54371 matches found
CVE-2026-74787
Scriban before 7.0.0 contains an uncontrolled recursion vulnerability in the object.tojson builtin function that lacks depth limits and circular reference detection. Attackers can craft templates with self-referencing objects to trigger unbounded recursion, causing a StackOverflowException that...
UBUNTU-CVE-2026-72888
Net::OAuth versions before 0.32 for Perl allow memory exhaustion via unbounded caching of failed module loads in smartrequire. smartrequire stores results in a process-global hash with no bound and no eviction, and keeps an entry for every class name it is asked about, including names that failed...
CVE-2026-72888
Net::OAuth Perl module before 0.32 has an unbounded process-global cache in smart_require that stores every requested class name (including failed loads) before error checking. The key is derived from the attacker-controlled signature_method request parameter, so a remote client can force the cac...
EUVD-2026-59988
Net::OAuth versions before 0.32 for Perl allow memory exhaustion via unbounded caching of failed module loads in smartrequire. smartrequire stores results in a process-global hash with no bound and no eviction, and keeps an entry for every class name it is asked about, including names that failed...
CVE-2026-72888 Net::OAuth versions before 0.32 for Perl allow memory exhaustion via unbounded caching of failed module loads in smart_require
Net::OAuth versions before 0.32 for Perl allow memory exhaustion via unbounded caching of failed module loads in smartrequire. smartrequire stores results in a process-global hash with no bound and no eviction, and keeps an entry for every class name it is asked about, including names that failed...
MINI-45X5-794M-PXPF
Bulletin has no description...
MINI-W365-3VH7-GX3G
Bulletin has no description...
MINI-44P3-8QVP-RGFQ
Bulletin has no description...
MINI-MM96-4QPC-WW98
Bulletin has no description...
MINI-W52F-C7GW-6F77
Bulletin has no description...
MINI-GPG3-QFQW-M53R
Bulletin has no description...
MINI-67JV-JVQ5-J46W
Bulletin has no description...
MINI-V2X4-CJXG-9VFQ
Bulletin has no description...
CVE-2026-74792
Scriban before 7.0.0 affected versions = 6.6.0 contains a stack overflow vulnerability in nested array initializer parsing. Deeply nested array initializers recurse through a path ParseArrayInitializer → ParseExpression → ParseArrayInitializer that is not covered by the ExpressionDepthLimit count...
CVE-2026-74792
CVE-2026-74792 affects Scriban before 7.0.0 (versions
CVE-2026-74792 Scriban before 7.0.0 Stack Overflow via nested array initializers
Scriban before 7.0.0 affected versions = 6.6.0 contains a stack overflow vulnerability in nested array initializer parsing. Deeply nested array initializers recurse through a path ParseArrayInitializer → ParseExpression → ParseArrayInitializer that is not covered by the ExpressionDepthLimit count...
EUVD-2026-59953
Scriban before 7.0.0 contains an uncontrolled recursion vulnerability in the object.tojson builtin function that lacks depth limits and circular reference detection. Attackers can craft templates with self-referencing objects to trigger unbounded recursion, causing a StackOverflowException that...
MINI-VP7W-FW3P-3PJC
Bulletin has no description...