Lucene search
+L

14 matches found

NVD
NVD
•added 2026/09/07 1:20 p.m.•10 views

CVE-2026-86430

league/commonmark versions before 2.9.1 contain multiple denial of service vulnerabilities in fenced code block detection, reference link label lookup, and emphasis delimiter processing that perform super-linear work on crafted input. Attackers can submit specially crafted Markdown with long...

8.7CVSS0.00493EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/07 1:20 p.m.•11 views

DEBIAN-CVE-2026-86430

league/commonmark versions before 2.9.1 contain multiple denial of service vulnerabilities in fenced code block detection, reference link label lookup, and emphasis delimiter processing that perform super-linear work on crafted input. Attackers can submit specially crafted Markdown with long...

8.7CVSS5.7AI score0.00493EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/07 12:53 p.m.•11 views

EUVD-2026-72388

league/commonmark versions before 2.9.1 contain multiple denial of service vulnerabilities in fenced code block detection, reference link label lookup, and emphasis delimiter processing that perform super-linear work on crafted input. Attackers can submit specially crafted Markdown with long...

8.7CVSS5.7AI score0.00493EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/07 12:53 p.m.•22 views

CVE-2026-86430

league/commonmark (a PHP Markdown parsing library) versions before 2.9.1 are affected by multiple denial-of-service vulnerabilities in three components: fenced code block detection , reference link label lookup , and emphasis delimiter processing . The root cause is super-linear work performed on...

8.7CVSS5.7AI score0.00493EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/09/07 12:53 p.m.•43 views

CVE-2026-86430 league/commonmark before 2.9.1 Denial of Service via parsing

league/commonmark versions before 2.9.1 contain multiple denial of service vulnerabilities in fenced code block detection, reference link label lookup, and emphasis delimiter processing that perform super-linear work on crafted input. Attackers can submit specially crafted Markdown with long...

8.7CVSS0.00493EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•21 views

PT-2026-86796

league/commonmark versions before 2.9.1 contain multiple denial of service vulnerabilities in fenced code block detection, reference link label lookup, and emphasis delimiter processing that perform super-linear work on crafted input. Attackers can submit specially crafted Markdown with long...

8.7CVSS5.7AI score0.00493EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/07 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2026-86430

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - league/commonmark versions before 2.9.1 contain multiple denial of service vulnerabilities in fenced code block detection, reference link label lookup, and...

8.7CVSS5.8AI score0.00493EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
•added 2026/08/15 2:05 a.m.•11 views

Super-linear CPU usage for unbounded input to csv.Sniffer.sniff()

...

2.4CVSS5.2AI score0.00119EPSS
SaveExploits0
OSV
OSV
•added 2026/08/10 2:17 p.m.•11 views

AZL-95619 CVE-2026-18503 affecting package python3 for versions less than 3.12.14-1

Attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU when applications pass unbounded input to csv.Sniffer.sniff...

2.4CVSS5.8AI score0.00119EPSS
SaveExploits0References1
OSV
OSV
•added 2026/01/28 8:16 p.m.•5 views

AZL-98715 CVE-2025-61728 affecting package golang 1.27.1-1

archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a maliciously constructed ZIP archive...

6.5CVSS5.7AI score0.00749EPSS
SaveExploits1References1
Packet Storm News
Packet Storm News
•added 2025/09/29 12:00 a.m.•13 views

Two-Dimensional XOR-Based Secret Sharing for Layered Multipath Communication

This paper introduces the first two-dimensional XOR-based secret sharing scheme for layered multipath communication networks. We present a construction that guarantees successful message recovery and perfect privacy when an adversary observes and disrupts any single path at each transmission laye...

6.8AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2025/04/10 12:00 a.m.•7 views

Multi-Party Private Set Operations from Predicative Zero-Sharing

Typical protocols in the multi-party private set operations MPSO setting enable m 2 parties to perform certain secure computation on the intersection or union of their private sets, realizing a very limited range of MPSO functionalities. Most works in this field focus on just one or two specific...

6.7AI score
SaveExploits0
Debian CVE
Debian CVE
•added 2013/04/25 11:00 p.m.•34 views

CVE-2013-0338

libxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service CPU and memory consumption via an XML file containing an entity declaration with long replacement text and many references to this entity, aka "internal entity expansion" with linear complexity...

4.3CVSS7.2AI score0.02856EPSS
SaveExploits0
UbuntuCve
UbuntuCve
•added 2013/02/26 12:00 a.m.•35 views

CVE-2013-0338

libxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service CPU and memory consumption via an XML file containing an entity declaration with long replacement text and many references to this entity, aka "internal entity expansion" with linear complexity...

4.3CVSS6.8AI score0.02856EPSS
SaveExploits0References4
Rows per page
Query Builder