Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the visitJSON and decodeValue functions when processing schemas with circular references in allOf, anyOf, or oneOf combinators. An attacker can cause a fatal process crash by submitting a crafted OpenAPI...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the visitJSON and decodeValue functions when processing schemas with circular references in allOf, anyOf, or oneOf combinators. An attacker can cause a fatal process crash by submitting a crafted OpenAPI...

PT-2026-115010

Name of the Vulnerable Software and Affected Versions kin-openapi versions prior to 0.149.0 Description Runtime request, response, and direct schema validation lack cycle detection when an allOf, anyOf, or oneOf chain refers back to an ancestor schema. While loading and document validation accept...

Denial Of Service (DoS)

StableLib is vulnerable to Denial Of Service DoS. The vulnerability is due to the lack of a maximum nesting-depth limit in the @stablelib/cbor decoder's recursive decodeValue function, which allows an attacker to provide deeply nested CBOR structures that exhaust the JavaScript call stack,...

pcapplusplus:FuzzTargetNg: Heap-buffer-overflow in pcpp::Asn1BooleanRecord::decodeValue

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=4653943981670400 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTargetNg Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...