OESA-2026-3952 python-Keras security update

Keras is a high-level neural networks API for Python. Security Fixes: A vulnerability in keras-team/keras versions = 3.15.0 allows for a denial of service DoS attack when loading malicious .keras model files via the keras.models.loadmodel function. The H5IOStore.getitem method in...

Apache PDFBox 3.0.8 Flate PNG Predictor Disproportionate Heap Allocation DoS

Summary The Apache PDFBox library is an open source Java tool for working with PDF documents. This project allows creation of new PDF documents, manipulation of existing documents and the ability to extract content from documents. Apache PDFBox also includes several command-line utilities...

CLEANSTART-2026-YD02167 pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service

Security vulnerability affects the wildfly package. A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service...

CVE-2026-93838

SGLang versions through 0.5.20 contain an unbounded memory allocation vulnerability in handlestagingreq that fails to validate chunkidx from ZMQ STAGINGREQ frames in prefill/decode disaggregation deployments. Attackers with access to the decode engine's internal ZMQ rank port can send a frame wit...

Improper Validation of Specified Quantity in Input

Overview Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input via CSSStyleDeclaration.setProperty, which fails to validate reserved property names. An attacker can supply a stylesheet containing a declaration named length, replacing the internal...

CVE-2026-93838

SGLang versions through 0.5.20 are vulnerable to unbounded memory allocation in handle_staging_req(), which fails to validate the chunk_idx field in ZMQ STAGING_REQ frames used in prefill/decode disaggregation deployments. An attacker with access to the decode engine's internal ZMQ rank port can ...

CVE-2026-93838 SGLang through 0.5.20 Unbounded Memory Allocation via STAGING_REQ chunk_idx

SGLang versions through 0.5.20 contain an unbounded memory allocation vulnerability in handlestagingreq that fails to validate chunkidx from ZMQ STAGINGREQ frames in prefill/decode disaggregation deployments. Attackers with access to the decode engine's internal ZMQ rank port can send a frame wit...

EUVD-2026-83282

SGLang versions through 0.5.20 contain an unbounded memory allocation vulnerability in handlestagingreq that fails to validate chunkidx from ZMQ STAGINGREQ frames in prefill/decode disaggregation deployments. Attackers with access to the decode engine's internal ZMQ rank port can send a frame wit...

CVE-2026-93838 SGLang through 0.5.20 Unbounded Memory Allocation via STAGING_REQ chunk_idx

SGLang versions through 0.5.20 contain an unbounded memory allocation vulnerability in handlestagingreq that fails to validate chunkidx from ZMQ STAGINGREQ frames in prefill/decode disaggregation deployments. Attackers with access to the decode engine's internal ZMQ rank port can send a frame wit...

CVE-2026-93838 SGLang through 0.5.20 Unbounded Memory Allocation via STAGING_REQ chunk_idx

SGLang versions through 0.5.20 contain an unbounded memory allocation vulnerability in handlestagingreq that fails to validate chunkidx from ZMQ STAGINGREQ frames in prefill/decode disaggregation deployments. Attackers with access to the decode engine's internal ZMQ rank port can send a frame wit...

CVE-2026-69186

c-ares is an asynchronous resolver library. Prior to 1.34.7, aresdnsparse trusts the attacker-controlled ANCOUNT, NSCOUNT, and ARCOUNT fields before confirming that the DNS response contains enough bytes for the claimed records. Because processanswer invokes parsing before transaction ID and...

AZL-103454 CVE-2026-69186 affecting package fluent-bit 3.1.10-7

c-ares is an asynchronous resolver library. Prior to 1.34.7, aresdnsparse trusts the attacker-controlled ANCOUNT, NSCOUNT, and ARCOUNT fields before confirming that the DNS response contains enough bytes for the claimed records. Because processanswer invokes parsing before transaction ID and...

Improper Validation of Specified Quantity in Input

Overview Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input via the aresdnsparse function. An attacker can cause excessive heap memory allocation and degrade or deny name resolution services by sending specially crafted DNS responses with...

EUVD-2026-83212

c-ares is an asynchronous resolver library. Prior to 1.34.7, aresdnsparse trusts the attacker-controlled ANCOUNT, NSCOUNT, and ARCOUNT fields before confirming that the DNS response contains enough bytes for the claimed records. Because processanswer invokes parsing before transaction ID and...

NPM: adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)

NPM: adm-zip: Uncontrolled memory allocation via the declared uncompressed size DoS vulnerability discovered by ? in WordPress Npm adm-zip versions 0.6.1...

GHSA-7Q85-XJ36-VMFC adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)

Summary adm-zip allocates an entry's output buffer from the declared uncompressed size central-directory size field before validating it against the actual data. A tiny crafted ZIP that declares a huge uncompressed size forces a multi-gigabyte allocation from a few bytes. Impact On adm-zip 0.5.17...

adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)

Summary adm-zip allocates an entry's output buffer from the declared uncompressed size central-directory size field before validating it against the actual data. A tiny crafted ZIP that declares a huge uncompressed size forces a multi-gigabyte allocation from a few bytes. Impact On adm-zip 0.5.17...

Allocation of Resources Without Limits or Throttling

Overview anyio is a High level compatibility layer for multiple asynchronous event loop implementations Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in processworker within src/anyio/toprocess.py, where stderr in a worker subprocess is...

CVE-2026-77301

adm-zip is a Node.js JavaScript library for creating and extracting ZIP archives. Prior to version 0.6.1 , the getData() function in zipEntry.js trusts an entry's central-directory uncompressed size and allocates output memory before validating that value against the actual compressed data and de...

CVE-2026-77301 adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)

adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, getData in zipEntry.js trusts an entry's central-directory uncompressed size and allocates output memory before validating that value against the actual compressed data and decompression result. A...