Lucene search
+L

6 matches found

NVD
NVD
added 2026/08/30 1:20 a.m.16 views

CVE-2026-77831

Inefficient Algorithmic Complexity vulnerability in ash-project ashpapertrail allows a user who can submit a large array attribute to a paper-trailed create or update action to cause a denial of service through excessive CPU and memory use. With full-diff change tracking,...

2.1CVSS0.00138EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/30 12:18 a.m.12 views

EEF-CVE-2026-77831 Algorithmic-complexity denial of service in AshPaperTrail full-diff list tracking

Summary Inefficient Algorithmic Complexity vulnerability in ash-project ashpapertrail allows a user who can submit a large array attribute to a paper-trailed create or update action to cause a denial of service through excessive CPU and memory use. With full-diff change tracking,...

2.1CVSS5.7AI score0.00138EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/30 12:18 a.m.35 views

CVE-2026-77831

AshPaperTrail (an Elixir library from the ash-project ecosystem) contains an inefficient algorithmic complexity vulnerability in its full-diff list change tracking component (AshPaperTrail.ChangeBuilders.FullDiff.ListChange). The root cause is a cubic-time algorithm: when pairing prior array elem...

2.1CVSS5.9AI score0.00138EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/30 12:18 a.m.47 views

CVE-2026-77831 Algorithmic-complexity denial of service in AshPaperTrail full-diff list tracking

Inefficient Algorithmic Complexity vulnerability in ash-project ashpapertrail allows a user who can submit a large array attribute to a paper-trailed create or update action to cause a denial of service through excessive CPU and memory use. With full-diff change tracking,...

2.1CVSS0.00138EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/30 12:18 a.m.11 views

CVE-2026-77831 Algorithmic-complexity denial of service in AshPaperTrail full-diff list tracking

Inefficient Algorithmic Complexity vulnerability in ash-project ashpapertrail allows a user who can submit a large array attribute to a paper-trailed create or update action to cause a denial of service through excessive CPU and memory use. With full-diff change tracking,...

2.1CVSS5.9AI score0.00138EPSS
SaveExploits0References9
Github Security Blog
Github Security Blog
added 2021/01/06 4:57 p.m.67 views

Regular Expression Denial of Service in CairoSVG

Doyensec Vulnerability Advisory Regular Expression Denial of Service REDoS in cairosvg Affected Product: CairoSVG v2.0.0+ Vendor: https://github.com/Kozea Severity: Medium Vulnerability Class: Denial of Service Authors: Ben Caller Doyensec Summary When processing SVG files, the python package...

5.7CVSS0.01466EPSS
SaveExploits1References7Affected Software1
Rows per page
Query Builder