Quadratic Behavior in xml.etree.ElementPath Index Predicates

...

CVE-2026-48511

Summary: CVE-2026-48511 affects MessagePack for C# where ExpandoObjectFormatter.Deserialize inserts map entries into ExpandoObject via IDictionary.Add. This insertion pattern, coupled with ExpandoObject’s internal array-like member storage, can trigger repeated linear scans and array copies, caus...

CVE-2026-53539

Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.30, when parsing application/x-www-form-urlencoded bodies, QuerystringParser located the field separator with a two step lookup: it first scanned the entire remaining buffer for &, and only when no & existed anywhere ahead...

AZL-88802 CVE-2026-44378 affecting package botan2 2.14.0-2

Botan is a C++ cryptography library. Prior to 3.12.0, certain patterns of indefinite length encodings in BER data could cause quadratic behavior in the parser, resulting in a denial of service. Such BER encodings were accepted even in structures which are required to be encoded as DER, which...

CVE-2026-44378: Inefficient Algorithmic Complexity

Botan is a C++ cryptography library. Prior to 3.12.0, certain patterns of indefinite length encodings in BER data could cause quadratic behavior in the parser, resulting in a denial of service. Such BER encodings were accepted even in structures which are required to be encoded as DER, which...

[SA18846] Libapreq2 Unspecified Vulnerability

TITLE: Libapreq2 Unspecified Vulnerability SECUNIA ADVISORY ID: SA18846 VERIFY ADVISORY: http://secunia.com/advisories/18846/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: Libapreq2 2.x http://secunia.com/product/8138/ DESCRIPTION: A vulnerability has been reported in Libapreq2...