7 matches found
Zoo Design Studio: Memory-corruption in memory handling of lib-kcl
A race condition in kcl-lib can result in a use-after-free when accessing environments concurrently. During Vec reallocation, the previous buffer containing Box pointers is freed and replaced. A concurrent getenv operation that has already loaded a pointer to the old buffer may subsequently index...
Zoo Design Studio: Recursive KCL parsing is vulnerable to denial-of-service
Impact Feeding a KCL program that wraps an expression in deep, unnecessary parentheses triggers the parser’s recursive expression - unnecessarilybracketed - expression path. With enough nesting, the call stack grows until it exceeds the process stack limit, causing a stack overflow...
GHSA-JGVR-6X5W-HX5W Zoo Design Studio: Recursive KCL parsing is vulnerable to denial-of-service
Impact Feeding a KCL program that wraps an expression in deep, unnecessary parentheses triggers the parser’s recursive expression - unnecessarilybracketed - expression path. With enough nesting, the call stack grows until it exceeds the process stack limit, causing a stack overflow...
Malicious code in watch-history-kcl (npm)
The package watch-history-kcl was found to contain malicious code...
MAL-2025-38803 Malicious code in watch-history-kcl (npm)
The package watch-history-kcl was found to contain malicious code...
triangle.mth.kcl.ac.uk Cross Site Scripting vulnerability OBB-2952474
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
triangle.mth.kcl.ac.uk Cross Site Scripting vulnerability OBB-2309489
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...