CVE-2026-110682

A flaw was found in perl-cpanel-json-xs. A remote attacker capable of controlling network read boundaries can manipulate the values and total count of decoded messages. Because the incremental parser immediately processes unquoted top-level values such as numbers or booleans without waiting for...

Allocation of Resources Without Limits or Throttling

Overview org.webjars.npm:thrift is a lightweight, language-independent software stack with an associated code generation mechanism for point-to-point RPC. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the TBufferedTransport.receiv...