20629 matches found
CVE-2026-47066 Infinite loop in Alt-Svc header parser in hackney
Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in benoitc hackney allows Excessive Allocation. The Alt-Svc response header parser in src/hackneyaltsvc.erl does not guarantee forward progress. When parsetoken/2 receives a non-token, non-whitespace, non-comma byte e.g. !, @, =, ...
CVE-2026-33079
A flaw was found in Mistune, a Markdown parser. This vulnerability, known as Regular Expression Denial of Service ReDoS, exists in the LINKTITLERE regular expression. A remote attacker can exploit this by providing specially crafted Markdown input, which causes the regular expression engine to...
CVE-2026-40016
A flaw was found in Dovecot. A remote or local attacker could upload a malicious Sieve script through the ManageSieve service, or locally, to bypass configured CPU time limits for Sieve scripts. This allows the attacker to consume excessive server resources, leading to a degradation of server...
Alibaba Cloud Linux 3 : 0115: jq (ALINUX3-SA-2026:0115)
The remote Alibaba Cloud Linux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0115 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-39979: A flaw was found in jq, a...
PT-2026-43064
Name of the Vulnerable Software and Affected Versions hackney versions 2.0.0-beta.1 through 4.0.0 Description An infinite loop exists in the Alt-Svc response header parser within src/hackney altsvc.erl. When the parse token/2 function receives a byte that is not a token, whitespace, or comma such...
Linux Distros Unpatched Vulnerability : CVE-2026-39829
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could...
PT-2026-42860
Name of the Vulnerable Software and Affected Versions Parse Server affected versions not specified Description An unauthenticated attacker with knowledge of a public Parse Application ID can cause a denial of service by submitting a single HTTP request to any '/parse/' endpoint. The attack involv...
Inefficient Algorithmic Complexity
Overview golang.org/x/net/html is a package that implements an HTML5-compliant tokenizer and parser. Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in parse.go, when checking attributes iteratively. An attacker can cause excessive CPU consumption by providi...
AZL-87705 CVE-2026-25680 affecting package docker-compose for versions less than 2.27.0-12
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87903 CVE-2026-25680 affecting package kubernetes for versions less than 1.30.10-25
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87756 CVE-2026-25680 affecting package gh for versions less than 2.62.0-17
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87963 CVE-2026-25680 affecting package kubevirt for versions less than 1.7.1-7
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
DEBIAN-CVE-2026-25680
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87414 CVE-2026-25680 affecting package cert-manager for versions less than 1.12.15-9
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87459 CVE-2026-25680 affecting package cf-cli for versions less than 8.7.11-7
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87242 CVE-2026-25680 affecting package cri-o 1.30.1-1
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87143 CVE-2026-25680 affecting package azl-otel-collector 0.127.0-1
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87338 CVE-2026-25680 affecting package yq 4.45.1-1
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...