Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in immutable (CVE-2026-59879, CVE-2026-59880)

Summary Multiple vulnerabilities including Prototype Pollution and memory handling flaws in the immutable persistent data structure library CVE-2026-59879, CVE-2026-59880 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 4.3.9. Vulnerability...

PT-2026-98220

Name of the Vulnerable Software and Affected Versions zbateson/mail-mime-parser versions 2.0.0 through 3.0.5 zbateson/mail-mime-parser versions 4.0.0 through 4.0.1 Description An uncontrolled resource consumption and algorithmic complexity issue affects applications parsing untrusted emails. Thre...

CVE-2026-61816: Uncontrolled Resource Consumption

zbateson/mail-mime-parser is a mail mime parser alternative to PHP's imap functions and Pear libraries for reading messages in Internet Message Format RFC 822. Starting in version 2.0.0 and prior to version 3.0.6 and 4.0.2, an uncontrolled resource consumption / algorithmic complexity vulnerabili...

Ubuntu 20.04 LTS / 26.04 LTS : SQL parse vulnerabilities (USN-8808-1)

The remote Ubuntu 20.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8808-1 advisory. It was discovered that SQL parse contained multiple algorithmic complexity flaws when parsing SQL statements with deeply nested parentheses,...

NPM: elysia has Inefficient Algorithmic Complexity and Interpretation Conflict

NPM: elysia has Inefficient Algorithmic Complexity and Interpretation Conflict vulnerability discovered by ? in WordPress Npm elysia versions 1.4.29...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in AsyncParser in parser/shared/src/main/scala/jawn/AsyncParser.scala. An attacker can exhaust CPU by sending untrusted JSON tokens split across many tiny chunks so each absorb call rescans the same...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in AsyncParser in parser/shared/src/main/scala/jawn/AsyncParser.scala. An attacker can exhaust CPU by sending untrusted JSON tokens split across many tiny chunks so each absorb call rescans the same...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in AsyncParser in parser/shared/src/main/scala/jawn/AsyncParser.scala. An attacker can exhaust CPU by sending untrusted JSON tokens split across many tiny chunks so each absorb call rescans the same...

USN-8808-1: SQL parse vulnerabilities

It was discovered that SQL parse contained multiple algorithmic complexity flaws when parsing SQL statements with deeply nested parentheses, comments, or dollar-quoted string literals. An attacker could use this issue to cause SQL parse to consume excessive CPU resources, resulting in a denial of...

USN-8808-1 sqlparse vulnerabilities

It was discovered that SQL parse contained multiple algorithmic complexity flaws when parsing SQL statements with deeply nested parentheses, comments, or dollar-quoted string literals. An attacker could use this issue to cause SQL parse to consume excessive CPU resources, resulting in a denial of...

SUSE CVE-2026-77680

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...

CVE-2026-65634

Inefficient algorithmic complexity in the Erlang/OTP asn1 OBJECT IDENTIFIER decoder allows a remote unauthenticated attacker to cause denial of service by sending a crafted OID during the TLS handshake. The BER OID decoder asn1rttber:decsubidentifiers/3 in lib/asn1/src/asn1rttber.erl and the...

ROS-20260921-73-0005

The vulnerability in ElasticSearch is related to algorithmic complexity. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260921-73-0131

The vulnerability in Golang is related to algorithmic complexity. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the addressparser component in the Nodemailer library, which allows a hacker to trigger a service failure.

The vulnerability of the addressparser component in the Nodemailer email sending library is related to its algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

CVE-2026-63447: Inefficient Algorithmic Complexity

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.5 until 8.0.6, the FTP parser in src/app-layer-ftp.c can continue allocating transactions after app-layer.protocols.ftp.max-tx is reached while processing one large chunk...

CVE-2026-44639: Inefficient Algorithmic Complexity

NanoMQ is an MQTT broker. Prior to 0.24.14, NanoMQ's MQTT v5 property decoder in nng/src/supplemental/mqtt/mqttcodec.c uses propertyappend to walk the entire linked list for each property added by decodebufproperties. A remote unauthenticated client can supply a PUBLISH or SUBSCRIBE packet...

CVE-2026-69184: Inefficient Algorithmic Complexity

c-ares is an asynchronous resolver library. Prior to 1.34.7, aresdnsnameparse enforces backward DNS compression pointers but does not bound the total pointer hops or assembled name length. A malicious DNS server can send a response containing a long descending pointer chain and many resource...

CVE-2026-82760

Inefficient Algorithmic Complexity vulnerability in team-alembic AshAuthentication allows an unauthenticated attacker to exhaust CPU and memory via an oversized base62 segment in a submitted API key. AshAuthentication.Base.decode62/1 in lib/ashauthentication/base.ex splits its argument into one...

EUVD-2026-81478

Inefficient Algorithmic Complexity vulnerability in team-alembic AshAuthentication allows an unauthenticated attacker to exhaust CPU and memory via an oversized base62 segment in a submitted API key. AshAuthentication.Base.decode62/1 in lib/ashauthentication/base.ex splits its argument into one...