CVE-2026-59901 Netty Bzip2Decoder: Infinite Loop in RLE State Machine Leads to Event-Loop Thread Hang

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the Bzip2Decoder handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a malformed bzip2 stream that permanently captures the...

CVE-2026-59901

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the Bzip2Decoder handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a malformed bzip2 stream that permanently captures the...

CVE-2026-59901

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the Bzip2Decoder handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a malformed bzip2 stream that permanently captures the...

CVE-2026-59901 Netty Bzip2Decoder: Infinite Loop in RLE State Machine Leads to Event-Loop Thread Hang

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the Bzip2Decoder handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a malformed bzip2 stream that permanently captures the...

brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the expand function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-lo...

CVE-2026-59920

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.136.Final and 4.2.16.Final, Netty's STOMP encoder StompSubframeEncoder does not escape or validate header values in CONNECT and CONNECTED frames, so raw newline \n characters in a header value are...

GHSA-4P3G-4HCJ-WPVX

creationtimestamp| type| source ---|---|--- 2026-07-29 16:32:11+00:00| seen| https://gist.github.com/alon710/fffec7ff7a3f093df17d5e871ff03c84...

CVE-2026-15144

creationtimestamp| type| source ---|---|--- 2026-07-29 16:15:54+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mrsd4ilqss2c 2026-07-29 19:43:29+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrsopqnc4r2l...

CVE-2026-64291

A flaw was found in the Linux kernel's iommufd subsystem. A local user could exploit this vulnerability by allocating excessively large event queues, leading to the exhaustion of kernel memory. This can result in a Denial of Service DoS for the system...

GHSA-4CWX-7WF7-3272

creationtimestamp| type| source ---|---|--- 2026-07-29 15:21:07+00:00| seen| https://bsky.app/profile/nodeland.dev/post/3mrsa2kt7jx23 2026-08-03 19:25:00+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3ms77zcaiyk2n...

CVE-2026-66489

creationtimestamp| type| source ---|---|--- 2026-07-29 14:38:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrs5npxyln2q...

GHSA-8M8R-38JM-F355

creationtimestamp| type| source ---|---|--- 2026-07-29 13:32:26+00:00| seen| https://gist.github.com/alon710/9d9829ba6ab40face903027898206e80...

GHSA-7JXR-CG7F-GPGV

creationtimestamp| type| source ---|---|--- 2026-07-29 12:03:19+00:00| seen| https://t.me/sysadminup/1645 2026-07-30 00:03:05+00:00| seen| https://t.me/sysadminup/1645 2026-08-04 03:00:05+00:00| published-proof-of-concept| https://t.me/sysadminup/1645 2026-08-05 00:00:57+00:00|...

CVE-2021-30557

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:50+00:00| seen| Telegram/DPLG5i7obZNHLYAA2CRlChFMhynMyOlYEo2fOgnuGeKe7A 2026-07-30 00:02:02+00:00| seen| Telegram/DPLG5i7obZNHLYAA2CRlChFMhynMyOlYEo2fOgnuGeKe7A 2026-08-01 15:00:04+00:00| seen|...

CVE-2015-8779

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:46+00:00| seen| Telegram/nEfx4bkJlcldrL4ooYbVX-cKtKfFWPCKK6-GEAcf7FF 2026-07-30 00:02:02+00:00| seen| Telegram/nEfx4bkJlcldrL4ooYbVX-cKtKfFWPCKK6-GEAcf7FF 2026-08-01 15:00:04+00:00| seen|...

CVE-2017-3636

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:46+00:00| seen| Telegram/-zzzJ6WyGgd0bbH69QyBWy0gZPvCZNNfcCn-gTP7taOVg 2026-07-30 00:02:02+00:00| seen| Telegram/-zzzJ6WyGgd0bbH69QyBWy0gZPvCZNNfcCn-gTP7taOVg 2026-08-01 14:00:04+00:00| seen|...

CVE-2010-4652

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:45+00:00| seen| Telegram/1X2BtYwWHdXS2SnlXJZaW1RwfVI6Gbba0wN-buSHmDE0A 2026-07-30 00:02:02+00:00| seen| Telegram/1X2BtYwWHdXS2SnlXJZaW1RwfVI6Gbba0wN-buSHmDE0A 2026-08-01 14:00:05+00:00| seen|...

CVE-2016-3372

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:43+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-07-30 00:01:59+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-08-01 12:00:06+00:00| seen|...

CVE-2015-0090

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:38+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-07-30 00:01:59+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-08-01 12:00:06+00:00| seen|...

CVE-2014-2814

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:38+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-07-30 00:01:59+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-08-01 12:00:06+00:00| seen|...