CVE-2026-112368

An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data to the decoder to exhaust the process stack. This may cause the PHP process using the driver to terminate unexpectedly, resulting ...

CVE-2026-112368

An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data to the decoder to exhaust the process stack. This may cause the PHP process using the driver to terminate unexpectedly, resulting ...

EUVD-2026-104329

Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module QtSvg in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted SVG file with deeply nested elements...

CVE-2026-8168

Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module QtSvg in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted SVG file with deeply nested elements...

dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network...

Important: Red Hat Security Advisory: qt6-qtbase security update

An update for qt6-qtbase is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

qtbase: qt5-qtbase: qt6-qtbase: qtbase: Denial of Service via uncontrolled recursion in XML serialization

A flaw was found in qtbase. Uncontrolled recursion in Qt's QDomDocument serialization QtXml allows a remote attacker to provide deeply nested untrusted XML, leading to stack exhaustion. This can cause the application to crash, resulting in a Denial of Service DoS...

CVE-2026-112368: Uncontrolled Recursion

An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data to the decoder to exhaust the process stack. This may cause the PHP process using the driver to terminate unexpectedly, resulting ...

CVE-2026-8168: Uncontrolled Recursion

Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module QtSvg in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted SVG file with deeply nested elements...

PT-2026-117473

Name of the Vulnerable Software and Affected Versions MongoDB PHP driver affected versions not specified Description An uncontrolled recursion weakness exists in the BSON decoding logic. An unauthenticated party can supply crafted binary document data to the decoder to exhaust the process stack...

dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network...

dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network...

Linux Distros Unpatched Vulnerability : CVE-2026-110263

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in SignatureReader.parseType that allows attackers to exhaust the stack via deeply nest...

Linux Distros Unpatched Vulnerability : CVE-2026-110259

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in ClassWriter.replaceAsmInstructions that allows attackers to cause denial of service...

org.ow2.asm/asm: OW2 ASM: Denial of Service via uncontrolled recursion in SignatureReader

A flaw was found in OW2 ASM. An attacker could cause a Denial of Service DoS by providing a specially crafted Java class file containing deeply nested generic type signatures. When the library parses these signatures using the SignatureReader component, uncontrolled recursion exhausts available...

kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash

Summary kin-openapi's spec loader and spec-time validator both handle circular schema references safely: the loader resolves circular $refs on purpose to support recursive data structures, and Schema.validate uses stack-based cycle detection. Validate therefore accepts a schema whose allOf / anyO...

GHSA-G8CF-RCJF-C8CF kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash

Summary kin-openapi's spec loader and spec-time validator both handle circular schema references safely: the loader resolves circular $refs on purpose to support recursive data structures, and Schema.validate uses stack-based cycle detection. Validate therefore accepts a schema whose allOf / anyO...

Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to multiple BouncyCastle vulnerabilities (CVE-2026-13506, CVE-2026-14682)

Summary IBM DevOps Deploy / IBM UrbanCode Deploy UCD uses bouncy-castle to parse and load PEM format certs. CVE-2026-13506, CVE-2026-14682. Vulnerability Details CVEID:CVE-2026-13506 DESCRIPTION: In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. This...

CVE-2026-100354 kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash

kin-openapi is a Go project for handling OpenAPI files. Prior to 0.149.0, runtime request, response, and direct schema validation lacks cycle detection when an allOf, anyOf, or oneOf chain refers back to an ancestor schema, even though loading and document validation accept the circular reference...

CVE-2026-100354 kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash

kin-openapi is a Go project for handling OpenAPI files. Prior to 0.149.0, runtime request, response, and direct schema validation lacks cycle detection when an allOf, anyOf, or oneOf chain refers back to an ancestor schema, even though loading and document validation accept the circular reference...