github.com/getkin/kin-openapi: kin-openapi: Denial of Service via nil-pointer dereference in request decoding

A flaw was found in kin-openapi. An unauthenticated remote attacker can cause a Denial of Service DoS by sending specially crafted HTTP requests containing specific array query parameters or form-encoded data. Because the request decoder fails to properly validate certain array schemas before...

CVE-2026-63316

A SQL injection vulnerability exists in Payload CMS due to the improper neutralization of user-provided input within the "in" and "not_in" query parameters. This flaw allows an authenticated attacker to execute arbitrary SQL commands. The issue was addressed in versions 3.90.0 and 4.0.0-canary.34...

CVE-2026-107825 OWASP Coraza WAF: ProcessURI silently drops QUERY_STRING and ARGS_GET on URI parse failure — defense-in-depth bypass for non-net/http integrations

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, ProcessURI in internal/corazawaf/transaction.go handles a url.ParseRequestURI failure by retaining the raw URI but leaving QUERYSTRING, ARGSGET, ARGSGETNAMES, and the GET-derived portion ...

CVE-2026-107825

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, ProcessURI in internal/corazawaf/transaction.go handles a url.ParseRequestURI failure by retaining the raw URI but leaving QUERYSTRING, ARGSGET, ARGSGETNAMES, and the GET-derived portion ...

CVE-2026-107825 OWASP Coraza WAF: ProcessURI silently drops QUERY_STRING and ARGS_GET on URI parse failure — defense-in-depth bypass for non-net/http integrations

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, ProcessURI in internal/corazawaf/transaction.go handles a url.ParseRequestURI failure by retaining the raw URI but leaving QUERYSTRING, ARGSGET, ARGSGETNAMES, and the GET-derived portion ...

CLEANSTART-2026-LO86416 net/url package does not set a limit on the number of query parameters in a query

Security vulnerability affects the victoria-metrics package. The net/url package does not set a limit on the number of query parameters in a query...

EUVD-2026-94667

An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. Unauthenticated HTTP endpoints process specific URL query parameters without validating array index boundaries or performing numerical range checks. An unauthenticated remot...

CVE-2026-87671

An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1 . The flaw occurs because unauthenticated HTTP endpoints process specific URL query parameters without performing numerical range checks or validating array index boundaries ...

CVE-2026-87671

An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. Unauthenticated HTTP endpoints process specific URL query parameters without validating array index boundaries or performing numerical range checks. An unauthenticated remot...

CVE-2026-5048: Improper Neutralization of Special Elements used in an SQL Command

In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious data into some of the REST API -query parameters...

CVE-2026-87671: Out-of-bounds Read

An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. Unauthenticated HTTP endpoints process specific URL query parameters without validating array index boundaries or performing numerical range checks. An unauthenticated remot...

PT-2026-111412

Name of the Vulnerable Software and Affected Versions Payload CMS versions prior to 3.90.0 Payload CMS versions prior to 4.0.0-canary.34 Description An authenticated attacker can perform SQL Injection attacks due to improper neutralization of user input provided to the in and not in query...

CLEANSTART-2026-MC77082 ReverseProxy can forward queries containing parameters not visible to Rewrite functions

Security vulnerability affects the temporal-server package. ReverseProxy can forward queries containing parameters not visible to Rewrite functions...

CLEANSTART-2026-DH14395 net/url package does not set a limit on the number of query parameters in a query

Security vulnerability affects the go1.27 package. The net/url package does not set a limit on the number of query parameters in a query...

Log4Shell RCE (CVE-2021-44228)

Exploits CVE-2021-44228 Log4j JNDI lookup injection via HTTP headers and query parameters. Uses sleep-based confirmation then delivers the configured reverse CMD payload through a user-supplied LDAP callback URL. !/usr/bin/env python3 -- coding: utf-8 -- """Log4Shell JNDI injection RCE...

Astra Linux – Vulnerability in Golang-1.23

ReverseProxy can forward queries containing parameters that are not visible to the Rewrite function. When used with a Rewrite function, or a Director function that parses query parameters, ReverseProxy sanitizes the forwarded request by removing parameters that are not parsed by url.ParseQuery...

CVE-2026-103261

A flaw was found in Tornado. When processing incoming HTTP requests, Tornado fails to restrict the number of parameters parsed from the URL query string. A remote, unauthenticated attacker could exploit this flaw by sending requests with an excessive number of query parameters, leading to high CP...

UBUNTU-CVE-2026-103261

Tornado before 6.5.9 fails to limit the number of query string fields in HTTPServerRequest.init, allowing remote attackers to cause event-loop stalling by sending requests with thousands of query parameters. Attackers can send unauthenticated GET requests with unbounded query-string field counts ...

CLEANSTART-2026-QA21098 net/url package does not set a limit on the number of query parameters in a query

Security vulnerability affects the cri-tools package. The net/url package does not set a limit on the number of query parameters in a query...

CLEANSTART-2026-QL84214 ReverseProxy can forward queries containing parameters not visible to Rewrite functions

CVE-2026-39825 affects multiple packages. ReverseProxy can forward queries containing parameters not visible to Rewrite functions. See references for individual vulnerability details...