22 matches found
CVE-2026-18929
Carbone is vulnerable to Denial of Service due to lack of protection against zip bombs when processing .docx files. The library uses yazl for zip decompression without validating entry sizes, allowing an attacker to supply a malicious .docx file containing a zip bomb that decompresses to a...
CVE-2026-18929
Carbone's yazl-based zip decompression of .docx files lacks entry-size validation, enabling zip-bomb attacks that cause excessive memory consumption and server crashes. CVSS 6.9 (MEDIUM). Fixed in versions 3.8.2, 4.26.3, and 5.4.4. No in-the-wild exploitation reported. Details: https://github.com...
EUVD-2026-60574
Carbone is vulnerable to Denial of Service due to lack of protection against zip bombs when processing .docx files. The library uses yazl for zip decompression without validating entry sizes, allowing an attacker to supply a malicious .docx file containing a zip bomb that decompresses to a...
CVE-2026-18929 Resource Exhaustion in Carbone
Carbone is vulnerable to Denial of Service due to lack of protection against zip bombs when processing .docx files. The library uses yazl for zip decompression without validating entry sizes, allowing an attacker to supply a malicious .docx file containing a zip bomb that decompresses to a...
@bcgov/carbone-copy-api (>=1.0.0, <=2.1.1), @bcgov/carbone-render (>=1.0.0, <=2.1.2) +11 more potentially affected by CVE-2026-18929 via carbone (>=1.1.0, <=2.1.1)
carbone NPM version =1.1.0, =1.0.0, =1.0.0, =5.4.0, =5.4.0, =5.4.0-RC1, =5.4.0, =1.0.0, =5.4.0-RC1, =5.4.0-RC1, =5.4.0-RC1, =5.4.0-RC1, =5.4.0-RC1, =5.5.0-rc.4 Source cves: CVE-2026-18929 Source advisory: MEND:CVE-2026-18929...
CVE-2026-18929 Resource Exhaustion in Carbone
Carbone is vulnerable to Denial of Service due to lack of protection against zip bombs when processing .docx files. The library uses yazl for zip decompression without validating entry sizes, allowing an attacker to supply a malicious .docx file containing a zip bomb that decompresses to a...
CVE-2026-18929 Resource Exhaustion in Carbone
Carbone is vulnerable to Denial of Service due to lack of protection against zip bombs when processing .docx files. The library uses yazl for zip decompression without validating entry sizes, allowing an attacker to supply a malicious .docx file containing a zip bomb that decompresses to a...
CVE-2026-18929
Carbone is vulnerable to Denial of Service due to lack of protection against zip bombs when processing .docx files. The library uses yazl for zip decompression without validating entry sizes, allowing an attacker to supply a malicious .docx file containing a zip bomb that decompresses to a...
CVE-2026-18929
Carbone is vulnerable to Denial of Service due to lack of protection against zip bombs when processing .docx files. The library uses yazl for zip decompression without validating entry sizes, allowing an attacker to supply a malicious .docx file containing a zip bomb that decompresses to a...
PT-2026-76909
Carbone is vulnerable to Denial of Service due to lack of protection against zip bombs when processing .docx files. The library uses yazl for zip decompression without validating entry sizes, allowing an attacker to supply a malicious .docx file containing a zip bomb that decompresses to a...
CVE-2026-18929: Improper Handling of Highly Compressed Data (Data Amplification)
Carbone is vulnerable to Denial of Service due to lack of protection against zip bombs when processing .docx files. The library uses yazl for zip decompression without validating entry sizes, allowing an attacker to supply a malicious .docx file containing a zip bomb that decompresses to a...
CVE-2024-14020
A weakness has been identified in carboneio carbone up to fbcd349077ad0e8748be73eab2a82ea92b6f8a7e. This impacts an unknown function of the file lib/input.js of the component Formatter Handler. Executing a manipulation can lead to improperly controlled modification of object prototype attributes...
carbone Code Injection vulnerability
A weakness has been identified in carboneio carbone up to fbcd349077ad0e8748be73eab2a82ea92b6f8a7e. This impacts an unknown function of the file lib/input.js of the component Formatter Handler. Executing a manipulation can lead to improperly controlled modification of object prototype attributes...
GHSA-6RCW-WW3X-XQWM carbone Code Injection vulnerability
A weakness has been identified in carboneio carbone up to fbcd349077ad0e8748be73eab2a82ea92b6f8a7e. This impacts an unknown function of the file lib/input.js of the component Formatter Handler. Executing a manipulation can lead to improperly controlled modification of object prototype attributes...
Prototype Pollution
Overview carbone is a Fast, Simple and Powerful report generator. Injects JSON and produces PDF, DOCX, XLSX, ODT, PPTX, ODS, ...! Affected versions of this package are vulnerable to Prototype Pollution via the formatters parameter in lib/input.js. An attacker can modify object prototype attribute...
CVE-2024-14020
A weakness has been identified in carboneio carbone up to fbcd349077ad0e8748be73eab2a82ea92b6f8a7e. This impacts an unknown function of the file lib/input.js of the component Formatter Handler. Executing a manipulation can lead to improperly controlled modification of object prototype attributes...
@bcgov/carbone-copy-api (>=1.0.0, <=2.1.1), @bcgov/carbone-render (>=1.0.0, <=2.1.2) +11 more potentially affected by CVE-2024-14020 via carbone (>=1.1.0, <=2.1.1)
carbone NPM version =1.1.0, =1.0.0, =1.0.0, =5.4.0, =5.4.0, =5.4.0-RC1, =5.4.0, =1.0.0, =5.4.0-RC1, =5.4.0-RC1, =5.4.0-RC1, =5.4.0-RC1, =5.4.0-RC1, =5.5.0-rc.4 Source cves: CVE-2024-14020 Source advisory: MEND:CVE-2024-14020...
EUVD-2026-1182
A weakness has been identified in carboneio carbone up to fbcd349077ad0e8748be73eab2a82ea92b6f8a7e. This impacts an unknown function of the file lib/input.js of the component Formatter Handler. Executing a manipulation can lead to improperly controlled modification of object prototype attributes...
PT-2026-1548
Name of the Vulnerable Software and Affected Versions carboneio carbone versions prior to 3.5.6 Description A weakness exists in carboneio carbone up to version fbcd349077ad0e8748be73eab2a82ea92b6f8a7e. The issue resides in the Formatter Handler component, specifically within the file lib/input.j...
PT-2026-6385
A weakness has been identified in carboneio carbone up to fbcd349077ad0e8748be73eab2a82ea92b6f8a7e. This impacts an unknown function of the file lib/input.js of the component Formatter Handler. Executing a manipulation can lead to improperly controlled modification of object prototype attributes...