746830 matches found
GHSA-343H-94H5-C4WR yawkat LZ4 Java: LZ4BlockInputStream with stopOnEmptyBlock=false recurses once per empty block, causing StackOverflowError
Summary When LZ4BlockInputStream is configured with stopOnEmptyBlock = false the mode for reading concatenated block streams, it handles each empty block by calling refill recursively. A long run of empty blocks exhausts the thread stack and throws StackOverflowError out of read or skip. Details ...
yawkat LZ4 Java: LZ4FrameInputStream reallocates block buffers for every frame, allowing CPU and GC amplification from small inputs
Summary LZ4FrameInputStream allocates two new buffers of the frame's maximum block size, up to 4 MiB each, every time it reads a frame header. Because concatenated frames are read by default, an input made of many minimal empty frames forces about 8 MiB of zeroed heap allocation for every 11 inpu...
Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of service
Next.js applications that use a root-level catch-all page together with statically generated or Incremental Static Regeneration routes can have their shared response cache poisoned by a single unauthenticated crafted request...
EUVD-2026-91674
Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of service...
GHSA-MCJ8-R9MP-W47P Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of service
Next.js applications that use a root-level catch-all page together with statically generated or Incremental Static Regeneration routes can have their shared response cache poisoned by a single unauthenticated crafted request...
NPM: Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of service
NPM: Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of service vulnerability discovered by ? in WordPress Npm next versions = 15.0.0, 15.5.27...
EUVD-2026-93511
Payload: Incomplete validation during the upload file lifecycle...
Payload: Incomplete validation during the upload file lifecycle
Impact Under certain conditions, an authenticated user with permission to modify uploads could cause unintended files to be removed during file cleanup. This may result in data loss or service disruption. You are affected if: - You use Payload upload collections with local file storage. - Untrust...
GHSA-P223-2WR2-J562 Payload: Incomplete validation during the upload file lifecycle
Impact Under certain conditions, an authenticated user with permission to modify uploads could cause unintended files to be removed during file cleanup. This may result in data loss or service disruption. You are affected if: - You use Payload upload collections with local file storage. - Untrust...
Payload: Unauthenticated account-lockout denial of service
Impact An unauthenticated attacker who knows an account’s email address or username could trigger Payload’s account lockout mechanism and prevent that user from signing in. You are affected if: Using an affected Payload version with an auth-enabled collection that uses local authentication and...
GHSA-V5GF-VPJC-PC7W Payload: Unauthenticated account-lockout denial of service
Impact An unauthenticated attacker who knows an account’s email address or username could trigger Payload’s account lockout mechanism and prevent that user from signing in. You are affected if: Using an affected Payload version with an auth-enabled collection that uses local authentication and...
NPM: Payload: Unauthenticated account-lockout denial of service
NPM: Payload: Unauthenticated account-lockout denial of service vulnerability discovered by ? in WordPress Npm payload versions 3.90.0...
GHSA-7822-RCF6-97FX RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers
Summary A single AMQP message with malformed UTF-8 in a shortstr property for example correlation-id can permanently disable a Java client RPC consumer. The client decodes malformed bytes into U+FFFD replacement characters. Each of those re-encodes to 3 bytes, so a 255-byte property becomes 765...
Detection-and-Mitigation-script-for-CVE-2021-42717
Detection-and-Mitigation-script-for-CVE-2021-42717 用于 CVE-2021-42717 的检测与缓解脚本 - ModSecurity JSON 解析中的 DoS 漏洞 ModSecurity 3.x 至 3.0.5 错误处理了过度嵌套的 JSON 对象。精心构造的 JSON 对象可嵌套数万层深，可能导致 Web 服务器无法为合法请求提供服务。即使是一个中等大小（例如 300KB）的 HTTP 请求，也可能占用有限的 NGINX 工作进程之一长达数分钟，并消耗机器上几乎全部可用的 CPU。ModSecurity 2...
EUVD-2026-93557
ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output buffer...
EUVD-2026-93553
ImageSharp: ICC LUT16 output channel count can write beyond Vector4...
GHSA-WMXV-XPHR-5C9G ImageSharp: BigTIFF IFD count can keep a decoder thread in a non-progressing loop
Summary SixLabors.ImageSharp 4.1.1 can spend an attacker-controlled duration decoding a small malformed BigTIFF. The BigTIFF IFD entry-count field is 64-bit. The reader iterates once per declared entry, but when fewer than 20 bytes remain for an entry, the entry read returns without advancing. A...
Quasar Framework: DOM Clobbering in Quasar openURL() SafariViewController Integration Causes Client-Side Denial of Service
Summary A DOM Clobbering vulnerability exists in Quasar's openURL utility when handling the iOS SafariViewController bridge. The vulnerable implementation only checks whether window.SafariViewController exists before invoking it as a native bridge object. An attacker who can inject HTML content...
GHSA-89VP-X45C-52CQ Quasar Framework: DOM Clobbering in Quasar openURL() SafariViewController Integration Causes Client-Side Denial of Service
Summary A DOM Clobbering vulnerability exists in Quasar's openURL utility when handling the iOS SafariViewController bridge. The vulnerable implementation only checks whether window.SafariViewController exists before invoking it as a native bridge object. An attacker who can inject HTML content...
CVE-2026-97715
CVE-2026-97715 is a vulnerability in the client registration process of Secure Access servers prior to version 14.60. Authenticated attackers can pass malformed data to the server and cause a persistent denial of service...