146694 matches found
Uncontrolled Recursion
Overview Affected versions of this package are vulnerable to Uncontrolled Recursion via the parsing process. An attacker can cause process termination by submitting a crafted OpenAPI document containing circular schema references. Remediation Upgrade Microsoft.OpenApi to version 2.7.5, 3.5.4 or...
Microsoft.OpenAPI: Circular schema references may terminate OpenAPI parsing
Impact A small OpenAPI document containing a circular schema reference can cause process termination through stack overflow in Microsoft.OpenApi. The issue affects OpenAPI document parsing through public OpenAPI.NET reader APIs and has been confirmed across both JSON and YAML reader paths. Affect...
CVE-2026-13316
Foreman (HTTP proxies: http_proxies_controller, http_proxy) is affected by a flaw that allows SSRF, enabling access to cloud metadata services in AWS/GCP/Azure environments via modified HTTP parameters. Root cause involves unvalidated/test_url parameters in Foreman’s configuration paths. Impact i...
EUVD-2026-40281
A flaw has been found in foreman when HTTP parameters are modified in httpproxiescontroller and httpproxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component...
CVE-2026-13316
A flaw has been found in foreman when HTTP parameters are modified in httpproxiescontroller and httpproxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component. Mitigation Mitigation for this issue is either not availab...
CVE-2026-13316
A flaw has been found in foreman when HTTP parameters are modified in httpproxiescontroller and httpproxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component...
Nmap - Integer Underflow in IPv6 Extension Header Parsing
...
bpf: Free reuseport cBPF prog after RCU grace period.
...
WebOb: Location header normalization during redirect leads to open redirect
...
padata: Put CPU offline callback in ONLINE section to allow failure
...
audit: fix incorrect inheritable capability in CAPSET records
...
ice: fix NULL pointer dereference in ice_reset_all_vfs()
...
Vim: Out-of-bounds Read with Text Properties
...
Vim: Out-of-bounds Read in Text Property Count
...
Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings
...
Vim: Out-of-bounds Write in Spell File Word Count
...
Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes
...
Nokogiri: Possible Use-After-Free in XInclude Processing
...