Lucene search
K

5239 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2018-20822

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibSass 3.5.4 allows attackers to cause a denial-of-service uncontrolled recursion in Sass::ComplexSelector::perform in ast.hpp and Sass::Inspect::operator in...

6.5CVSS7.3AI score0.00492EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2022-48545

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02. CVE-2022-48545 Note that Nessus relies on the presence of the packag...

5.5CVSS6.8AI score0.00071EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2025/08/26 12:31 a.m.7 views

LlamaIndex affected by a Denial of Service (DOS) in JSONReader

A denial of service vulnerability exists in the JSONReader component of the run-llama/llamaindex repository, specifically in version v0.12.37. The vulnerability is caused by uncontrolled recursion when parsing deeply nested JSON files, which can lead to Python hitting its maximum recursion depth...

8.6CVSS8.2AI score0.00054EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2025/08/26 12:31 a.m.1 views

GHSA-7753-XRFW-CH36 LlamaIndex affected by a Denial of Service (DOS) in JSONReader

A denial of service vulnerability exists in the JSONReader component of the run-llama/llamaindex repository, specifically in version v0.12.37. The vulnerability is caused by uncontrolled recursion when parsing deeply nested JSON files, which can lead to Python hitting its maximum recursion depth...

8.6CVSS5.9AI score0.00054EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/08/26 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2019-13103

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitel...

7.1CVSS6.7AI score0.00052EPSS
Exploits0References2
NVD
NVD
added 2025/08/25 10:15 p.m.1 views

CVE-2025-57809

XGrammar is an open-source library for efficient, flexible, and portable structured generation. Prior to version 0.1.21, XGrammar has an infinite recursion issue in the grammar. This issue has been resolved in version 0.1.21...

8.7CVSS0.00048EPSS
Exploits1References3
Snyk
Snyk
added 2025/08/25 9:42 p.m.1 views

Uncontrolled Recursion

Overview xgrammar is an Efficient, Flexible and Portable Structured Generation Affected versions of this package are vulnerable to Uncontrolled Recursion via user supplied grammars involving left recursion. Details Denial of Service DoS describes a family of attacks, all aimed at making a system...

8.7CVSS7AI score0.00048EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/08/25 9:22 p.m.1 views

CVE-2025-57809 XGrammar affected by Denial of Service by infinite recursion grammars

XGrammar is an open-source library for efficient, flexible, and portable structured generation. Prior to version 0.1.21, XGrammar has an infinite recursion issue in the grammar. This issue has been resolved in version 0.1.21...

8.7CVSS6.3AI score0.00048EPSS
Exploits1References3
OSV
OSV
added 2025/08/25 9:22 p.m.1 views

CVE-2025-57809 XGrammar affected by Denial of Service by infinite recursion grammars

XGrammar is an open-source library for efficient, flexible, and portable structured generation. Prior to version 0.1.21, XGrammar has an infinite recursion issue in the grammar. This issue has been resolved in version 0.1.21...

8.7CVSS6.7AI score0.00048EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/08/25 9:22 p.m.5 views

CVE-2025-57809 XGrammar affected by Denial of Service by infinite recursion grammars

XGrammar is an open-source library for efficient, flexible, and portable structured generation. Prior to version 0.1.21, XGrammar has an infinite recursion issue in the grammar. This issue has been resolved in version 0.1.21...

8.7CVSS0.00048EPSS
Exploits1References3
CVE
CVE
added 2025/08/25 9:22 p.m.44 views

CVE-2025-57809

CVE-2025-57809 affects XGrammar. Prior to 0.1.21, there is an infinite recursion issue in the grammar; this is resolved in version 0.1.21. CVSSv3.1 base score 7.5 (HIGH) with availability impact; CVSS4 base score 8.7 (HIGH) with high availability impact. Remediation: upgrade XGrammar to 0.1.21 or...

8.7CVSS6.5AI score0.00048EPSS
Exploits1References3Affected Software1
Github Security Blog
Github Security Blog
added 2025/08/25 8:43 p.m.2 views

XGrammar affected by Denial of Service by infinite recursion grammars

Summary This issue: http://github.com/mlc-ai/xgrammar/issues/250 should have it's own security advisory. Since several tools accept and pass user supplied grammars to xgrammar, and it is so easy to trigger it seems like a High...

8.7CVSS6.5AI score0.00048EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2025/08/25 8:43 p.m.2 views

GHSA-5CMR-4PX5-23PC XGrammar affected by Denial of Service by infinite recursion grammars

Summary This issue: http://github.com/mlc-ai/xgrammar/issues/250 should have it's own security advisory. Since several tools accept and pass user supplied grammars to xgrammar, and it is so easy to trigger it seems like a High...

8.7CVSS7.2AI score0.00048EPSS
Exploits1References5
Snyk
Snyk
added 2025/08/25 3:41 p.m.1 views

Uncontrolled Recursion

Overview llama-index-core is an Interface between LLMs and your data Affected versions of this package are vulnerable to Uncontrolled Recursion via the JSONReader component. An attacker can cause excessive resource consumption and crash the process by submitting deeply nested JSON files...

8.8CVSS7AI score0.00054EPSS
Exploits0References2
NVD
NVD
added 2025/08/25 3:15 p.m.1 views

CVE-2025-5302

A denial of service vulnerability exists in the JSONReader component of the run-llama/llamaindex repository, specifically in version v0.12.37. The vulnerability is caused by uncontrolled recursion when parsing deeply nested JSON files, which can lead to Python hitting its maximum recursion depth...

8.6CVSS0.00054EPSS
Exploits0References2
OSV
OSV
added 2025/08/25 3:15 p.m.1 views

CVE-2025-5302

A denial of service vulnerability exists in the JSONReader component of the run-llama/llamaindex repository, specifically in version v0.12.37. The vulnerability is caused by uncontrolled recursion when parsing deeply nested JSON files, which can lead to Python hitting its maximum recursion depth...

8.6CVSS6.9AI score
Exploits0References2
CVE
CVE
added 2025/08/25 3:3 p.m.21 views

CVE-2025-5302

The CVE-2025-5302 affects the JSONReader in run-llama/llama_index v0.12.37, where unconstrained recursion on deeply nested JSON can exhaust Python recursion depth, causing high CPU/memory use and potential DoS. The issue is resolved in v0.12.38. Remediation: upgrade llama_index to 0.12.38 or late...

8.6CVSS8.3AI score0.00054EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/08/25 3:3 p.m.6 views

CVE-2025-5302 Denial of Service (DOS) in JSONReader in run-llama/llama_index

A denial of service vulnerability exists in the JSONReader component of the run-llama/llamaindex repository, specifically in version v0.12.37. The vulnerability is caused by uncontrolled recursion when parsing deeply nested JSON files, which can lead to Python hitting its maximum recursion depth...

8.6CVSS0.00054EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/08/25 12:0 a.m.2 views

XGrammar 安全漏洞

XGrammar is a fast, flexible and portable structured generation tool from mlc-ai open source. A security vulnerability exists in XGrammar versions prior to 0.1.21, which stems from an infinite recursion problem in the syntax...

8.7CVSS6.4AI score0.00048EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/08/25 12:0 a.m.2 views

PT-2025-34711 · Xgrammar · Xgrammar

Name of the Vulnerable Software and Affected Versions: XGrammar versions prior to 0.1.21 Description: XGrammar, an open-source library for structured generation, contains an infinite recursion issue within its grammar. This issue was addressed in version 0.1.21. Recommendations: Update to version...

8.7CVSS6.2AI score0.00048EPSS
Exploits1References10
Rows per page
Query Builder