smack

SMACK is both a modular software verification toolchain and a self-contained software verifier. It can be used to verify the assertions in its input programs. In its default mode, assertions are verified up to a given bound on loop iterations and recursion depth; it contains experimental support...

CVE-2026-85098

A reachable assertion vulnerability in the synoscgi in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote attackers to conduct limited denial-of-service attacks...

EUVD-2026-124198

A reachable assertion vulnerability in the synoscgi in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote attackers to conduct limited denial-of-service attacks...

CVE-2026-85098

A reachable assertion vulnerability exists in the synoscgi component of Synology DiskStation Manager (DSM) . This flaw affects versions prior to 7.3.2-86009-5 and 7.4.1-90080-1 . A remote attacker can exploit this vulnerability to conduct limited denial-of-service (DoS) attacks . No specific expl...

CVE-2026-85098

A reachable assertion vulnerability in the synoscgi in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote attackers to conduct limited denial-of-service attacks...

PT-2026-145693

A reachable assertion vulnerability in the synoscgi in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote attackers to conduct limited denial-of-service attacks...

CVE-2026-85098: Synology DiskStation Manager (DSM): A reachable assertion vulnerability in the synoscgi in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and…

A reachable assertion vulnerability in the synoscgi in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote attackers to conduct limited denial-of-service attacks...

CVE-2026-123862

A flaw was found in Node.js. A remote peer can trigger a denial of service DoS by abruptly disconnecting while data is being compressed using the zlib streaming interface. Under specific conditions where stream settings are adjusted during active compression, a sudden disconnection causes an...

ALPINE-CVE-2026-123863

A reachable assertion in Node.js HTTP/2 session teardown lets any unauthenticated client abort the server, over both TLS and cleartext. A client can arrange for an Http2Stream that still holds nghttp2-allocated header buffers to outlive its session: the stream is removed from the session's stream...

DEBIAN-CVE-2026-123863

A reachable assertion in Node.js HTTP/2 session teardown lets any unauthenticated client abort the server, over both TLS and cleartext. A client can arrange for an Http2Stream that still holds nghttp2-allocated header buffers to outlive its session: the stream is removed from the session's stream...

CVE-2026-123863

A reachable assertion in Node.js HTTP/2 session teardown lets any unauthenticated client abort the server, over both TLS and cleartext. A client can arrange for an Http2Stream that still holds nghttp2-allocated header buffers to outlive its session: the stream is removed from the session's stream...

EUVD-2026-123682

A reachable assertion in Node.js HTTP/2 session teardown lets any unauthenticated client abort the server, over both TLS and cleartext. A client can arrange for an Http2Stream that still holds nghttp2-allocated header buffers to outlive its session: the stream is removed from the session's stream...

CVE-2026-123863

Node.js is vulnerable to a remote HTTP/2 denial of service due to a reachable assertion in the Http2Session teardown process. An unauthenticated client can cause the server process to abort by arranging for an Http2Stream that retains nghttp2-allocated header buffers but is not properly detached ...

CVE-2026-123863

A reachable assertion in Node.js HTTP/2 session teardown lets any unauthenticated client abort the server, over both TLS and cleartext. A client can arrange for an Http2Stream that still holds nghttp2-allocated header buffers to outlive its session: the stream is removed from the session's stream...

CVE-2026-123863 Node.js is vulnerable to a remote HTTP/2 denial of service via a reachable assertion in Http2Session teardown

A reachable assertion in Node.js HTTP/2 session teardown lets any unauthenticated client abort the server, over both TLS and cleartext. A client can arrange for an Http2Stream that still holds nghttp2-allocated header buffers to outlive its session: the stream is removed from the session's stream...

CVE-2026-123863

A reachable assertion in Node.js HTTP/2 session teardown lets any unauthenticated client abort the server, over both TLS and cleartext. A client can arrange for an Http2Stream that still holds nghttp2-allocated header buffers to outlive its session: the stream is removed from the session's stream...

bind: bind: Denial of Service via assertion failure during redirect processing

A flaw was found in BIND. A remote attacker can cause a Denial of Service DoS by sending requests that trigger an assertion failure, abruptly terminating the resolver daemon. This vulnerability occurs when the resolver is configured with both a redirect zone and strict query name minimization whi...

bind: bind: Denial of service via assertion failure in RPZ query processing

A flaw was found in BIND. A remote attacker can cause a denial of service DoS by sending a sequence of recursive and non-recursive queries to an affected server. When BIND is configured to handle recursive queries alongside multiple Response Policy Zones RPZ with differing recursion settings,...

freerdp: FreeRDP: Denial of Service via assertion failure in RemoteFX decoder

A flaw was found in FreeRDP. This vulnerability allows a malicious Remote Desktop Protocol RDP server to cause a Denial of Service DoS by crashing the connected client. When a user connects to an attacker-controlled server with RemoteFX decoding enabled, the server can transmit a specially crafte...

undici: undici: Denial of Service via TLS renegotiation with mismatched certificate

A flaw was found in undici. A remote server can cause a Denial of Service DoS by initiating a Transport Layer Security TLS renegotiation and presenting a certificate with a mismatched hostname. Because the client application fails to properly handle the resulting verification error, an uncaught...