923 matches found
PT-2026-125103
Name of the Vulnerable Software and Affected Versions Tornado versions prior to 6.6.0 Description Tornado decodes HTTP/1.1 chunked transfer encoding by processing body data that has already arrived without yielding to the event loop. A remote unauthenticated peer can send millions of one-byte...
PT-2026-125387
Name of the Vulnerable Software and Affected Versions Seroval versions prior to 1.6.8 Description Seroval allows for the stringification of JavaScript values, including complex structures. The fromJSON and fromCrossJSON functions fail to validate the done index of a sequence node. A specially...
Linux Distros Unpatched Vulnerability : CVE-2026-82333
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - multer is a middleware for handling multipart/form-data in Node.js. A small multipart request with two specially crafted text field names can make multer's fiel...
CVE-2026-115887
GraphQL Scalars is a library of custom GraphQL scalars for creating precise type-safe GraphQL schemas. From 1.24.1 until 2.0.1, GraphQLPhoneNumber in src/scalars/PhoneNumber.ts uses ambiguous nested digit quantifiers that backtrack exponentially when a PhoneNumber value contains a run of digits...
CVE-2026-115728 @hapi/content 6.0.1 before 6.0.3 ReDoS via Content.disposition() Parameter Parsing
@hapi/content from 6.0.1 before 6.0.3 contains a regular expression denial of service vulnerability in Content.disposition caused by an incomplete fix for CVE-2026-35213. Unauthenticated remote attackers can send multipart uploads with a long Content-Disposition parameter lacking an equals sign,...
CVE-2026-115728 @hapi/content 6.0.1 before 6.0.3 ReDoS via Content.disposition() Parameter Parsing
@hapi/content from 6.0.1 before 6.0.3 contains a regular expression denial of service vulnerability in Content.disposition caused by an incomplete fix for CVE-2026-35213. Unauthenticated remote attackers can send multipart uploads with a long Content-Disposition parameter lacking an equals sign,...
CVE-2026-115728
The @hapi/content library (versions 6.0.1 before 6.0.3 ) is vulnerable to a Regular Expression Denial of Service (ReDoS) via the Content.disposition() function. The root cause is an incomplete fix for CVE-2026-35213, where unauthenticated remote attackers can send multipart uploads featuring a lo...
CVE-2026-115728 @hapi/content 6.0.1 before 6.0.3 ReDoS via Content.disposition() Parameter Parsing
@hapi/content from 6.0.1 before 6.0.3 contains a regular expression denial of service vulnerability in Content.disposition caused by an incomplete fix for CVE-2026-35213. Unauthenticated remote attackers can send multipart uploads with a long Content-Disposition parameter lacking an equals sign,...
Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge
Summary Multiple vulnerabilities were addressed in IBM watsonx Orchestrate with watsonx Assistant Cartridge version 5.4.4 Vulnerability Details CVEID:CVE-2026-13149 DESCRIPTION: brace-expansion through 5.0.6 is vulnerable to denial of service. The expand function exhibits exponential-time...
PT-2026-122234
Name of the Vulnerable Software and Affected Versions GraphQL Scalars versions 1.24.1 through 2.0.0 Description The GraphQLPhoneNumber scalar in src/scalars/PhoneNumber.ts uses ambiguous nested digit quantifiers. This causes exponential backtracking when a value contains a sequence of digits...
EUVD-2026-107552
toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse...
EUVD-2026-107555
toml-node: Quadratic-complexity DoS via long dotted keys or table paths in toml.parse...
CVE-2026-114141
A flaw was found in toml. A remote attacker can trigger a Denial of Service DoS by supplying a crafted TOML document containing a large number of array-of-tables headers. Processing these unpruned headers causes repetitive path scanning that blocks the event loop, rendering the application...
CVE-2026-114141 toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse()
toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, the toml.parse compiler's addTableArray function in lib/compiler.js rescans the complete assignedPaths and valueAssignments bookkeeping sets for every array-of-tables header. Distinct name paths are not pruned, so a document...
Security Bulletin: IBM ApplinX is vulnerable to Improper Validation of Specified Quanitity in Input issue due to the use of source-map-js and @angular/router (CVE-2026-93749).
Summary A security vulnerability in source-map-js a transitive dependency via sass and @angular/router affects IBM ApplinX CVE-2026-93749. These packages are used in the ApplinX web framework front-end. IBM has issued fixes to resolve this vulnerability. The source-map-js version has been updated...
Denial-Of-Service (DoS)
io.netty, netty-codec-http3 is vulnerable to a denial-of-service DoS. The vulnerability is due to unbounded processing of continuation bytes, which allows a remote, unauthenticated attacker to exhaust heap memory and consume excessive CPU resources by sending malformed QPACK data, potentially...
Linux Distros Unpatched Vulnerability : CVE-2026-109563
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - N3.js before 2.11.1 contains a regular expression denial of service vulnerability in the N3Lexer number pattern that backtracks quadratically on long digit runs...
PT-2026-120810
toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, the toml.parse compiler's addTableArray function in lib/compiler.js rescans the complete assignedPaths and valueAssignments bookkeeping sets for every array-of-tables header. Distinct name paths are not pruned, so a document...
PT-2026-120812
toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse repeatedly slices and rejoins every path prefix in lib/compiler.js while processing long dotted keys, table headers, array-of-tables headers, and inline-table keys in assign, deepRef, and setNestedKey. The resultin...