CVE-2026-73569 fast-xml-parser: Repeated DOCTYPE declarations reset entity expansion limits

fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. From 5.9.3 until 5.10.1, src/xmlparser/OrderedObjParser.js processes multiple DOCTYPE declarations within a single XML document and passes each declaration's entities through addInputEntities...

CVE-2026-73569 fast-xml-parser: Repeated DOCTYPE declarations reset entity expansion limits

fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. From 5.9.3 until 5.10.1, src/xmlparser/OrderedObjParser.js processes multiple DOCTYPE declarations within a single XML document and passes each declaration's entities through addInputEntities...

CVE-2026-73569

CVE-2026-73569 affects fast-xml-parser (OrderedObjParser.js). When parsing a single XML with multiple DOCTYPE declarations (versions 5.9.3–5.10.1), addInputEntities() repeatedly resets entity-expansion limits, allowing repeated resets within one parse. This can cause excessive CPU use, event-loop...

EUVD-2026-58184

fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. From 5.9.3 until 5.10.1, src/xmlparser/OrderedObjParser.js processes multiple DOCTYPE declarations within a single XML document and passes each declaration's entities through addInputEntities...

CVE-2026-33328

A flaw was found in libvips, an image processing library. On 32-bit systems, a vulnerability in the gifload operation could lead to an integer overflow due to incorrectly determined image dimensions. This could allow a local attacker to cause the application to crash, resulting in a denial of...

CVE-2026-73568 py-libp2p: yamux connection DoS via oversized data frame

py-libp2p is the Python implementation of the libp2p networking stack. In 0.7.0 and earlier, the yamux handleincoming method in libp2p/streammuxer/yamux/yamux.py reads an attacker-controlled 32-bit DATA frame length with readexactly before validating it against MAXWINDOWSIZE or checking whether...

EUVD-2026-58183

py-libp2p is the Python implementation of the libp2p networking stack. In 0.7.0 and earlier, the yamux handleincoming method in libp2p/streammuxer/yamux/yamux.py reads an attacker-controlled 32-bit DATA frame length with readexactly before validating it against MAXWINDOWSIZE or checking whether...

CVE-2026-73568 py-libp2p: yamux connection DoS via oversized data frame

py-libp2p is the Python implementation of the libp2p networking stack. In 0.7.0 and earlier, the yamux handleincoming method in libp2p/streammuxer/yamux/yamux.py reads an attacker-controlled 32-bit DATA frame length with readexactly before validating it against MAXWINDOWSIZE or checking whether...

CVE-2026-73568

py-libp2p (Python implementation of libp2p) before 0.7.0 has a yamux handle_incoming() flaw in libp2p/stream_muxer/yamux/yamux.py: it reads a 32-bit DATA frame length with read_exactly() before validating against MAX_WINDOW_SIZE or checking stream_id. A peer completing the Noise handshake can sen...

CVE-2026-35590

A flaw was found in libvips. The EXIF decoder did not properly verify the range of EXIF tag groups, which could lead to a null pointer dereference. A local user could exploit this by providing specially crafted EXIF data, causing the application to crash and resulting in a denial of service...

CVE-2026-73566

CVE-2026-73566 affects node-tar prior to 7.5.21. The filesFilter in src/list.ts uses a recursive mapHas to walk entry paths upward with path.dirname(), and with tar.t(...) or tar.x(...) and a non-empty member-selection list, a crafted GNU long-path header can reach Parser[CONSUMEHEADER] in src/pa...

CVE-2026-73565

CVE-2026-73565 affects @hono/node-server

CVE-2026-73565 @hono/node-server: Unauthenticated memory-leak DoS via aborted WebSocket handshake

@hono/node-server allows running the Hono application on Node.js. From 2.0.0 until 2.0.10, a WebSocket upgrade request to an upgradeWebSocket route with a missing or malformed Sec-WebSocket-Key header causes src/websocket.ts to retain the request's IncomingMessage in waiterMap and leave...

CVE-2026-73565 @hono/node-server: Unauthenticated memory-leak DoS via aborted WebSocket handshake

@hono/node-server allows running the Hono application on Node.js. From 2.0.0 until 2.0.10, a WebSocket upgrade request to an upgradeWebSocket route with a missing or malformed Sec-WebSocket-Key header causes src/websocket.ts to retain the request's IncomingMessage in waiterMap and leave...

CVE-2026-73564 frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow

frp is a fast reverse proxy. From 0.53.0 until 0.70.1, frp's optional SSH Tunnel Gateway in pkg/ssh/server.go parses an SSH exec channel request by adding 4 to an attacker-controlled four-byte big-endian length. A length of 0xFFFFFFFF makes the uint32 addition wrap to 3, defeats the payload bound...

CVE-2026-73564 frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow

frp is a fast reverse proxy. From 0.53.0 until 0.70.1, frp's optional SSH Tunnel Gateway in pkg/ssh/server.go parses an SSH exec channel request by adding 4 to an attacker-controlled four-byte big-endian length. A length of 0xFFFFFFFF makes the uint32 addition wrap to 3, defeats the payload bound...

CVE-2026-73564

The CVE affects frp (frps) with the SSH Tunnel Gateway enabled. A root cause was an integer overflow in parsing an SSH exec channel: the code adds 4 to an attacker-controlled 4-byte length, and 0xFFFFFFFF wraps to 3, causing a bounds check bypass and a panic in TunnelServer.handleNewChannel. When...

CVE-2026-19113

A flaw was found in Consul. A remote, unauthenticated attacker could exploit several agent HTTP API endpoints by sending a request with an unbounded body. This could cause the agent to consume substantial memory, leading to a denial of service DoS condition...

CVE-2026-15972

A flaw was found in Consul. A remote attacker can exploit this vulnerability by sending numerous incomplete connection requests to the external gRPC gRPC Remote Procedure Call listeners. This unbounded connection acceptance can exhaust agent resources, such as file descriptors, goroutines, and...

CVE-2026-19015

A flaw was found in Consul. A remote attacker can exploit an uncontrolled resource consumption vulnerability in the Connect CA roots endpoint. This allows the attacker to continuously grow the agent's Connect CA roots cache, bypassing configured cache limits. The consequence is a denial of servic...