54581 matches found
Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
Overview org.webjars.npm:fast-xml-parser is a Validate XML, Parse XML, Build XML without C/C++ based libraries Affected versions of this package are vulnerable to Improper Restriction of Recursive Entity References in DTDs 'XML Entity Expansion' via the addInputEntities function. An attacker can...
CVE-2026-62465
Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HRMS US executes to...
CVE-2026-61108
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: GIS. Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protoco...
CVE-2026-47143
Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in modRMRequired and decode when disassembling 3DNow! opcodes 0F 0F in builds compiled with -DCAPSTONEX86REDUCE, allowing a remote attacker to crash any application using the reduced X86...
Regular Expression Denial of Service (ReDoS)
Overview Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS through the Locale middleware when processing unauthenticated HTTP requests containing a specially crafted Accept-Language header. An attacker can exhaust server CPU resources by sending large...
Regular Expression Denial of Service (ReDoS)
Overview Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS through the Locale middleware when processing unauthenticated HTTP requests containing a specially crafted Accept-Language header. An attacker can exhaust server CPU resources by sending large...
Regular Expression Denial of Service (ReDoS)
Overview Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS through the Locale middleware when processing unauthenticated HTTP requests containing a specially crafted Accept-Language header. An attacker can exhaust server CPU resources by sending large...
Gitea: ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests
Summary The Locale middleware that runs in front of every unauthenticated request calls golang.org/x/text/language.ParseAcceptLanguage on the raw Accept-Language header without imposing a size or shape filter. The underlying parser has quadratic-time behaviour on long lists of malformed language...
AZL-93141 CVE-2026-56852 affecting package cert-manager for versions less than 1.12.15-11
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93093 CVE-2026-56852 affecting package podman 5.6.1-9
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93177 CVE-2026-56852 affecting package flannel for versions less than 0.24.2-29
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93111 CVE-2026-56852 affecting package azurelinux-image-tools for versions less than 1.5.0-2
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93201 CVE-2026-56852 affecting package ignition-flatcar for versions less than 2.22.0-6
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93327 CVE-2026-56852 affecting package vitess for versions less than 19.0.4-11
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93165 CVE-2026-56852 affecting package docker-buildx for versions less than 0.14.0-16
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93222 CVE-2026-56852 affecting package kubernetes for versions less than 1.30.10-27
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93315 CVE-2026-56852 affecting package skopeo for versions less than 1.14.4-12
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93168 CVE-2026-56852 affecting package docker-cli for versions less than 25.0.7-4
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...