659 matches found
brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation
A flaw was found in the brace-expansion library. The expand function does not apply maxLength when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is...
CVE-2026-116780
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, switcheventexpandheaderscheck advanced beyond its heap copy when a positive offset in...
Security Bulletin: Security Vulnerabilities have been found in IBM Sovereign Core
Summary Security Vulnerabilities have been addressed in IBM Sovereign Core Vulnerability Details CVEID:CVE-2026-13149 DESCRIPTION: brace-expansion through 5.0.6 is vulnerable to denial of service. The expand function exhibits exponential-time complexity in the number of consecutive non-expanding ...
Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in brace-expansion(CVE-2026-102276, CVE-2026-102277, CVE-2026-102278)
Summary IBM Db2 Developer Extension is affected by vulnerability in brace-expansionCVE-2026-102276, CVE-2026-102277, CVE-2026-102278 Vulnerability Details CVEID:CVE-2026-102276 DESCRIPTION: The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to...
Important: nodejs24
Issue Overview: The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted brace patterns can exhaust the native stack in parseCommaParts because parseCommaParts recursively processes the remainder once per bra...
CVE-2026-108073
The SureCart WordPress plugin, in versions prior to 4.9.5 , is vulnerable to an unauthenticated private catalog data disclosure. The root cause is that the plugin fails to restrict related objects or strip private fields when an anonymous visitor reads a single upsell funnel via the REST API . Th...
CVE-2026-108073 SureCart < 4.9.5 - Unauthenticated Private Catalog Data Disclosure via 'expand' Parameter
The SureCart WordPress plugin before 4.9.5 does not restrict which related objects an anonymous visitor may include when reading a single upsell funnel through its REST API, nor strip private fields from those objects, allowing unauthenticated users to read merchant-private catalog data such as...
CVE-2026-108073 SureCart < 4.9.5 - Unauthenticated Private Catalog Data Disclosure via 'expand' Parameter
The SureCart WordPress plugin before 4.9.5 does not restrict which related objects an anonymous visitor may include when reading a single upsell funnel through its REST API, nor strip private fields from those objects, allowing unauthenticated users to read merchant-private catalog data such as...
PT-2026-120609
WarehousePG WHPG 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability CWE-862 in the built-in cluster expansion functions gp expand lock catalog and gp expand bump version. Any authenticated database role can run them, and neither checks privileges. ...
GO-2026-6726 Vikunja: API token scopes bypassed via task expand parameter (comments, reactions, time entry counts) in code.vikunja.io/api
Vikunja: API token scopes bypassed via task expand parameter comments, reactions, time entry counts in code.vikunja.io/api. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positi...
PT-2026-118041
Vikunja: API token scopes bypassed via task expand parameter comments, reactions, time entry counts in code.vikunja.io/api. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positi...
Astra Linux – Vulnerability in Nasm
In Netwide Assembler NASM 2.15rc0, a heap-based buffer over-read occurs due to a malicious .asm file during the call to settextfree from expandonesmacro in asm/preproc.c...
CVE-2026-76665
A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buffer overflow...
CVE-2026-76666
A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read...
CVE-2026-76667
A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read...
EUVD-2026-101828
A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read...
CVE-2026-76667 HPE NonStop EXPAND - Out-of-Bounds memory read vulnerability
A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read...
CVE-2026-76667 HPE NonStop EXPAND - Out-of-Bounds memory read vulnerability
A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read...
CVE-2026-76667
A security vulnerability in HPE NonStop EXPAND allows for an out-of-bounds memory read . This flaw could lead to memory corruption , buffer overflows , or stack overflows on the local system. Vulnerable software includes EXPAND T9057 (versions T9057L02^AIG and earlier). HPE has released fixes; us...