241 matches found
CVE-2026-108545: Uncontrolled Resource Consumption
SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist checks. Attackers can send large or compressed JSON or urlencoded bodies up to 50...
PT-2026-109656
Name of the Vulnerable Software and Affected Versions SillyTavern versions 1.12.13 through 1.19.0 Description A denial of service issue exists where unauthenticated remote attackers can exhaust system memory and CPU resources. This occurs because the body-parser middleware processes incoming...
Security Bulletin:qs.stringify TypeError: obj.constructor.isBuffer is not a function when serializing objects with own constructor.isBuffer property
Summary Summary qs.stringify throws a TypeError when it serializes an object whose own constructor property has a truthy, non-callable isBuffer member. utils.isBuffer duck-types buffers by calling obj.constructor.isBufferobj after checking only that the property is truthy, so a value such as...
Security Bulletin:body-parser Limit Validation Vulnerability in Versions Prior to 1.20.6 and 2.3.0
Summary Impact: In body-parser versions prior to 1.20.6 1.x line and 2.3.0 2.x line, when the parser is configured with an invalid limit option value such as an unparseable string or NaN, bytes.parse returns null and the request body size check is silently skipped. Applications that rely on limit...
CLEANSTART-2026-NW68824 Impact: In body-parser versions prior to 1
Security vulnerability affects the argo-workflows package. Impact: In body-parser versions prior to 1...
PT-2026-108490
Security vulnerability affects the argo-workflows package. Impact: In body-parser versions prior to 1...
Security Bulletin: IBM Quantum Safe Explorer is affected by multiple vulnerabilities
Summary Multiple vulnerabilities are found in dependent open source libraries used in IBM Quantum Safe Explorer code base. IBM Quantum Safe Explorer has addressed these vulnerabilities by updating the versions of the affected libraries. Vulnerability Details CVEID:CVE-2026-64607 DESCRIPTION:...
CLSA-2026-1790544295 TuxCare security update for body-parser (1 CVE)
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.20.4-tuxcare.1...
CLSA-2026-1790541942 TuxCare security update for body-parser (1 CVE)
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.20.5-tuxcare.1...
CLSA-2026-1790520930 TuxCare security update for body-parser (1 CVE)
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.20.3-tuxcare.1...
PT-2026-107735
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.20.5-tuxcare.1...
PT-2026-107635
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.20.3-tuxcare.1...
PT-2026-107740
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.20.4-tuxcare.1...
SUSE SLED15 / SLES15 Security Update : libsoup (SUSE-SU-2026:4023-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4023-1 advisory. This update for libsoup fixes the following issue: - CVE-2026-12548: out-of-bounds read in multipart body parser due to...
ROOT-APP-NPM-CVE-2024-45590 CVE-2024-45590 in body-parser - Patched by Root
Root has patched CVE-2024-45590 in the body-parser package for Root:npm. Multiple fixed versions available...
SUSE SLES12: libsoup-2_4-1 / libsoup-2_4-1-32bit / libsoup-devel / libsoup-lang / etc (SUSE-SU-2026:4105-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4105-1 advisory. This update for libsoup fixes the following issue: - CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncatio...
Astra Linux – Vulnerability in node-body-parser
body-parser is a Node.js body parsing middleware. body-parser version 1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denial of service. This issue has...
Security Bulletin: Multiple vulnerabilities affects IBM Db2 Big SQL on IBM Software Hub
Summary Multiple vulnerabilities affects IBM Db2 Big SQL on IBM Software Hub 5.4 and earlier. Vulnerability Details CVEID:CVE-2026-53655 DESCRIPTION: node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar node-tar applies a PAX extended header's size= record and other PAX overrides to...
SUSE-SU-2026:4105-1 Security update for libsoup
This update for libsoup fixes the following issue: - CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncation bsc1272196...
Security update for libsoup
This update for libsoup fixes the following issue: CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncation bsc1272196. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...