CVE-2026-116871

Semantic MediaWiki 3.0.0 before 7.3.1 contains an uncontrolled recursion vulnerability in LegacyParser::getSubqueryDescription that processes nested query tokens before depth limits apply. Unauthenticated attackers can submit deeply nested query elements to the action=ask API to consume substanti...

CVE-2026-116871

Semantic MediaWiki versions 3.0.0 before 7.3.1 are vulnerable to an uncontrolled recursion vulnerability within the LegacyParser::getSubqueryDescription() component. The flaw occurs because nested query tokens are processed before depth limits are applied. An unauthenticated attacker can exploit ...

CVE-2026-116871 Semantic MediaWiki 3.0.0 before 7.3.1 Uncontrolled Recursion via Special:Ask

Semantic MediaWiki 3.0.0 before 7.3.1 contains an uncontrolled recursion vulnerability in LegacyParser::getSubqueryDescription that processes nested query tokens before depth limits apply. Unauthenticated attackers can submit deeply nested query elements to the action=ask API to consume substanti...

EUVD-2026-110699

Semantic MediaWiki 3.0.0 before 7.3.1 contains an uncontrolled recursion vulnerability in LegacyParser::getSubqueryDescription that processes nested query tokens before depth limits apply. Unauthenticated attackers can submit deeply nested query elements to the action=ask API to consume substanti...

PT-2026-126332

Semantic MediaWiki 3.0.0 before 7.3.1 contains an uncontrolled recursion vulnerability in LegacyParser::getSubqueryDescription that processes nested query tokens before depth limits apply. Unauthenticated attackers can submit deeply nested query elements to the action=ask API to consume substanti...