CVE-2026-109311...

CVE-2026-97853

Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service. Decimal.round/3 builds the full result for the requested number of decimal places before the context precision 34 digits by default is applied, so its cost grows with the places argument instead ...

EUVD-2026-96426

Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service. Decimal.round/3 builds the full result for the requested number of decimal places before the context precision 34 digits by default is applied, so its cost grows with the places argument instead ...

CVE-2026-97853

Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service. Decimal.round/3 builds the full result for the requested number of decimal places before the context precision 34 digits by default is applied, so its cost grows with the places argument instead ...

CVE-2026-97853 Unbounded allocation in decimal Decimal.round/3 driven by the places argument enables DoS

Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service. Decimal.round/3 builds the full result for the requested number of decimal places before the context precision 34 digits by default is applied, so its cost grows with the places argument instead ...

Security Bulletin: erlang

Summary This entire batch of CVEs represents a coordinated vulnerability disclosure for Erlang/OTP, affecting components within the built-in inets httpc / httpd application and the snmp library. Vulnerability Details CVEID:CVE-2026-55951 DESCRIPTION: The Erlang/OTP httpc HTTP client does not...

PT-2026-107971

Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beam mcp allows an MCP client to reach a tool's dispatch function with arguments that violate the input schema the server advertised. BeamMCP.Schema.validate/2 checked type, required, additionalProperties, enum and numeric...

org.apache.beam:beam-sdks-java-io-rabbitmq (>=2.13.0, <=2.17.0) potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (4.9.3)

com.rabbitmq:amqp-client MAVEN version 4.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.apache.beam:beam-sdks-java-io-rabbitmq =2.13.0, =2.17.0 Source cves: CVE-2026-106122 Source advisory:...

org.apache.beam:beam-sdks-java-io-rabbitmq (>=2.13.0, <=2.17.0) potentially affected by CVE-2026-106123 via com.rabbitmq:amqp-client (4.9.3)

com.rabbitmq:amqp-client MAVEN version 4.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.apache.beam:beam-sdks-java-io-rabbitmq =2.13.0, =2.17.0 Source cves: CVE-2026-106123 Source advisory:...

org.apache.beam:beam-sdks-java-io-snowflake (>=2.25.0, <=2.60.0) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.12.11)

net.snowflake:snowflake-jdbc MAVEN version 3.12.11 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - org.apache.beam:beam-sdks-java-io-snowflake =2.25.0, =2.60.0 Source cves: CVE-2026-86597 Source...

CVE-2026-94201 Filtering an :atom attribute with unsafe_to_atom? can exhaust the BEAM atom table in Ash

Ash stores :atom-typed attributes as strings and compares them as strings. When such an attribute is referenced in a filter, the comparison value is coerced through Ash.Type.Atom. Because the type defined no coerce/2 callback, coercion fell back to the default castinput/2, which calls...

EEF-CVE-2026-94201 Filtering an :atom attribute with unsafe_to_atom? can exhaust the BEAM atom table in Ash

Summary Ash stores :atom-typed attributes as strings and compares them as strings. When such an attribute is referenced in a filter, the comparison value is coerced through Ash.Type.Atom. Because the type defined no coerce/2 callback, coercion fell back to the default castinput/2, which calls...

CVE-2026-94201 Filtering an :atom attribute with unsafe_to_atom? can exhaust the BEAM atom table in Ash

Ash stores :atom-typed attributes as strings and compares them as strings. When such an attribute is referenced in a filter, the comparison value is coerced through Ash.Type.Atom. Because the type defined no coerce/2 callback, coercion fell back to the default castinput/2, which calls...

CVE-2026-94201 Filtering an :atom attribute with unsafe_to_atom? can exhaust the BEAM atom table in Ash

Ash stores :atom-typed attributes as strings and compares them as strings. When such an attribute is referenced in a filter, the comparison value is coerced through Ash.Type.Atom. Because the type defined no coerce/2 callback, coercion fell back to the default castinput/2, which calls...

CVE-2026-75538

A flaw was found in Erlang/OTP. A remote, unauthenticated attacker can exploit a signed length overflow vulnerability in the inet TCP driver when operating in packet,4 mode. By sending a specially crafted packet, the attacker can cause an incorrect packet length calculation, leading to a buffer...