203 matches found
EuConform
EuConform 🇪🇺 オープンソースのAIコンプライアンス向けエビデンスツールキット オープンエビデンス形式 • ローカルバイアス評価 • スキーマ検証 • CycloneDX相互運用性 オフラインファースト • プライバシー保護 • 再利用可能な成果物 • WCAG 2.2 AAアクセシビリティ対応 EuConformは、AIコンプライアンスのためのオープンなエビデンス形式を定義し、その生成、検証、実証的評価を行うためのツールを提供します — オフラインで、ベンダーに依存しません。 !IMPORTANT 法的免責事項 : このツールは技術的なガイダンスのみ...
BIT-MONGODB-2026-82058 Unhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of Service
A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...
CVE-2026-82058
MongoDB 's mongod server is vulnerable to a denial-of-service flaw in its JSON Schema validation error generation code. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error path performs an unsafe numeric conversion on t...
EUVD-2026-72945
A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...
CVE-2026-82058 Unhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of Service
A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...
CVE-2026-82058 Unhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of Service
A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...
Unhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of Service
A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...
CVE-2026-82058: Uncaught Exception
A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...
SUSE CVE-2026-84368
joi is a schema description language and data validator for JavaScript. From 16.0.0 until 17.13.6 and 18.2.5, the @hapi/joi package through 17.1.1 and the successor joi package contain prototype pollution in lib/messages.js, where exports.compile and exports.merge reuse inherited objects for...
CVE-2026-84428
fastify versions before 5.12.2 are vulnerable to a header validation bypass caused by incomplete case normalization in the JSON Schema Draft 7 dependencies keyword. While the library lowercases property keys and the root-level required array to accommodate HTTP's case-insensitive headers, it fail...
Linux Distros Unpatched Vulnerability : CVE-2026-84368
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - joi is a schema description language and data validator for JavaScript. From 16.0.0 until 17.13.6 and 18.2.5, the @hapi/joi package through 17.1.1 and the...
CVE-2026-0915-json-Patch.-V2.0
Uploading 1000000837.png… CVE-2026-0915-json-Patch.-V2.0 Patch the Bug - glibc 🔒 JSON Validator Security Patch Enterprise-grade solution for CVE-2026-0915 - Protects against insecure JSON parsing through strict schema validation. 🚨 Security Notice This patch fixes CVE-2026-0915 - a critical...
GHSA-W2QP-RPH6-63G4 fastify vulnerable to schema validation bypass via root primitive coercion mismatch
Impact fastify before 5.12.1, when a route uses a root-level primitive body schema for example an integer with a minimum and maximum and the default type coercion, validates the coerced value but exposes the original, uncoerced value to the route handler. For example, a JSON body "10" is coerced ...
fastify vulnerable to schema validation bypass via root primitive coercion mismatch
Impact fastify before 5.12.1, when a route uses a root-level primitive body schema for example an integer with a minimum and maximum and the default type coercion, validates the coerced value but exposes the original, uncoerced value to the route handler. For example, a JSON body "10" is coerced ...
NPM: fastify vulnerable to schema validation bypass via root primitive coercion mismatch
NPM: fastify vulnerable to schema validation bypass via root primitive coercion mismatch vulnerability discovered by ? in WordPress Npm fastify versions 5.12.1...
EUVD-2026-61221
fastify vulnerable to schema validation bypass via root primitive coercion mismatch...
CVE-2026-84368 joi: Prototype pollution via a `__proto__` language key in custom messages
joi is a schema description language and data validator for JavaScript. From 16.0.0 until 17.13.6 and 18.2.5, the @hapi/joi package through 17.1.1 and the successor joi package contain prototype pollution in lib/messages.js, where exports.compile and exports.merge reuse inherited objects for...
Linux Distros Unpatched Vulnerability : CVE-2025-71346
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nokogiri before 1.18.8 packages a vulnerable version of libxml2 before 2.13.8 that contains a heap-based buffer under-read CVE-2025-32415 in the...
CVE-2026-18504
A flaw was found in fastify. A remote attacker can bypass schema validation when a request body schema targets a root primitive value. This occurs because the validation process may coerce a JSON string into an expected type, but the original unvalidated string is then passed to the application...
