Uncontrolled Recursion

Axios is vulnerable to Denial Of Service. The vulnerability is due to uncontrolled recursion in formDataToJSON through buildPath when processing attacker-controlled FormData field names with deeply nested brackets, allowing an attacker to exhaust the JavaScript call stack and trigger a RangeError...

CVE-2026-67312: Uncontrolled Resource Consumption

axios versions from 0.28.0 before 0.33.0 and from 1.0.0 before 1.18.0 contain uncontrolled recursion in formDataToJSON exposed as axios.formToJSON and used internally when serializing FormData with Content-Type: application/json. When an application passes attacker-controlled FormData field names...

CVE-2007-1682: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in SoftArtisans XFile before 2.4.0 allow remote attackers to execute arbitrary code via unspecified calls to the 1 BuildPath, 2 GetDriveName, 3 DriveExists, or 4 DeleteFile method...

[SECURITY] New version of nfs-server fixes remote exploit

The version of nfs-server that was distributed in Debian GNU/Linux 2.1 had a buffer overflow in fhbuildpath. It assumed that the total length of a path would never exceed PATHMAXNAMEMAX. With a read/write exported directory people could created longes path and cause a bufferoverflow. This has bee...