CVE-2026-95861: Uncontrolled Recursion

A malicious actor with access to the network could exploit an Uncontrolled Recursion vulnerability found in certain UniFi gateway devices to execute a Denial of Service DoS attack on the device...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: dovecot (UTSA-2026-090074)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090074 advisory. In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service resource consumption via a craft...

K000163359: Python vulnerability CVE-2026-30922

Security Advisory Description pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the pyasn1 library is vulnerable to a Denial of Service DoS attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containi...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the recursive traversal of deeply nested unary expressions in the AST. An attacker can cause a fatal stack overflow and terminate the process by submitting specially crafted SQL input that results in...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the parsing process of WS-Policy documents containing deeply nested policy elements. An attacker can cause the application to exhaust the thread stack and crash the parser by submitting specially crafted...

SUSE-SU-2026:23865-1 Security update for alloy

This update for alloy fixes the following issues: - CVE-2026-1229: github.com/cloudflare/circl: the CombinedMult function in the ecc/p384 package produces an incorrect value for specific inputs bsc1265542. - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad...

CVE-2026-91863 Apache Neethi: Uncontrolled recursion while parsing crafted WS-Policy documents allows denial of service

A specially crafted WS-Policy document with deeply nested policy elements can bypass Neethi's nesting-depth limit and exhaust the thread stack, crashing the parser denial of service. Users are recommended to upgrade to version 3.2.4, which fixes this issue...

CVE-2026-91863 Apache Neethi: Uncontrolled recursion while parsing crafted WS-Policy documents allows denial of service

A specially crafted WS-Policy document with deeply nested policy elements can bypass Neethi's nesting-depth limit and exhaust the thread stack, crashing the parser denial of service. Users are recommended to upgrade to version 3.2.4, which fixes this issue...

CVE-2026-91863 Apache Neethi: Uncontrolled recursion while parsing crafted WS-Policy documents allows denial of service

A specially crafted WS-Policy document with deeply nested policy elements can bypass Neethi's nesting-depth limit and exhaust the thread stack, crashing the parser denial of service. Users are recommended to upgrade to version 3.2.4, which fixes this issue...

CVE-2026-91863

A flaw exists in Apache Neethi where a remote attacker can send a specially crafted WS-Policy document containing deeply nested policy elements. This document can bypass the parser's nesting-depth limit, triggering uncontrolled recursion that exhausts the thread stack and crashes the parser, resu...

CVE-2026-59168: Uncontrolled Recursion

Dasel is a command-line tool and library for querying, modifying, and transforming data structures. From 3.0.0 until 3.11.1, parsing/json/jsonreader.go decodeValue, decodeObject, and decodeArray, and parsing/xml/reader.go parseElement, recurse once per input nesting level without a depth guard...

CVE-2026-91863: Uncontrolled Recursion

A specially crafted WS-Policy document with deeply nested policy elements can bypass Neethi's nesting-depth limit and exhaust the thread stack, crashing the parser denial of service. Users are recommended to upgrade to version 3.2.4, which fixes this issue...

ROS-20260921-73-0015

The vulnerability in ElasticSearch is related to an uncontrolled recursion. Exploiting this vulnerability can allow attackers to cause service failures...

ROS-20260921-73-0010

The vulnerability in ElasticSearch is related to an uncontrolled recursion. Exploiting this vulnerability can allow attackers to cause service failures...

ROS-20260921-73-0018

The vulnerability in perl-Net-DNS is related to an uncontrolled recursion. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260921-73-0004

The vulnerability in ElasticSearch is related to an uncontrolled recursion. Exploiting this vulnerability can allow attackers to cause service failures...

ROS-20260921-73-0014

The vulnerability in ElasticSearch is related to an uncontrolled recursion. Exploiting this vulnerability can allow attackers to cause service failures...

ROS-20260921-73-0007

The vulnerability in ElasticSearch is related to an uncontrolled recursion. Exploiting this vulnerability can allow attackers to cause service failures...

ROS-20260921-73-0008

The vulnerability in ElasticSearch is related to an uncontrolled recursion. Exploiting this vulnerability can allow attackers to cause service failures...

Security Bulletin: IBM Event Endpoint Management is effected by Multiple Vulnerabilities

Summary IBM Event Endpoint Management is affected by Multiple Vulnerabilities and was addressed in IBM Event Endpoint Management 11.8.2 Vulnerability Details CVEID:CVE-2026-41907 DESCRIPTION: uuid is for the creation of RFC9562 formerly RFC4122 UUIDs. Prior to 14.0.0, v3, v5, and v6 accept extern...