dnspython dns.name.from_wire_parser() excessive CPU use

Impact A maliciously crafted DNS message may cause dns.name.fromwireparser to use excessive CPU for DNS name decompression. Applications that process untrusted DNS wire form messages with dnspython may be degraded or DoS'd by the extra CPU use required. Patches This problem is fixed in dnspython...

GHSA-45C3-73F7-PV4M dnspython dns.name.from_wire_parser() excessive CPU use

Impact A maliciously crafted DNS message may cause dns.name.fromwireparser to use excessive CPU for DNS name decompression. Applications that process untrusted DNS wire form messages with dnspython may be degraded or DoS'd by the extra CPU use required. Patches This problem is fixed in dnspython...

PT-2026-127227

Name of the Vulnerable Software and Affected Versions opentelemetry-propagator-jaeger versions prior to 1.45.0 Description The JaegerPropagator.extract function in opentelemetry-propagator-jaeger processes inbound uberctx- baggage values without enforcing entry, per-entry byte, or total-byte...

SUSE SLES15 Security Update : aws-iam-authenticator (SUSE-SU-2026:4891-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4891-1 advisory. - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272130. - CVE-2026-78669:...

Security update for aws-iam-authenticator

This update for aws-iam-authenticator fixes the following issues: CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272130. CVE-2026-78669: golang.org/x/net/http2: excessive CPU consumption from repeated initial window changes bsc1285302. Changes f...

SUSE-SU-2026:4891-1 Security update for aws-iam-authenticator

This update for aws-iam-authenticator fixes the following issues: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272130. - CVE-2026-78669: golang.org/x/net/http2: excessive CPU consumption from repeated initial window changes bsc1285302. Chang...

CLEANSTART-2026-EL32711 Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU

Security vulnerability affects the argo-cd package. Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU...

CVE-2026-114605 dnspython dns.name.from_wire_parser() excessive CPU use

dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU use, application...

CVE-2026-114605 dnspython dns.name.from_wire_parser() excessive CPU use

dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU use, application...

CVE-2026-114605

The dnspython DNS toolkit for Python is vulnerable to excessive CPU use in versions prior to 2.9.0 . The root cause is located in dns.name.from_wire_parser(), which follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can trigger exce...

CVE-2026-94482

Next.js is a React framework for building full-stack web applications. From 13.0.0 until 15.5.28 and 16.4.1, crafted requests targeting App Router applications with at least one Server Action can cause excessive CPU consumption and block processing of further requests in the same process...

CVE-2026-94482

Next.js is a React framework for building full-stack web applications. From 13.0.0 until 15.5.28 and 16.4.1, crafted requests targeting App Router applications with at least one Server Action can cause excessive CPU consumption and block processing of further requests in the same process...

Security update for go1.26

This update for go1.26 fixes the following issues: Update to go1.26.10 bsc1255111: CVE-2026-78663: net/http: double flow control refund on HTTP/2 server streams bsc1284770. CVE-2026-78669: net/http: excessive CPU consumption from repeated initial window changes bsc1284772. CVE-2026-111943:...

openSUSE 16 : Recommended update for cadvisor (openSUSE-RU-2026:22137-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- RU-2026:22137-1 advisory. Changes in cadvisor: - CVE-2026-78669, bsc1285500, cadvisor: golang.org/x/net/http2: excessive CPU consumption from repeated initial window changes...

Linux Distros Unpatched Vulnerability : CVE-2026-94482

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. From 13.0.0 until 15.5.28 and 16.4.1, crafted requests targeting App Router applications...

OPENSUSE-SU-2026:22152-1 Security update for go1.26

This update for go1.26 fixes the following issues: Update to go 1.26.10 bsc1255111: - CVE-2026-78663: net/http: double flow control refund on HTTP/2 server streams bsc1284770. - CVE-2026-78669: net/http: excessive CPU consumption from repeated initial window changes bsc1284772. - CVE-2026-111943:...

SUSE-SU-2026:24359-1 Security update for go1.26

This update for go1.26 fixes the following issues: Update to go 1.26.10 bsc1255111: - CVE-2026-78663: net/http: double flow control refund on HTTP/2 server streams bsc1284770. - CVE-2026-78669: net/http: excessive CPU consumption from repeated initial window changes bsc1284772. - CVE-2026-111943:...

OPENSUSE-RU-2026:22137-1 Recommended update for cadvisor

This update for cadvisor fixes the following issues: Changes in cadvisor: - CVE-2026-78669, bsc1285500, cadvisor: golang.org/x/net/http2: excessive CPU consumption from repeated initial window changes...

BIT-GOLANG-2026-78667 Lack of limit on size of parsed Range headers in net/http

When parsing a Range header containing a large number of small ranges, FileServerFS, ServeContent, and ServeFileFS can consume an excessive amount of CPU...

CVE-2026-104150

The AdonisJS HTTP Server package (prior to versions 8.2.2 and 9.1.1 ) is vulnerable to Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity (CWE-400, CWE-1333). The router.matchers.slug() function contains a regular expression with adjacent greedy repetitions and overla...