CVE-2026-21869

CVE-2026-21869 affects llama.cpp prior to commit 55d4206c9, where the server’s completion endpoints parse the non‑negative constraint for the JSON input parameter n_discard without validation. A negative n_discard can cause a reversed range/offset in llama_memory_seq_rm/add, leading to out‑of‑bou...

CVE-2026-21869

llama.cpp is an inference of several LLM models in C/C++. In commits 55d4206c8 and prior, the ndiscard parameter is parsed directly from JSON input in the llama.cpp server's completion endpoints without validation to ensure it's non-negative. When a negative value is supplied and the context fill...

defacemeter

DefaceMeter DefaceMeter is a small, static, browser-based pro...

LibreChat 安全漏洞

LibreChat is an enhanced ChatGPT clone by Danny Avila Personal Developer. A security vulnerability exists in LibreChat 0.8.0 and prior versions that stems from insufficient validation of JSON request input, which may result in unintended prompt modifications...

EUVD-2025-199979

Uncontrolled recursion in the json2pb component in Apache bRPC version 1.15.0 on all platforms allows remote attackers to make the server crash via sending deep recursive json data. Root Cause: The bRPC json2pb component uses rapidjson to parse json data from the network. The rapidjson parser use...

EUVD-2020-30640

Malware in sbrugna...

EUVD-2021-13493

Malware in sbrugna...

EUVD-2018-8788

Malware in sbrugna...

EUVD-2024-44044

Malicious code in bioql PyPI...

EUVD-2022-1166

Malicious code in bioql PyPI...

EUVD-2025-1819

Malicious code in bioql PyPI...

EUVD-2025-13642

Malicious code in bioql PyPI...

EUVD-2025-29233

Malicious code in bioql PyPI...

EUVD-2022-3656

Malicious code in bioql PyPI...

EUVD-2025-19228

Malicious code in bioql PyPI...

Fedora 42 : perl-Cpanel-JSON-XS (2025-f4f4dae8f2)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-f4f4dae8f2 advisory. This update fixes an issue where a specially-crafted JSON input could cause an integer overflow leading to a crash in the program parsing the JSON...

CVE-2025-59398

The OCPP implementation in libocpp before 0.26.2 allows a denial of service EVerest crash via JSON input larger than 255 characters, because a CiString object is created with StringTooLarge set to Throw...

Missing Report of Error Condition

Overview Affected versions of this package are vulnerable to Missing Report of Error Condition via the ChargePoint::messagecallback function. An attacker can cause a crash by submitting JSON input exceeding 255 characters, which triggers an exception due to the StringTooLarge parameter being set ...

libocpp 安全漏洞

libocpp is an open charge point protocol open-sourced by EVerest. A security vulnerability exists in versions prior to libocpp 0.26.2, which stems from a crash caused by the creation of a CiString object when processing JSON input of more than 255 characters, potentially resulting in a denial of...

PT-2025-37737

Name of the Vulnerable Software and Affected Versions libocpp versions prior to 0.26.2 Description The OCPP implementation in libocpp is susceptible to a denial of service EVerest crash when processing JSON input exceeding 255 characters. This occurs because a CiString object is created with...