1717 matches found
Security Bulletin: Multiple security vulnerabilities have been found in IBM Security Verify Information Queue
Summary Multiple security vulnerabilities in the third-party libraries have been addressed in IBM Security Verify Information Queue ISIQ. Vulnerability Details CVEID:CVE-2026-25639 DESCRIPTION: Axios is a promise based HTTP client for the browser and Node.js. Prior to versions 0.30.3 and 1.13.5,...
SUSE CVE-2026-67313
axios versions 0.28.0 and later contain uncontrolled recursion in formDataToJSON when processing FormData field names with deeply nested bracket segments. Attackers can supply FormData with field names containing thousands of nested brackets to exhaust the JavaScript call stack and trigger...
io.quarkus/quarkus-rest: io.quarkus/quarkus-vertx-http: io.quarkus.resteasy.reactive/resteasy-reactive: Quarkus REST - Unbounded multipart MIME part-header accumulation allows remote OOM denial of service
A flaw was found in Quarkus REST. An unauthenticated remote attacker can exploit this vulnerability by sending a crafted multipart/form-data request with an excessively large header section. This unbounded accumulation of MIME part-header bytes can exhaust the Java Virtual Machine JVM heap memory...
axios: axios: Denial of Service via uncontrolled recursion in formDataToJSON
A flaw was found in axios. A remote attacker could exploit an uncontrolled recursion vulnerability in the formDataToJSON function by supplying FormData with field names containing deeply nested bracket segments. This could exhaust the JavaScript call stack, leading to a RangeError and causing a...
CVE-2026-60009
In Eclipse Theia up to 1.73.1, the backend @theia/filesystem binds POST /file-upload in every filesystem-enabled deployment. The handler uses an attacker-supplied absolute path from the multipart uri field and calls fs.move(tmp, target, { overwrite: true }) with no workspace confinement and no au...
CVE-2026-7520
The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the signin and signup AJAX handlers in all versions up to, and including, 3.2.7. This makes it possible for authenticated attackers, with Subscriber-level...
CLSA-2026-1784943225 TuxCare security update for form-data (2 CVEs)
TuxCare rebuilt form-data to address 2 CVEs. Fixed in 2.3.3-tuxcare.5...
CLSA-2026-1785117379 TuxCare security update for form-data (1 CVE)
TuxCare rebuilt form-data to address 1 CVE. Fixed in 0.0.8-tuxcare.2...
CLSA-2026-1784943288 TuxCare security update for form-data (1 CVE)
TuxCare rebuilt form-data to address 1 CVE. Fixed in 2.1.4-tuxcare.2...
CLSA-2026-1785117393 TuxCare security update for form-data (1 CVE)
TuxCare rebuilt form-data to address 1 CVE. Fixed in 0.2.0-tuxcare.2...
CLSA-2026-1784856461 TuxCare security update for form-data (1 CVE)
TuxCare rebuilt form-data to address 1 CVE. Fixed in 4.0.0-tuxcare.2...
CLSA-2026-1785117456 TuxCare security update for form-data (3 CVEs)
TuxCare rebuilt form-data to address 3 CVEs. Fixed in 2.0.0-tuxcare.2...
CLSA-2026-1785117388 TuxCare security update for form-data (1 CVE)
TuxCare rebuilt form-data to address 1 CVE. Fixed in 0.1.4-tuxcare.2...
CLSA-2026-1785117455 TuxCare security update for form-data (1 CVE)
TuxCare rebuilt form-data to address 1 CVE. Fixed in 1.0.1-tuxcare.2...
CLSA-2026-1784856187 TuxCare security update for form-data (1 CVE)
TuxCare rebuilt form-data to address 1 CVE. Fixed in 4.0.1-tuxcare.2...
CLSA-2026-1781484836 TuxCare security update for form-data (5 CVEs)
TuxCare rebuilt form-data to address 5 CVEs. Fixed in 4.0.0-tuxcare.1...
CLSA-2026-1781484855 TuxCare security update for form-data (8 CVEs)
TuxCare rebuilt form-data to address 8 CVEs. Fixed in 4.0.1-tuxcare.1...
CLSA-2026-1777941829 TuxCare security update for form-data (4 CVEs)
TuxCare rebuilt form-data to address 4 CVEs. Fixed in 1.0.1-tuxcare.1...