EUVD-2026-124560

In Progress® Telerik® UI for ASP.NET Core versions 2015.1.318 through 2026.3.1015, the server-side FilterParser processes nested expressions in untrusted filter parameters through recursive parsing without a recursion-depth limit, while FilterLexer does not enforce an input-length limit. An...

CVE-2026-106154

In Progress® Telerik® UI for ASP.NET Core versions 2015.1.318 through 2026.3.1015, the server-side FilterParser processes nested expressions in untrusted filter parameters through recursive parsing without a recursion-depth limit, while FilterLexer does not enforce an input-length limit. An...

CVE-2026-106154

Progress Telerik UI for ASP.NET Core versions 2015.1.318 through 2026.3.1015 are vulnerable to uncontrolled recursion in the server-side FilterParser component. The vulnerability occurs because the parser processes nested expressions in untrusted filter parameters without a recursion-depth limit,...