Lucene search
K

1055 matches found

Snyk
Snyk
added 2026/04/03 9:45 p.m.1 views

Uncontrolled Recursion

Overview @nyariv/sandboxjs is a Javascript sandboxing library. Affected versions of this package are vulnerable to Uncontrolled Recursion via the restOfExp function and the recursive call chain involving lispify and lispifyExpr. An attacker can cause the process to crash by supplying deeply neste...

7.5CVSS5.9AI score0.00082EPSS
Exploits1References2
IBM Security Bulletins
IBM Security Bulletins
added 2026/04/03 4:3 p.m.3 views

Security Bulletin: Due to use of Apache Commons Lang, IBM Operations Analytics - Log Analysis is affected by Uncontrolled Recursion Vulnerability

Summary Apache Commons Lang in Apache Solr is used by IBM Operations Analytics - Log Analysis as part of the core utility such as string manipulation, object utilities, and class utilities. CVE-2025-48924. Vulnerability Details CVEID:CVE-2025-48924 DESCRIPTION: Uncontrolled Recursion vulnerabilit...

5.3CVSS5.8AI score0.00099EPSS
Exploits0Affected Software1
SUSE Linux
SUSE Linux
added 2026/04/02 8:29 a.m.1 views

Security update for wireshark

This update for wireshark fixes the following issues: Update Wireshark to version 4.6.4 jscPED-15400. CVE-2024-9780: ITS dissector crash bsc1231475. CVE-2024-9781: AppleTalk and RELOAD Framing dissector crash bsc1231476. CVE-2024-11595: Loop with Unreachable Exit Condition 'Infinite Loop' in...

7.8CVSS6.7AI score0.00176EPSS
Exploits12References74
Redos
Redos
added 2026/04/01 12:0 a.m.1 views

ROS-20260401-73-0033

A vulnerability in the createHook function of the asynchooks module of the Node.js software platform is related to uncontrolled recursion. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

7.5CVSS7AI score0.0003EPSS
Exploits0
Redos
Redos
added 2026/04/01 12:0 a.m.2 views

ROS-20260401-73-0034

A vulnerability in the createHook function of the asynchooks module of the Node.js software platform is related to uncontrolled recursion. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

7.5CVSS7AI score0.0003EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2026/03/27 2:25 p.m.5 views

CVE-2021-27434

Products with Unified Automation .NET based OPC UA Client/Server SDK Bundle: Versions V3.0.7 and prior .NET 4.5, 4.0, and 3.5 Framework versions only are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack overflow...

7.5CVSS6.8AI score0.00216EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:11 p.m.2 views

CVE-2026-30980

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack overflow in CIccBasicStructFactory::CreateStruct causing uncontrolled recursion/stack exhaustion and crash. This vulnerability is fixed in 2.3.1.5...

5.5CVSS5.8AI score0.00015EPSS
Exploits0References1
Snyk
Snyk
added 2026/03/26 2:26 a.m.0 views

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion in the compile function of the Markdown Handler component in markdown.c. An attacker can cause the application to crash by providing an input with infinitely deep blockquotes, leading to uncontrolled recursion and...

4.8CVSS5.9AI score0.0002EPSS
Exploits0References2
NVD
NVD
added 2026/03/26 2:16 a.m.2 views

CVE-2026-4833

A weakness has been identified in Orc discount up to 3.0.1.2. This issue affects the function compile of the file markdown.c of the component Markdown Handler. This manipulation causes uncontrolled recursion. The attack is restricted to local execution. The exploit has been made available to the...

4.8CVSS0.0002EPSS
Exploits0References7
UbuntuCve
UbuntuCve
added 2026/03/26 2:16 a.m.0 views

CVE-2026-4833

A weakness has been identified in Orc discount up to 3.0.1.2. This issue affects the function compile of the file markdown.c of the component Markdown Handler. This manipulation causes uncontrolled recursion. The attack is restricted to local execution. The exploit has been made available to the...

