Lucene search
K

5150 matches found

Snyk
Snyk
added 2026/03/24 10:15 p.m.1 views

Uncontrolled Recursion

Overview Scriban is a Scriban is a fast, powerful, safe and lightweight scripting language and engine for .NET, which was primarily developed for text templating with a compatibility mode for parsing liquid templates. Today, not only Scriban can be used in text templating scenarios, but also can ...

8.7CVSS5.9AI score
Exploits0References2
Snyk
Snyk
added 2026/03/24 10:15 p.m.0 views

Uncontrolled Recursion

Overview Scriban.Signed is a fast, powerful, safe and lightweight scripting language and engine for .NET, which was primarily developed for text templating with a compatibility mode for parsing liquid templates. Affected versions of this package are vulnerable to Uncontrolled Recursion in the...

8.7CVSS5.9AI score
Exploits0References2
Snyk
Snyk
added 2026/03/24 10:6 p.m.2 views

Uncontrolled Recursion

Overview Scriban is a Scriban is a fast, powerful, safe and lightweight scripting language and engine for .NET, which was primarily developed for text templating with a compatibility mode for parsing liquid templates. Today, not only Scriban can be used in text templating scenarios, but also can ...

8.7CVSS5.9AI score
Exploits0References2
Snyk
Snyk
added 2026/03/24 10:6 p.m.0 views

Uncontrolled Recursion

Overview Scriban.Signed is a fast, powerful, safe and lightweight scripting language and engine for .NET, which was primarily developed for text templating with a compatibility mode for parsing liquid templates. Affected versions of this package are vulnerable to Uncontrolled Recursion through th...

8.7CVSS5.9AI score
Exploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2026/03/24 4:15 p.m.7 views

Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Apache Commons Lang (CVE-2025-48924)

Summary A vulnerability in Apache Commons Lang that is used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2025-48924 DESCRIPTION: Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with...

5.3CVSS6.6AI score0.00099EPSS
Exploits0Affected Software1
OSV
OSV
added 2026/03/24 3:39 p.m.5 views

CLSA-2026-1774366791 Fix CVE(s): CVE-2026-24484

SECURITY UPDATE: denial-of-service from nested multi-layer MVG-to-SVG conversions - debian/patches/CVE-2026-24484.patch: Throw VectorGraphicsNestedTooDeeply when vector-graphics nesting reaches MagickMaxRecursionDepth; fix crashes caused by unbounded nesting of graphic-context elements. -...

5.3CVSS7.2AI score0.00019EPSS
Exploits0References1
OSV
OSV
added 2026/03/24 9:9 a.m.0 views

SUSE-SU-2026:20821-1 Security update for python-pyasn1

This update for python-pyasn1 fixes the following issue: - CVE-2026-30922: Denial of Service via Unbounded Recursion bsc1259803...

7.5CVSS7.1AI score0.00027EPSS
Exploits1References3
Veracode
Veracode
added 2026/03/24 8:32 a.m.5 views

Denial Of Service (DoS)

github.com/expr-lang/expr is vulnerable to denial of service DoS. The vulnerability is due to missing recursion depth limits in certain builtin functions, which allows an attacker to supply deeply nested or cyclic data structures and trigger infinite recursion leading to stack overflow and...

7.5CVSS7.2AI score0.0004EPSS
Exploits0References3Affected Software1
Redos
Redos
added 2026/03/24 12:0 a.m.3 views

ROS-20260324-73-0026

A vulnerability in the eventpoll component of the Linux kernel is related to uncontrolled recursion. Exploitation of the vulnerability allows an attacker to cause a denial of service...

5.5CVSS6AI score0.00034EPSS
Exploits0
Github Security Blog
Github Security Blog
added 2026/03/23 8:23 p.m.5 views

cbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loads

Summary - The cbor2 library is vulnerable to a Denial of Service DoS attack caused by uncontrolled recursion when decoding deeply nested CBOR structures. - This vulnerability affects both the pure Python implementation and the C extension cbor2. The C extension correctly uses Python's C-API for...

7.5CVSS7.2AI score0.00085EPSS
Exploits1References6Affected Software1
EUVD
EUVD
added 2026/03/23 8:23 p.m.4 views

EUVD-2026-14478

cbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loads...

