52 matches found
CVE-2026-95112
When processing issue and comment bodies, Gitea scanned the entire preceding text for action keywords such as "closes" or "fixes" once per Markdown link, giving processing time quadratic in the input size. An authenticated user able to submit issue or comment content could send a crafted body of...
CVE-2026-95112
When processing issue and comment bodies, Gitea scanned the entire preceding text for action keywords such as "closes" or "fixes" once per Markdown link, giving processing time quadratic in the input size. An authenticated user able to submit issue or comment content could send a crafted body of...
CVE-2026-95112
When processing issue and comment bodies, Gitea scanned the entire preceding text for action keywords such as "closes" or "fixes" once per Markdown link, giving processing time quadratic in the input size. An authenticated user able to submit issue or comment content could send a crafted body of...
CVE-2026-95112
An authenticated user can cause CPU exhaustion in Gitea by submitting a crafted issue or comment body of approximately 1 MB. The vulnerability occurs because the software scans the entire preceding text for action keywords (like "closes" or "fixes") once for every Markdown link, resulting in quad...
Astra Linux – Vulnerability in python-idna
A vulnerability was identified in the kjd/idna library, specifically within the idna.encode function, affecting version 3.6. The issue arises from the function’s handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This...
CVE-2026-45759 Suricata http1: quadratic Content-Disposition processing can lead to denial of service
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata could repeatedly perform expensive parsing of large HTTP Content-Disposition headers during HTTP response body processing. Crafted HTT...
EUVD-2026-70780
MOOS-IvP versions through 24.8.1 contain a quadratic processing vulnerability in uFldNodeComms where each new node identity creates a ledger entry and triggers all-pairs distribution work. Attackers can supply unbounded distinct node names in reports to drive the shoreside broker into quadratic...
CVE-2026-85446
MOOS-IvP versions through 24.8.1 are affected by a quadratic processing vulnerability in the uFldNodeComms component. Each new node identity creates a ledger entry and triggers all-pairs distribution work, allowing a network-based attacker to supply unbounded distinct node names in reports and dr...
CVE-2026-85446 MOOS-IvP through 24.8.1 uFldNodeComms Quadratic Processing Denial of Service
MOOS-IvP versions through 24.8.1 contain a quadratic processing vulnerability in uFldNodeComms where each new node identity creates a ledger entry and triggers all-pairs distribution work. Attackers can supply unbounded distinct node names in reports to drive the shoreside broker into quadratic...
CVE-2026-85446 MOOS-IvP through 24.8.1 uFldNodeComms Quadratic Processing Denial of Service
MOOS-IvP versions through 24.8.1 contain a quadratic processing vulnerability in uFldNodeComms where each new node identity creates a ledger entry and triggers all-pairs distribution work. Attackers can supply unbounded distinct node names in reports to drive the shoreside broker into quadratic...
CVE-2026-85446 MOOS-IvP through 24.8.1 uFldNodeComms Quadratic Processing Denial of Service
MOOS-IvP versions through 24.8.1 contain a quadratic processing vulnerability in uFldNodeComms where each new node identity creates a ledger entry and triggers all-pairs distribution work. Attackers can supply unbounded distinct node names in reports to drive the shoreside broker into quadratic...
SUSE CVE-2026-82398
pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, an attacker can craft a PDF that causes long runtimes when the pypdf/utils.py function readuntilwhitespace reads a stream containing a long run of bytes without whitespace. The function repeatedly performs immutable bytes...
PT-2026-85295
Name of the Vulnerable Software and Affected Versions MOOS-IvP versions prior to 24.8.2 Description A quadratic processing issue exists in uFldNodeComms where the creation of a new node identity generates a ledger entry and triggers all-pairs distribution work. An attacker can provide an unlimite...
CVE-2026-85446: Inefficient Algorithmic Complexity
MOOS-IvP versions through 24.8.1 contain a quadratic processing vulnerability in uFldNodeComms where each new node identity creates a ledger entry and triggers all-pairs distribution work. Attackers can supply unbounded distinct node names in reports to drive the shoreside broker into quadratic...
CVE-2026-84378
A flaw was found in httpx2, a Python HTTP client. The Server-Sent Events SSE parser in httpx2 can be exploited by a remote attacker. By sending a specially crafted stream where an unterminated line is split across many response chunks, the parser repeatedly copies and rescans buffered text. This...
EUVD-2026-68894
pypdf: Inefficient handling of non-whitespace inputs in readuntilwhitespace...
CVE-2026-82398
pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, an attacker can craft a PDF that causes long runtimes when the pypdf/utils.py function readuntilwhitespace reads a stream containing a long run of bytes without whitespace. The function repeatedly performs immutable bytes...
CVE-2026-82398: Inefficient Algorithmic Complexity
pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, an attacker can craft a PDF that causes long runtimes when the pypdf/utils.py function readuntilwhitespace reads a stream containing a long run of bytes without whitespace. The function repeatedly performs immutable bytes...
CVE-2026-71848
Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.0 to 4.12.33, the languageDetector middleware is vulnerable to algorithmic complexity denial of service when processing a crafted language tag containing a large number of hyphen separated subtags. To...
EUVD-2026-54578
Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.0 to 4.12.33, the languageDetector middleware is vulnerable to algorithmic complexity denial of service when processing a crafted language tag containing a large number of hyphen separated subtags. To...