CVE-2026-121623

The Symfony Serializer component DataUriNormalizer::denormalize matches the data: scheme with a case-sensitive regular expression, allowing a value with an uppercase scheme, such as DATA:,/../../../etc/passwd, to bypass it, resulting in Arbitrary Local File Read through Path Traversal in Symfony...

Drupal denormalize Code Execution

The vulnerability of the denormalize method in the FieldItemNormalizer class of the Drupal CMS system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Malicious code in activerecord_denormalize (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6480 Malicious code in activerecord_denormalize (RubyGems)

--- -= Per source details. Do not edit below this line.=-...