7.5CVSS7.1AI score0.00085EPSS
Exploits1References4
OSV
OSV
added 2026/03/23 8:23 p.m.1 views

GHSA-3C37-WWVX-H642 cbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loads

Summary - The cbor2 library is vulnerable to a Denial of Service DoS attack caused by uncontrolled recursion when decoding deeply nested CBOR structures. - This vulnerability affects both the pure Python implementation and the C extension cbor2. The C extension correctly uses Python's C-API for...

7.5CVSS7.2AI score0.00085EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2026/03/23 7:21 p.m.2 views

CVE-2026-26209

A flaw was found in cbor2, a library for encoding and decoding Concise Binary Object Representation CBOR data. A remote attacker can exploit this vulnerability by sending a specially crafted CBOR payload containing deeply nested structures. This can cause the application to crash due to...

7.5CVSS7.1AI score0.00085EPSS
Exploits1References7
NVD
NVD
added 2026/03/23 7:16 p.m.2 views

CVE-2026-26209

cbor2 provides encoding and decoding for the Concise Binary Object Representation CBOR serialization format. Versions prior to 5.9.0 are vulnerable to a Denial of Service DoS attack caused by uncontrolled recursion when decoding deeply nested CBOR structures. This vulnerability affects both the...

7.5CVSS0.00085EPSS
Exploits1References4
OSV
OSV
added 2026/03/23 7:16 p.m.2 views

DEBIAN-CVE-2026-26209

cbor2 provides encoding and decoding for the Concise Binary Object Representation CBOR serialization format. Versions prior to 5.9.0 are vulnerable to a Denial of Service DoS attack caused by uncontrolled recursion when decoding deeply nested CBOR structures. This vulnerability affects both the...

7.5CVSS7.3AI score0.00085EPSS
Exploits1References1
OSV
OSV
added 2026/03/23 7:16 p.m.1 views

UBUNTU-CVE-2026-26209

cbor2 provides encoding and decoding for the Concise Binary Object Representation CBOR serialization format. Versions prior to 5.9.0 are vulnerable to a Denial of Service DoS attack caused by uncontrolled recursion when decoding deeply nested CBOR structures. This vulnerability affects both the...

7.5CVSS5.8AI score0.00085EPSS
Exploits1References6
UbuntuCve
UbuntuCve
added 2026/03/23 7:16 p.m.2 views

CVE-2026-26209

cbor2 provides encoding and decoding for the Concise Binary Object Representation CBOR serialization format. Versions prior to 5.9.0 are vulnerable to a Denial of Service DoS attack caused by uncontrolled recursion when decoding deeply nested CBOR structures. This vulnerability affects both the...

7.5CVSS7.1AI score0.00085EPSS
Exploits1References5
OSV
OSV
added 2026/03/23 6:53 p.m.2 views

CVE-2026-26209 cbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loads

cbor2 provides encoding and decoding for the Concise Binary Object Representation CBOR serialization format. Versions prior to 5.9.0 are vulnerable to a Denial of Service DoS attack caused by uncontrolled recursion when decoding deeply nested CBOR structures. This vulnerability affects both the...

7.5CVSS5.9AI score0.00085EPSS
Exploits1References6
CVE
CVE
added 2026/03/23 6:53 p.m.21 views

CVE-2026-26209

The CVE-2026-26209 issue affects the Python library cbor2 (including the C extension _cbor2) prior to version 5.9.0. The root cause is uncontrolled recursion when decoding deeply nested CBOR structures, as the C extension relies on Python’s Py_EnterRecursiveCall rather than a data-driven depth li...

7.5CVSS7.1AI score0.00085EPSS
Exploits1References4Affected Software1
Debian CVE
Debian CVE
added 2026/03/23 6:53 p.m.6 views

CVE-2026-26209

cbor2 provides encoding and decoding for the Concise Binary Object Representation CBOR serialization format. Versions prior to 5.9.0 are vulnerable to a Denial of Service DoS attack caused by uncontrolled recursion when decoding deeply nested CBOR structures. This vulnerability affects both the...

7.5CVSS7.3AI score0.00085EPSS
Exploits1
Rows per page
Query Builder