2 matches found
CVE-2026-41237
Froxlor is open source server administration software. In version 2.3.6 and earlier, the LOC record regex uses \s+ which matches newlines allowing embedded newlines to pass, TLSA matchingType=0 has no upper bound on hex data length, and all validators return raw input without zone-file escaping...
CVE-2020-17479
jpv aka Json Pattern Validator before 2.2.2 does not properly validate input, as demonstrated by a corrupted array...