98 matches found
homoglyphs
THE PROJECT IS ARCHIVED Forks: https://github.com/orsinium/forks Homoglyphs Homoglyphs -- python library for getting homoglyphs and converting to ASCII. Features It's smarter version of confusablehomoglyphs: Autodect or manual choosing category aliases from ISO 15924. Auto or manual load only...
Denial Of Service (DoS)
nanoid is vulnerable to Denial Of Service. The vulnerability is due to an infinite loop in customAlphabet and customRandom when configured with a size of 0, allowing attacker-controlled input to hang the calling thread and cause application unavailability...
Pseudo-Noise Superposition for Finite-Alphabet Physical Layer Security
Physical-layer security based on pseudo-noise PN superposition is a promising approach for mitigating eavesdropping in future wireless systems. However, under Shannon's capacity formulation with Gaussian signaling, achieving secrecy typically requires allocating substantial transmit power to PN,...
GHSA-2V37-7H3G-55P8 nanoid: custom generators can loop indefinitely when size is zero
nanoid Nano ID before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal generation loop never satisfies its exit condition and spins indefinitely, hanging the calling thread. An application that...
GHSA-28WG-GHJ8-5HJV nanoid: non-secure generators can loop indefinitely with negative size
nanoid Nano ID before 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination condition, spinning...
CVE-2026-67213
nanoid Nano ID before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal generation loop never satisfies its exit condition and spins indefinitely, hanging the calling thread. An application that...
UBUNTU-CVE-2026-67213
nanoid Nano ID before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal generation loop never satisfies its exit condition and spins indefinitely, hanging the calling thread. An application that...
EUVD-2026-50325
nanoid Nano ID before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal generation loop never satisfies its exit condition and spins indefinitely, hanging the calling thread. An application that...
CVE-2026-67213
nanoid Nano ID before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal generation loop never satisfies its exit condition and spins indefinitely, hanging the calling thread. An application that...
CVE-2026-67213
nanoid Nano ID before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal generation loop never satisfies its exit condition and spins indefinitely, hanging the calling thread. An application that...
CVE-2026-67213 nanoid before 5.1.6 Infinite Loop via Zero Size in customAlphabet and customRandom
nanoid Nano ID before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal generation loop never satisfies its exit condition and spins indefinitely, hanging the calling thread. An application that...
CVE-2026-67213
CVE-2026-67213 (nanoid) affects Nano ID before 5.1.6. A bug in the customAlphabet and customRandom functions can enter an infinite loop when configured with a size of 0, causing the generation loop to spin and hang the calling thread. This creates a denial-of-service condition if an attacker can ...
PT-2026-65812
Name of the Vulnerable Software and Affected Versions anoid versions prior to 5.1.16 Description The non-secure module nanoid/non-secure contains an infinite loop within the customAlphabet and nanoid functions. This occurs when these functions receive a negative value for the size parameter...
alfabet (0.0.5), alibi (>=0.3.1, <=0.4.0) +67 more potentially affected by CVE-2022-35992 via tensorflow (1.15.5)
tensorflow PYPI version 1.15.5 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - alfabet 0.0.5 - alibi =0.3.1, =0.1.0, =1.0.2, =0.1.0a3, =0.1.1, =0.0.1, =0.1.14, =0.2.0, =0.0.1, =0.1.0, =0.7.0 and more Source cves:...
alfabet (0.0.5), alibi (>=0.3.1, <=0.4.0) +67 more potentially affected by CVE-2022-23576 via tensorflow (1.15.5)
tensorflow PYPI version 1.15.5 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - alfabet 0.0.5 - alibi =0.3.1, =0.1.0, =1.0.2, =0.1.0a3, =0.1.1, =0.0.1, =0.1.14, =0.2.0, =0.0.1, =0.1.0, =0.7.0 and more Source cves:...
alfabet (0.0.5), alibi (>=0.3.1, <=0.4.0) +67 more potentially affected by CVE-2022-23585 via tensorflow (1.15.5)
tensorflow PYPI version 1.15.5 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - alfabet 0.0.5 - alibi =0.3.1, =0.1.0, =1.0.2, =0.1.0a3, =0.1.1, =0.0.1, =0.1.14, =0.2.0, =0.0.1, =0.1.0, =0.7.0 and more Source cves:...
MAI-2025-0017
Large Language Models LLMs are susceptible to a sophisticated adversarial attack known as Alphabet Index Mapping AIM. This attack demonstrates a high efficacy in circumventing safety filters, commonly referred to as "jailbreaking." AIM operates by encoding prompts through the conversion of...
GHSA-HG7G-56H5-5PQR CAPTCHA Bypass in WWBN/AVideo via Attacker-Controlled Length Parameter and Missing Token Invalidation on Failure
Summary objects/getCaptcha.php accepts the CAPTCHA length ql directly from the query string with no clamping or sanitization, letting any unauthenticated client force the server to generate a 1-character CAPTCHA word. Combined with a case-insensitive strcasecmp comparison over a 33-character...
OESA-2026-1461 python3 security update
Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C...
OESA-2026-1356 python3 security update
Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C...