8724 matches found
CVE-2026-13056
Using expressions that generate large arrays it is possible to craft a query that creates very large intermediate objects in memory, causing the server to crash with OOM error...
Important: Red Hat Security Advisory: Red Hat Enterprise Linux AI 3.3.5
Updated Red Hat Enterprise Linux AI 3.3.5 container images are now available. Red Hat® Enterprise Linux® AI is a foundation model platform to seamlessly develop, test, and run Granite family large language models LLMs for enterprise applications. This update provides the latest Red Hat Enterprise...
CVE-2026-13056 A user with read access can cause a DoS by executing a specifically crafted query to consume a large amount of RAM
Using expressions that generate large arrays it is possible to craft a query that creates very large intermediate objects in memory, causing the server to crash with OOM error...
A user with read access can cause a DoS by executing a specifically crafted query to consume a large amount of RAM
Using expressions that generate large arrays it is possible to craft a query that creates very large intermediate objects in memory, causing the server to crash with OOM error...
CVE-2026-13056 A user with read access can cause a DoS by executing a specifically crafted query to consume a large amount of RAM
Using expressions that generate large arrays it is possible to craft a query that creates very large intermediate objects in memory, causing the server to crash with OOM error...
CVE-2026-13056
Using expressions that generate large arrays it is possible to craft a query that creates very large intermediate objects in memory, causing the server to crash with OOM error...
EUVD-2026-47779
Using expressions that generate large arrays it is possible to craft a query that creates very large intermediate objects in memory, causing the server to crash with OOM error...
CVE-2026-13056 A user with read access can cause a DoS by executing a specifically crafted query to consume a large amount of RAM
Using expressions that generate large arrays it is possible to craft a query that creates very large intermediate objects in memory, causing the server to crash with OOM error...
EUVD-2026-47759
Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload...
SUSE CVE-2026-56816
Netty is a network application framework for development of protocol servers and clients. Prior to 4.2.16.Final, Netty's Http3FrameCodec buffers incoming data for HTTP/3 reserved frame types up to the wire-specified payload length without limits; decodeFrame trusts payLoadLength, allowing an...
Important: Red Hat Security Advisory: Red Hat Enterprise Linux AI 3.3.5
Updated Red Hat Enterprise Linux AI 3.3.5 container images are now available. Red Hat® Enterprise Linux® AI is a foundation model platform to seamlessly develop, test, and run Granite family large language models LLMs for enterprise applications. This update provides the latest Red Hat Enterprise...
CVE-2026-11605
The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records in an answer, even if they are not strictly needed. A query to an authoritative server/zone which returns many valid but superfluous RRSIG records causes the validator to...
CVE-2026-11605 Unnecessary validation of DNSSEC signed records
The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records in an answer, even if they are not strictly needed. A query to an authoritative server/zone which returns many valid but superfluous RRSIG records causes the validator to...
EUVD-2026-47633
n8n versions before 1.123.64 fail to properly mask custom HTTP header credentials in LLM sub-node execution data, writing plaintext API keys and secrets to workflow execution records. Authenticated users with access to execution data can read exposed header values and credentials that persist in...
CVE-2026-65589 n8n before 1.123.64 Credential Exposure via LLM Node Execution Data
n8n versions before 1.123.64 fail to properly mask custom HTTP header credentials in LLM sub-node execution data, writing plaintext API keys and secrets to workflow execution records. Authenticated users with access to execution data can read exposed header values and credentials that persist in...
CVE-2026-65589
CVE-2026-65589 affects n8n versions before 1.123.64. The vulnerability arises because custom HTTP header credentials used by the LLM sub-node execution data are not masked, causing plaintext API keys and secrets to be written to workflow execution records. Authenticated users with access to execu...
CVE-2026-65589
n8n versions before 1.123.64 fail to properly mask custom HTTP header credentials in LLM sub-node execution data, writing plaintext API keys and secrets to workflow execution records. Authenticated users with access to execution data can read exposed header values and credentials that persist in...
CVE-2026-65589 n8n before 1.123.64 Credential Exposure via LLM Node Execution Data
n8n versions before 1.123.64 fail to properly mask custom HTTP header credentials in LLM sub-node execution data, writing plaintext API keys and secrets to workflow execution records. Authenticated users with access to execution data can read exposed header values and credentials that persist in...
PT-2026-63460
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A user with read access can cause a Denial of Service DoS by executing a specifically crafted query. By using expressions that generate large arrays, the system...
