293 matches found
CVE-2026-83617
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
CVE-2026-83608
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
CVE-2026-83612
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
UBUNTU-CVE-2026-83608
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
UBUNTU-CVE-2026-83619
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
UBUNTU-CVE-2026-83618
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
UBUNTU-CVE-2026-83606
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
CVE-2026-83611
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
UBUNTU-CVE-2026-83605
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
UBUNTU-CVE-2026-83617
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
UBUNTU-CVE-2026-83611
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
CVE-2026-83610
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
CVE-2026-83607
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
CVE-2026-83618
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
CVE-2026-83614
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
CVE-2026-83605
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
UBUNTU-CVE-2026-83614
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
CVE-2026-54788
dd-trace-rs provides Datadog application performance monitoring for Rust. From 0.1.0 until 0.3.3, datadog-opentelemetry/src/propagation/tracecontext.rs parses the W3C tracestate header and collects every semicolon-separated key and value pair in the Datadog dd=... vendor entry into a HashMap...
CGA-W3CM-86FJ-2C95
Bulletin has no description...
datadog-opentelemetry has unbounded W3C tracestate parsing that may lead to DoS
Impact Datadog tracing libraries that implement W3C Trace Context tracecontext propagation parse the incoming tracestate header without enforcing a size cap on the Datadog vendor entry dd=.... The dd= value contains semicolon-separated key:value pairs, and the parser allocates a hash-map entry fo...