26 matches found
CVE-2026-62303
Pistache is a high-performance REST toolkit written in C++. From 0.0.5 through 0.4.26, SegmentTreeNode::sanitizeResource in src/server/router.cc uses std::regexreplace with the //+ expression to collapse consecutive slashes. With libstdc++, a path containing tens of thousands of consecutive slash...
Linux Distros Unpatched Vulnerability : CVE-2026-62303
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pistache is a high-performance REST toolkit written in C++. From 0.0.5 through 0.4.26, SegmentTreeNode::sanitizeResource in src/server/router.cc uses...
CVE-2026-62303
Pistache is a high-performance REST toolkit written in C++. From 0.0.5 through 0.4.26, SegmentTreeNode::sanitizeResource in src/server/router.cc uses std::regexreplace with the //+ expression to collapse consecutive slashes. With libstdc++, a path containing tens of thousands of consecutive slash...
EUVD-2026-114262
Pistache is a high-performance REST toolkit written in C++. From 0.0.5 through 0.4.26, SegmentTreeNode::sanitizeResource in src/server/router.cc uses std::regexreplace with the //+ expression to collapse consecutive slashes. With libstdc++, a path containing tens of thousands of consecutive slash...
CVE-2026-62303
The Pistache REST toolkit (versions 0.0.5 through 0.4.26 ) is vulnerable to a Denial of Service (DoS) via stack exhaustion. The root cause is located in src/server/router.cc within the SegmentTreeNode::sanitizeResource() function, which uses std::regex_replace() with the //+ expression to collaps...
CVE-2026-62303 Pistache: DoS via stack exhaustion in REST router path normalization (regex_replace on long slash runs)
Pistache is a high-performance REST toolkit written in C++. From 0.0.5 through 0.4.26, SegmentTreeNode::sanitizeResource in src/server/router.cc uses std::regexreplace with the //+ expression to collapse consecutive slashes. With libstdc++, a path containing tens of thousands of consecutive slash...
CVE-2026-62303 Pistache: DoS via stack exhaustion in REST router path normalization (regex_replace on long slash runs)
Pistache is a high-performance REST toolkit written in C++. From 0.0.5 through 0.4.26, SegmentTreeNode::sanitizeResource in src/server/router.cc uses std::regexreplace with the //+ expression to collapse consecutive slashes. With libstdc++, a path containing tens of thousands of consecutive slash...
PT-2026-133788
Name of the Vulnerable Software and Affected Versions Pistache versions 0.0.5 through 0.4.26 Description The SegmentTreeNode::sanitizeResource function in src/server/router.cc uses std::regex replace with the //+ expression to collapse consecutive slashes. When using libstdc++, a path containing...
CVE-2026-62303: pistacheio pistache: Pistache is a high-performance REST toolkit written in C++
Pistache is a high-performance REST toolkit written in C++. From 0.0.5 through 0.4.26, SegmentTreeNode::sanitizeResource in src/server/router.cc uses std::regexreplace with the //+ expression to collapse consecutive slashes. With libstdc++, a path containing tens of thousands of consecutive slash...
Malware in pistache-io
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2025-1255 Malicious code in pistache-io (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afc6da3b2752e910cba989cf5bd54d4c73f98590922de6b324e747464058a024 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in pistache-io (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afc6da3b2752e910cba989cf5bd54d4c73f98590922de6b324e747464058a024 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
OSV-2024-832 UNKNOWN READ in Pistache::Http::Header::Expect::parseRaw
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69151 Crash type: UNKNOWN READ Crash state: Pistache::Http::Header::Expect::parseRaw Pistache::Http::Private::HeadersStep::apply Pistache::Http::Private::ParserBase::parse...
PT-2024-40856 · Pistache · Pistache
Name of the Vulnerable Software and Affected Versions: Pistache affected versions not specified Description: The issue is related to a crash caused by an unknown read in the Pistache::Http::Header::Expect::parseRaw function. This function is part of the Pistache HTTP library, which is used for...
pistache:fuzz_parsers: Crash in Pistache::Http::Header::Expect::parseRaw
Project: https://github.com/pistacheio/pistache.git Detailed Report: https://oss-fuzz.com/testcase?key=4894082257190912 Project: pistache Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsers Job Type: libfuzzerasanpistache Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x518000050000...
PT-2024-40712 · Pistache · Pistache
Name of the Vulnerable Software and Affected Versions: Pistache affected versions not specified Description: The issue is related to a crash caused by a container-overflow read. Technical details about the crash include the involvement of the strtol function,...
pistache:fuzz_parsers: Container-overflow in strtol
Project: https://github.com/pistacheio/pistache.git Detailed Report: https://oss-fuzz.com/testcase?key=6066774966599680 Project: pistache Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsers Job Type: libfuzzerasanpistache Platform Id: linux Crash Type: Container-overflow READ 3 Crash Address:...
CVE-2022-26068
This affects the package pistacheio/pistache before 0.0.3.20220425. It is possible to traverse directories to fetch arbitrary files from the server...