4.8CVSS5.5AI score0.0002EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/03/26 1:2 a.m.26 views

CVE-2026-4833 Orc discount Markdown markdown.c compile recursion

A weakness has been identified in Orc discount up to 3.0.1.2. This issue affects the function compile of the file markdown.c of the component Markdown Handler. This manipulation causes uncontrolled recursion. The attack is restricted to local execution. The exploit has been made available to the...

4.8CVSS0.0002EPSS
Exploits0References7
Vulnrichment
Vulnrichment
added 2026/03/26 1:2 a.m.1 views

CVE-2026-4833 Orc discount Markdown markdown.c compile recursion

A weakness has been identified in Orc discount up to 3.0.1.2. This issue affects the function compile of the file markdown.c of the component Markdown Handler. This manipulation causes uncontrolled recursion. The attack is restricted to local execution. The exploit has been made available to the...

4.8CVSS5.5AI score0.0002EPSS
Exploits0References7
CNNVD
CNNVD
added 2026/03/26 12:0 a.m.2 views

discount 安全漏洞

discount is a Markdown language parsing and conversion tool developed by Orc developers. Versions of discount 3.0.1.2 and earlier contain security vulnerabilities. These vulnerabilities stem from the compile function in the markdown.c file being manipulated in a way that allows uncontrolled...

4.8CVSS5.8AI score0.0002EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2026/03/26 12:0 a.m.3 views

PT-2026-28186

A weakness has been identified in Orc discount up to 3.0.1.2. This issue affects the function compile of the file markdown.c of the component Markdown Handler. This manipulation causes uncontrolled recursion. The attack is restricted to local execution. The exploit has been made available to the...

4.8CVSS5.4AI score0.0002EPSS
Exploits0References8
Snyk
Snyk
added 2026/03/25 9:3 p.m.3 views

Uncontrolled Recursion

Overview smol-toml is an A small, fast, and correct TOML parser/serializer Affected versions of this package are vulnerable to Uncontrolled Recursion. An attacker can cause the application to crash by submitting TOML documents containing thousands of consecutive commented lines, which triggers...

6.9CVSS6AI score
Exploits0References2
Snyk
Snyk
added 2026/03/25 8:8 p.m.1 views

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion in the compose/resolve phase due to using recursive function calls without a depth bound. An attacker can cause the application to throw a RangeError and potentially terminate the Node.js process by supplying a...

6.5CVSS5.9AI score0.00025EPSS
Exploits1References2
Snyk
Snyk
added 2026/03/25 8:8 p.m.2 views

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion in the compose/resolve phase due to using recursive function calls without a depth bound. An attacker can cause the application to throw a RangeError and potentially terminate the Node.js process by supplying a...

6.5CVSS5.9AI score0.00025EPSS
Exploits1References2
Snyk
Snyk
added 2026/03/24 10:15 p.m.1 views

Uncontrolled Recursion

Overview Scriban is a Scriban is a fast, powerful, safe and lightweight scripting language and engine for .NET, which was primarily developed for text templating with a compatibility mode for parsing liquid templates. Today, not only Scriban can be used in text templating scenarios, but also can ...

8.7CVSS5.9AI score
Exploits0References2
Snyk
Snyk
added 2026/03/24 10:6 p.m.2 views

Uncontrolled Recursion

Overview Scriban is a Scriban is a fast, powerful, safe and lightweight scripting language and engine for .NET, which was primarily developed for text templating with a compatibility mode for parsing liquid templates. Today, not only Scriban can be used in text templating scenarios, but also can ...

8.7CVSS5.9AI score
Exploits0References2
Snyk
Snyk
added 2026/03/24 10:6 p.m.0 views

Uncontrolled Recursion

Overview Scriban.Signed is a fast, powerful, safe and lightweight scripting language and engine for .NET, which was primarily developed for text templating with a compatibility mode for parsing liquid templates. Affected versions of this package are vulnerable to Uncontrolled Recursion through th...

8.7CVSS5.9AI score
Exploits0References2
Rows per page
Query Builder