Lucene search
+L

58 matches found

Tenable Nessus
Tenable Nessus
•added 2026/10/16 12:00 a.m.•4 views

AlmaLinux 9.2 [TuxCare] Security Update: pcs / pcs-snmp Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792125039)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792125039 advisory. - decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS. CVE-2022-38900 - Rack is a modular Ruby we...

7.5CVSS6.3AI score0.35376EPSS
SaveExploits2References9
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•11 views

CentOS Linux 8.4 [TuxCare] Security Update: pcs / pcs-snmp Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1790610952)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1790610952 advisory. - A flaw was found in the Pacemaker configuration tool pcs. The pcs daemon was allowing expired accounts, and accounts with expired...

8.8CVSS6.6AI score0.23789EPSS
SaveExploits3References9
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•11 views

CentOS Linux 8.5 [TuxCare] Security Update: pcs / pcs-snmp Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1790611274)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1790611274 advisory. - A flaw was found in the Pacemaker configuration tool pcs. The pcs daemon was allowing expired accounts, and accounts with expired...

8.8CVSS6.6AI score0.23789EPSS
SaveExploits3References9
osv_clsa
osv_clsa
•added 2026/09/01 9:30 a.m.•16 views

CLSA-2026-1788255041 TuxCare security update for decode-uri-component (1 CVE)

TuxCare rebuilt decode-uri-component to address 1 CVE. Fixed in 0.2.2-tuxcare.1...

8.7CVSS5.8AI score0.00507EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/01 12:00 a.m.•7 views

PT-2026-89824

TuxCare rebuilt decode-uri-component to address 2 CVEs. Fixed in 0.2.2-tuxcare.1...

5.9AI score
SaveExploits0References1
EUVD
EUVD
•added 2026/08/31 10:10 p.m.•28 views

EUVD-2026-40267

decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input...

8.7CVSS5.8AI score0.00507EPSS
SaveExploits0References6
Patchstack
Patchstack
•added 2026/08/31 10:10 p.m.•16 views

NPM: decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input

NPM: decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input vulnerability discovered by ? in WordPress Npm decode-uri-component versions = 0.4.2...

8.7CVSS5.8AI score0.00507EPSS
SaveExploits0References7Affected Software1
osv_ghsa
osv_ghsa
•added 2026/08/31 10:10 p.m.•13 views

GHSA-VCC3-GHJQ-M6FR decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input

Impact An attacker who can supply input to decodeUriComponent directly or via a dependency that uses this package on URL/query/path data can cause excessive CPU usage and application unresponsiveness. This is an availability issue; there is no known memory corruption, data disclosure, or remote...

8.7CVSS6.3AI score0.00507EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2026/08/31 10:10 p.m.•35 views

decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input

Impact An attacker who can supply input to decodeUriComponent directly or via a dependency that uses this package on URL/query/path data can cause excessive CPU usage and application unresponsiveness. This is an availability issue; there is no known memory corruption, data disclosure, or remote...

8.7CVSS6.4AI score0.00507EPSS
SaveExploits0References7Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/08/25 6:06 p.m.•13 views

Security Bulletin: Vulnerability in decode-uri-component affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in decode-uri-component has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...

8.7CVSS5.7AI score0.00507EPSS
SaveExploits0Affected Software2
IBM Security Bulletins
IBM Security Bulletins
•added 2026/08/13 9:07 a.m.•18 views

Security Bulletin:Vulnerability in decode-uri affects IBM Netezza Appliance

Summary The decode-uri package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-45822 Vulnerability Details CVEID:CVE-2026-45822 DESCRIPTION: decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode function splits input on...

8.7CVSS5.8AI score0.00507EPSS
SaveExploits0Affected Software1
osv_clsa
osv_clsa
•added 2026/08/04 2:52 p.m.•14 views

CLSA-2026-1780620683 TuxCare security update for decode-uri-component (1 CVE)

TuxCare rebuilt decode-uri-component to address 1 CVE. Fixed in 0.2.0-tuxcare.1...

7.5CVSS6.8AI score0.23789EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2026/08/04 12:00 a.m.•6 views

PT-2026-74956

TuxCare rebuilt decode-uri-component to address 1 CVE. Fixed in 0.2.0-tuxcare.1...

5.9AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/08 4:27 p.m.•18 views

CVE-2026-59731

Astro is a web framework for content-driven websites. Version 6.4.7 performs authorization decisions on a partially decoded pathname after reaching the iterative URL decoder limit, while later rewrite route matching performs an additional decodeURI operation and can resolve the request to a...

8.2CVSS5.9AI score0.00466EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
•added 2026/07/08 12:00 a.m.•36 views

PT-2026-56516

Name of the Vulnerable Software and Affected Versions Astro version 6.4.7 Description Astro performs authorization decisions on a partially decoded pathname after reaching the iterative URL decoder limit. Subsequently, rewrite route matching performs an additional decodeURI operation, which can...

8.2CVSS5.8AI score0.00466EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2026/07/03 3:10 a.m.•17 views

SUSE CVE-2026-45822

decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode function splits input on '%' producing N tokens and calls decodeComponents, exhibiting super-linear parsing time: 200 '%ab' tokens takes approximately 0.7s, 700 tokens approximately 6s, and 1400 tokens approximately...

8.7CVSS5.8AI score0.00507EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/07/02 12:00 a.m.•27 views

Linux Distros Unpatched Vulnerability : CVE-2026-45822

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode function splits input on '%' producing N tokens and calls decodeComponents,...

8.7CVSS5.8AI score0.00507EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/06/30 3:24 p.m.•27 views

CVE-2026-45822

A flaw was found in the decode-uri-component library. This vulnerability allows a remote attacker to trigger a Denial of Service DoS by submitting specially crafted input. The decode function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can le...

8.7CVSS5.8AI score0.00507EPSS
SaveExploits0References6
osv_azl
osv_azl
•added 2026/06/30 9:16 a.m.•17 views

AZL-92075 CVE-2026-45822 affecting package js-jquery 3.5.0-4

decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode function splits input on '%' producing N tokens and calls decodeComponents, exhibiting super-linear parsing time: 200 '%ab' tokens takes approximately 0.7s, 700 tokens approximately 6s, and 1400 tokens approximately...

8.7CVSS5.8AI score0.00507EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/30 8:05 a.m.•53 views

CVE-2026-45822

decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode function splits input on '%' producing N tokens and calls decodeComponents, exhibiting super-linear parsing time: 200 '%ab' tokens takes approximately 0.7s, 700 tokens approximately 6s, and 1400 tokens approximately...

8.7CVSS0.00507EPSS
SaveExploits0References3
Rows per page
Query Builder