Lucene search
+L

479 matches found

EUVD
EUVD
•added 2026/09/08 4:12 p.m.•18 views

EUVD-2026-72945

A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...

7.1CVSS5.9AI score0.00402EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/08 4:12 p.m.•20 views

CVE-2026-82058 Unhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of Service

A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...

7.1CVSS5.9AI score0.00402EPSS
SaveExploits0References1
MongoDB
MongoDB
•added 2026/09/08 4:12 p.m.•17 views

Unhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of Service

A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...

7.1CVSS5.9AI score0.00402EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2026/09/08 4:12 p.m.•47 views

CVE-2026-82058

MongoDB 's mongod server is vulnerable to a denial-of-service flaw in its JSON Schema validation error generation code. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error path performs an unsafe numeric conversion on t...

7.1CVSS5.9AI score0.00402EPSS
SaveExploits0References1Affected Software1
F5 Networks
F5 Networks
•added 2026/09/08 7:08 a.m.•18 views

K000163236: Node.js vulnerability CVE-2021-3918

Security Advisory Description json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' CVE-2021-3918 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5 Product Development has...

9.8CVSS7AI score0.0383EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•29 views

PT-2026-87151

Name of the Vulnerable Software and Affected Versions MongoDB affected versions not specified Description A flaw in the JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. The issue occurs when a BSON document containing ...

7.1CVSS5.8AI score0.00402EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•9 views

CVE-2026-82058: Uncaught Exception

A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...

7.1CVSS5.9AI score0.00402EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/04 11:17 a.m.•19 views

CVE-2026-84428

fastify versions before 5.12.2 implement the case-insensitive nature of HTTP header names by lowercasing names in a route's header schema before compiling it, but the transformation is incomplete: it lowercases the properties keys and the root-level required array, and does not lowercase the...

7.5CVSS0.00524EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/09/04 11:13 a.m.•14 views

CVE-2026-84428

A flaw was found in fastify. Due to incomplete case normalization of HTTP header names within a route's header schema, specifically within the JSON Schema Draft 7 dependencies keyword, an unauthenticated remote attacker can bypass intended conditional checks. This allows the attacker to send...

7.5CVSS7.3AI score0.00524EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/04 10:24 a.m.•20 views

CVE-2026-84428 fastify vulnerable to header validation bypass via incomplete schema case normalization

fastify versions before 5.12.2 implement the case-insensitive nature of HTTP header names by lowercasing names in a route's header schema before compiling it, but the transformation is incomplete: it lowercases the properties keys and the root-level required array, and does not lowercase the...

7.5CVSS7.3AI score0.00524EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/09/04 10:24 a.m.•21 views

CVE-2026-84428 fastify vulnerable to header validation bypass via incomplete schema case normalization

fastify versions before 5.12.2 implement the case-insensitive nature of HTTP header names by lowercasing names in a route's header schema before compiling it, but the transformation is incomplete: it lowercases the properties keys and the root-level required array, and does not lowercase the...

7.5CVSS7.3AI score0.00524EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/04 10:17 a.m.•19 views

CVE-2026-84469

fastify versions before 5.12.2 decide whether to compile a request schema based on JavaScript truthiness, but JSON Schema Draft 7 defines the boolean false as a valid schema that rejects every instance. When an application assigns false to a route's body, querystring, params, or headers schema to...

7.5CVSS0.00492EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/04 9:59 a.m.•14 views

CVE-2026-84469 fastify vulnerable to request validation bypass via skipped boolean false schemas

fastify versions before 5.12.2 decide whether to compile a request schema based on JavaScript truthiness, but JSON Schema Draft 7 defines the boolean false as a valid schema that rejects every instance. When an application assigns false to a route's body, querystring, params, or headers schema to...

7.5CVSS7.4AI score0.00492EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/04 12:00 a.m.•27 views

PT-2026-85472

Name of the Vulnerable Software and Affected Versions fastify versions prior to 5.12.2 Description An issue exists in how HTTP header names are handled during the compilation of a route's header schema. The software attempts to implement the case-insensitive nature of HTTP headers by lowercasing...

7.5CVSS7.3AI score0.00524EPSS
SaveExploits0References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/04 12:00 a.m.•7 views

CVE-2026-84469: Improper Input Validation

fastify versions before 5.12.2 decide whether to compile a request schema based on JavaScript truthiness, but JSON Schema Draft 7 defines the boolean false as a valid schema that rejects every instance. When an application assigns false to a route's body, querystring, params, or headers schema to...

7.5CVSS7.5AI score0.00492EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/09/02 12:00 a.m.•21 views

Linux Distros Unpatched Vulnerability : CVE-2026-52130

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in common/json-schema-to-grammar.cpp, resulting in a denial of service. CVE-2026-52130 Note...

7.5CVSS5.7AI score0.00493EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/01 6:17 p.m.•22 views

CVE-2026-52130

llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in common/json-schema-to-grammar.cpp, resulting in a denial of service...

7.5CVSS0.00493EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/09/01 6:17 p.m.•16 views

DEBIAN-CVE-2026-52130

llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in common/json-schema-to-grammar.cpp, resulting in a denial of service...

7.5CVSS5.8AI score0.00493EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/01 12:00 a.m.•23 views

PT-2026-84365

Name of the Vulnerable Software and Affected Versions llama.cpp versions prior to b5694 Description Uncontrolled recursion occurs in the common/json-schema-to-grammar.cpp file, which can lead to a denial of service. Uncontrolled recursion is a condition where a function calls itself without a...

7.5CVSS5.7AI score0.00493EPSS
SaveExploits0References12
Vulnrichment
Vulnrichment
•added 2026/09/01 12:00 a.m.•18 views

CVE-2026-52130

llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in common/json-schema-to-grammar.cpp, resulting in a denial of service...

5.8AI score0.00493EPSS
SaveExploits0References2
Rows per page
Query Builder