CVE-2026-108545 SillyTavern 1.12.13 through 1.19.0 Pre-Authentication Denial of Service via Body Parsing

SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist checks. Attackers can send large or compressed JSON or urlencoded bodies up to 50...

CVE-2026-108545: Uncontrolled Resource Consumption

SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist checks. Attackers can send large or compressed JSON or urlencoded bodies up to 50...

PT-2026-109656

Name of the Vulnerable Software and Affected Versions SillyTavern versions 1.12.13 through 1.19.0 Description A denial of service issue exists where unauthenticated remote attackers can exhaust system memory and CPU resources. This occurs because the body-parser middleware processes incoming...

SillyTavern resource management error vulnerability

In versions 1.12.13 to 1.19.0 of SillyTavern, there is a resource management error vulnerability. This vulnerability arises from the body-parser middleware running before authentication and whitelist checks. This allows unauthorized remote attackers to exhaust memory and CPU resources by sending...

Security Bulletin:qs.stringify TypeError: obj.constructor.isBuffer is not a function when serializing objects with own constructor.isBuffer property

Summary Summary qs.stringify throws a TypeError when it serializes an object whose own constructor property has a truthy, non-callable isBuffer member. utils.isBuffer duck-types buffers by calling obj.constructor.isBufferobj after checking only that the property is truthy, so a value such as...

Security Bulletin:body-parser Limit Validation Vulnerability in Versions Prior to 1.20.6 and 2.3.0

Summary Impact: In body-parser versions prior to 1.20.6 1.x line and 2.3.0 2.x line, when the parser is configured with an invalid limit option value such as an unparseable string or NaN, bytes.parse returns null and the request body size check is silently skipped. Applications that rely on limit...

CLEANSTART-2026-NW68824 Impact: In body-parser versions prior to 1

Security vulnerability affects the argo-workflows package. Impact: In body-parser versions prior to 1...

PT-2026-108490

Security vulnerability affects the argo-workflows package. Impact: In body-parser versions prior to 1...

Security Bulletin: IBM Quantum Safe Explorer is affected by multiple vulnerabilities

Summary Multiple vulnerabilities are found in dependent open source libraries used in IBM Quantum Safe Explorer code base. IBM Quantum Safe Explorer has addressed these vulnerabilities by updating the versions of the affected libraries. Vulnerability Details CVEID:CVE-2026-64607 DESCRIPTION:...

CLSA-2026-1790544295 TuxCare security update for body-parser (1 CVE)

TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.20.4-tuxcare.1...

CLSA-2026-1790541942 TuxCare security update for body-parser (1 CVE)

TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.20.5-tuxcare.1...

CLSA-2026-1790520930 TuxCare security update for body-parser (1 CVE)

TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.20.3-tuxcare.1...

PT-2026-107635

TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.20.3-tuxcare.1...

PT-2026-107735

TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.20.5-tuxcare.1...

PT-2026-107740

TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.20.4-tuxcare.1...

SUSE SLED15 / SLES15 Security Update : libsoup (SUSE-SU-2026:4023-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4023-1 advisory. This update for libsoup fixes the following issue: - CVE-2026-12548: out-of-bounds read in multipart body parser due to...

SUSE SLES12: libsoup-2_4-1 / libsoup-2_4-1-32bit / libsoup-devel / libsoup-lang / etc (SUSE-SU-2026:4105-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4105-1 advisory. This update for libsoup fixes the following issue: - CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncatio...

Astra Linux – Vulnerability in node-body-parser

body-parser is a Node.js body parsing middleware. body-parser version 1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denial of service. This issue has...

Security Bulletin: Multiple vulnerabilities affects IBM Db2 Big SQL on IBM Software Hub

Summary Multiple vulnerabilities affects IBM Db2 Big SQL on IBM Software Hub 5.4 and earlier. Vulnerability Details CVEID:CVE-2026-53655 DESCRIPTION: node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar node-tar applies a PAX extended header's size= record and other PAX overrides to...

SUSE-SU-2026:4105-1 Security update for libsoup

This update for libsoup fixes the following issue: - CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncation bsc1272196...