brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns

A flaw was found in brace-expansion. A remote attacker can cause a Denial of Service DoS by supplying untrusted input containing deeply nested brace patterns. Due to uncontrolled recursion during pattern processing, expanding these nested structures exhausts the call stack and causes the...

brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns

A flaw was found in brace-expansion. A remote attacker can cause a Denial of Service DoS by supplying untrusted input containing deeply nested brace patterns. Due to uncontrolled recursion during pattern processing, expanding these nested structures exhausts the call stack and causes the...

Security Bulletin: Vulnerabilities in Netty,Apache Log4j Core,Spring Boot,Spring Framework,PostCSS,tmp,Spring Data,Apache Commons Lang,React Router,Bootstrap,d3-color might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Netty, Apache Log4j Core, Spring Boot, Spring Framework, PostCSS, tmp, Spring Data, Apache Commons Lang, React Router, Bootstrap,d3-color. Vulnerabilities include The attacker can present a server certificate...

CVE-2026-103118

A flaw was found in GraphicsMagick. This vulnerability allows a remote attacker to cause a Denial of Service DoS by convincing a user or service to process a specially crafted WordPerfect Graphics WPG image file. Due to uncontrolled recursion within the WPG file handler's ExtractPostscript...

CVE-2026-103118

A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the function ExtractPostscript of the file coders/wpg.c of the component WPG File Handler. Performing a manipulation results in uncontrolled recursion. The attack may be initiated remotely. The patch is...

DEBIAN-CVE-2026-103118

A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the function ExtractPostscript of the file coders/wpg.c of the component WPG File Handler. Performing a manipulation results in uncontrolled recursion. The attack may be initiated remotely. The patch is...

CVE-2026-103118

A vulnerability exists in GraphicsMagick up to version 1.3.47 within the WPG File Handler component. Specifically, the ExtractPostscript function in the file coders/wpg.c is susceptible to uncontrolled recursion when processing manipulated input. This issue can be triggered via a remote attack . ...

EUVD-2026-89954

A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the function ExtractPostscript of the file coders/wpg.c of the component WPG File Handler. Performing a manipulation results in uncontrolled recursion. The attack may be initiated remotely. The patch is...

CVE-2026-103118 GraphicsMagick WPG File wpg.c ExtractPostscript recursion

A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the function ExtractPostscript of the file coders/wpg.c of the component WPG File Handler. Performing a manipulation results in uncontrolled recursion. The attack may be initiated remotely. The patch is...

brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns

A flaw was found in brace-expansion. A remote attacker can cause a Denial of Service DoS by supplying untrusted input containing deeply nested brace patterns. Due to uncontrolled recursion during pattern processing, expanding these nested structures exhausts the call stack and causes the...

brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns

A flaw was found in brace-expansion. A remote attacker can cause a Denial of Service DoS by supplying untrusted input containing deeply nested brace patterns. Due to uncontrolled recursion during pattern processing, expanding these nested structures exhausts the call stack and causes the...

CVE-2026-102509

Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits, and Uncontrolled Recursion in the Java implementation of Apache PLC4X PLC4J allow a malicious or impersonated device to exhaust the memory or stack of the client application, causing a denial of service. In the O...

CVE-2026-102510

Integer Overflow, Improper Validation of Array Index, Uncontrolled Recursion and Memory Allocation with Excessive Size Value in the Go implementation of Apache PLC4X PLC4Go allow a malicious device, or an attacker able to inject network traffic, to crash or exhaust the memory of the client...

brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns

A flaw was found in brace-expansion. A remote attacker can cause a Denial of Service DoS by supplying untrusted input containing deeply nested brace patterns. Due to uncontrolled recursion during pattern processing, expanding these nested structures exhausts the call stack and causes the...

EUVD-2026-89679

Integer Overflow, Improper Validation of Array Index, Uncontrolled Recursion and Memory Allocation with Excessive Size Value in the Go implementation of Apache PLC4X PLC4Go allow a malicious device, or an attacker able to inject network traffic, to crash or exhaust the memory of the client...

EUVD-2026-89678

Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits, and Uncontrolled Recursion in the Java implementation of Apache PLC4X PLC4J allow a malicious or impersonated device to exhaust the memory or stack of the client application, causing a denial of service. In the O...

EUVD-2026-89554

Uncontrolled recursion in the Gosub browser engine gosub-engine through 0.1.0 and main before commit 46868b3 allows a remote attacker to cause a Denial of Service stack exhaustion and application crash via an SVG document containing an excessive number of deeply nested elements. Because the engin...

Oracle Linux 8 : postgresql:12 (ELSA-2026-72274)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-72274 advisory. - add postgresql-CVE-2026-18408.patch - apply backport-of-the-patch-to-fix-CVE-2025-8714.patch - Resolves: CVE-2026-14662, CVE-2026-14664,...

CVE-2026-103118: Uncontrolled Recursion

A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the function ExtractPostscript of the file coders/wpg.c of the component WPG File Handler. Performing a manipulation results in uncontrolled recursion. The attack may be initiated remotely. The patch is...

AlmaLinux 9.2 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1778133583)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778133583 advisory. - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3875, CVE-2022-0158 - NULL Pointer Dereference in GitHub repository vim/v...