CVE-2026-119203 pypdf: Possible infinite loop when hitting EOF in standard xref table during trailer search

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinite loop while opening a crafted incomplete PDF whose standard cross-reference table reaches the end of the file without a trailer. The trailer search can repeatedly rewind to the same stream positio...

CVE-2026-119203

The pypdf pure-python PDF library is vulnerable to a Denial of Service (DoS) condition in versions prior to 6.21.4 . A crafted incomplete PDF file can trigger an infinite loop during the trailer search if the standard cross-reference table reaches the end of the file (EOF) without a trailer. This...

CVE-2026-119203 pypdf: Possible infinite loop when hitting EOF in standard xref table during trailer search

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinite loop while opening a crafted incomplete PDF whose standard cross-reference table reaches the end of the file without a trailer. The trailer search can repeatedly rewind to the same stream positio...

CVE-2026-119203 pypdf: Possible infinite loop when hitting EOF in standard xref table during trailer search

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinite loop while opening a crafted incomplete PDF whose standard cross-reference table reaches the end of the file without a trailer. The trailer search can repeatedly rewind to the same stream positio...

CVE-2026-119203

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinite loop while opening a crafted incomplete PDF whose standard cross-reference table reaches the end of the file without a trailer. The trailer search can repeatedly rewind to the same stream positio...

CVE-2026-119202 @hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of service

@hapi/content provides HTTP Content- header parsing. From 3.0.6 until 6.0.3, Content.disposition uses an unanchored parameter-name expression in a global regular-expression scan, causing repeated failed matching over the remaining input when a Content-Disposition parameter contains a long token...

CVE-2026-119202

The @hapi/content library (versions 3.0.6 through 6.0.3) is vulnerable to a Denial of Service (DoS) attack due to quadratic-time parsing in the Content.disposition() function. The root cause is an unanchored parameter-name expression used in a global regular-expression scan, which triggers repeat...

CVE-2026-119202 @hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of service

@hapi/content provides HTTP Content- header parsing. From 3.0.6 until 6.0.3, Content.disposition uses an unanchored parameter-name expression in a global regular-expression scan, causing repeated failed matching over the remaining input when a Content-Disposition parameter contains a long token...

dnsmasq: NSEC bitmap parsing infinite loop

A denial of service vulnerability was discovered in dnsmasq's DNSSEC validation. When parsing NSEC and NSEC3 bitmap records, the window iteration logic fails to account for the 2-byte window header when advancing through the bitmap data. A specially crafted DNS response with a zero-length bitmap...

CVE-2026-118781

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used BigInteger.prototype.modInverse, bnModInverse, lib/jsbn.js, RSA public exponent e to process the relevant input or security decision. node-forge's...

CVE-2026-118772

joi is a schema description language and data validator for JavaScript. From 17.1.1 until 17.13.9 and 18.3.1, the Joi.string.email multiple: true rule uses a separator regular expression whose leading whitespace quantifier is retried at every position in a long whitespace run that contains no...

CVE-2026-118781 Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891)

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used BigInteger.prototype.modInverse, bnModInverse, lib/jsbn.js, RSA public exponent e to process the relevant input or security decision. node-forge's...

CVE-2026-118781

The node-forge (Forge) JavaScript TLS implementation is vulnerable to a Denial of Service (DoS) attack due to an infinite loop in its bundled jsbn implementation. The issue occurs when BigInteger.prototype.modInverse() receives a negative value or modulus, specifically when processing the RSA pub...

CVE-2026-118781 Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891)

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used BigInteger.prototype.modInverse, bnModInverse, lib/jsbn.js, RSA public exponent e to process the relevant input or security decision. node-forge's...

CVE-2026-118781 Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891)

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used BigInteger.prototype.modInverse, bnModInverse, lib/jsbn.js, RSA public exponent e to process the relevant input or security decision. node-forge's...

CVE-2026-118781

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used BigInteger.prototype.modInverse, bnModInverse, lib/jsbn.js, RSA public exponent e to process the relevant input or security decision. node-forge's...

CVE-2026-118772 joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service

joi is a schema description language and data validator for JavaScript. From 17.1.1 until 17.13.9 and 18.3.1, the Joi.string.email multiple: true rule uses a separator regular expression whose leading whitespace quantifier is retried at every position in a long whitespace run that contains no...

CVE-2026-118772 joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service

joi is a schema description language and data validator for JavaScript. From 17.1.1 until 17.13.9 and 18.3.1, the Joi.string.email multiple: true rule uses a separator regular expression whose leading whitespace quantifier is retried at every position in a long whitespace run that contains no...

CVE-2026-118772

The joi data validator for JavaScript is vulnerable to a quadratic work issue in the Joi.string().email({ multiple: true }) rule. Specifically, a separator regular expression's leading whitespace quantifier is retried at every position during long whitespace runs without a separator, causing sign...

Security Bulletin: Platform Navigator in IBM Cloud Pak for Integration is vulnerable to urllib3 vulnerabilities

Summary Platform Navigator in IBM Cloud Pak for Integration is vulnerable to urllib3 vulnerabilities CVE-2026-97687, CVE-2026-97688, CVE-2026-97689. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-97687 DESCRIPTION: urllib3 is an HTTP client library for Python. From...