CVE-2026-116128

A flaw was found in Starlet. This vulnerability allows an unauthenticated remote attacker to cause a Denial of Service DoS through memory exhaustion. The issue occurs because the server fails to restrict buffer sizes when decoding chunked HTTP request bodies, allowing unconsumed input to accumula...

CVE-2026-62864

The Ring Clojure web applications library is vulnerable to a Regular-Expression Denial of Service (ReDoS) in versions prior to 1.15.5 . The wrap-nested-params function in the ring.middleware.nested-params namespace uses a backtracking regular expression to match parameter names from URL query str...

CVE-2026-54462

A flaw was found in knative.dev/pkg. The admission webhook handler does not enforce size restrictions on incoming HTTP request bodies. A network client can exploit this vulnerability by submitting an oversized request, causing the controller process to exhaust memory and crash. This results in a...

PT-2022-14939

Name of the Vulnerable Software and Affected Versions org.nanohttpd:nanohttpd affected versions not specified Description The issue affects the parsing of HTTP request bodies. When the body exceeds 1024 bytes, it is written to a RandomAccessFile with insecure permissions, allowing all users on th...