CVE-2026-3382 ChaiScript boxed_number.hpp get_as memory corruption

A security flaw has been discovered in ChaiScript up to 6.1.0. The impacted element is the function chaiscript::BoxedNumber::getas of the file include/chaiscript/dispatchkit/boxednumber.hpp. Performing a manipulation results in memory corruption. The attack requires a local approach. The exploit...

ASB-A-457746802

Bulletin has no description...

PT-2026-22502

Name of the Vulnerable Software and Affected Versions ChaiScript versions up to 6.1.0 Description A flaw exists in ChaiScript that can lead to a divide by zero error. This issue is related to the chaiscript::Boxed Number::go function within the include/chaiscript/dispatchkit/boxed number.hpp file...

ChaiScript 安全漏洞

ChaiScript is an open-source programming language developed by ChaiScript. Versions of ChaiScript 6.1.0 and earlier contained security vulnerabilities. These vulnerabilities were caused by incorrect operations on the function chaiscript::BoxedNumber::go in the file...

ChaiScript 缓冲区错误漏洞

ChaiScript is an open-source programming language developed by ChaiScript contributors. Versions of ChaiScript 6.1.0 and earlier contained a buffer error vulnerability. This vulnerability stemmed from incorrect operations on the function chaiscript::BoxedNumber::getas in the file...

PT-2026-22501

Name of the Vulnerable Software and Affected Versions ChaiScript versions up to 6.1.0 Description A security flaw exists in ChaiScript that can lead to memory corruption. The issue is located in the get as function within the chaiscript::Boxed Number class, specifically in the...

ASB-A-457747735

Bulletin has no description...

ASB-A-472608387

Bulletin has no description...

ASB-A-457250114

Bulletin has no description...

ASB-A-464812755

Bulletin has no description...

Allocation of Resources Without Limits or Throttling

Overview com.fasterxml.jackson.core:jackson-core is a Core Jackson abstractions, basic JSON streaming API implementation Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in which the non-blocking async JSON parser can be made to bypass the...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in which the non-blocking async JSON parser can be made to bypass the maxNumberLength constraint default: 1000 characters defined in StreamReadConstraints. An attacker can cause...

jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition

Summary The non-blocking async JSON parser in jackson-core bypasses the maxNumberLength constraint default: 1000 characters defined in StreamReadConstraints. This allows an attacker to send JSON with arbitrarily long numbers through the async parser API, leading to excessive memory allocation and...

GHSA-72HV-8253-57QQ jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition

Summary The non-blocking async JSON parser in jackson-core bypasses the maxNumberLength constraint default: 1000 characters defined in StreamReadConstraints. This allows an attacker to send JSON with arbitrarily long numbers through the async parser API, leading to excessive memory allocation and...

PT-2026-67727

Name of the Vulnerable Software and Affected Versions jackson-core versions 2.15.0 through 2.18.7 jackson-core versions 2.19.0 through 2.21.3 jackson-core versions 3.0.0 through 3.1.3 Description A number length constraint bypass exists in the non-blocking parser. An attacker can stream JSON in...

EUVD-2026-9063

HTTP::Session2 versions before 1.12 for Perl for Perl may generate weak session ids using the rand function. The HTTP::Session2 session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epo...

CVE-2026-3255

HTTP::Session2 versions before 1.12 for Perl for Perl may generate weak session ids using the rand function. The HTTP::Session2 session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epo...

CVE-2026-3255 HTTP::Session2 versions before 1.12 for Perl may generate weak session ids using the rand() function

HTTP::Session2 versions before 1.12 for Perl for Perl may generate weak session ids using the rand function. The HTTP::Session2 session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epo...

CVE-2026-2680

Reflected Cross-Site Scripting XSS on the A3factura web platform, in parameter 'customerVATNumber', in 'a3factura-app.wolterskluwer.es//incomes/salesDeliveryNotes' endpoint, which could allow an attacker to execute arbitrary code in the victim's browser...

CVE-2026-28372

creationtimestamp| type| source ---|---|--- 2026-02-27 17:10:28+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mfu7c6ijjb2z 2026-03-02 07:10:32+00:00| seen| https://gist.github.com/alon710/e03d04f1cd72c0b9caeca59fc12c90ff 2026-03-02 16:20:10+00:00| seen|...