Lucene search
K

16673 matches found

Tenable Nessus
Tenable Nessus
added 2026/02/21 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-27024

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop...

6.9CVSS5.8AI score0.00006EPSS
Exploits0References3
OSV
OSV
added 2026/02/20 10:16 p.m.1 views

DEBIAN-CVE-2026-27024

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires accessing the children of a TreeObject, for example as part of outlines. This vulnerability is fixed in 6.7.1...

6.9CVSS5.3AI score0.00006EPSS
Exploits0References1
NVD
NVD
added 2026/02/20 10:16 p.m.3 views

CVE-2026-27024

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires accessing the children of a TreeObject, for example as part of outlines. This vulnerability is fixed in 6.7.1...

6.9CVSS0.00006EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2026/02/20 10:16 p.m.0 views

CVE-2026-27024

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires accessing the children of a TreeObject, for example as part of outlines. This vulnerability is fixed in 6.7.1...

6.9CVSS5.8AI score0.00006EPSS
Exploits0References5
OSV
OSV
added 2026/02/20 10:16 p.m.0 views

UBUNTU-CVE-2026-27024

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires accessing the children of a TreeObject, for example as part of outlines. This vulnerability is fixed in 6.7.1...

6.9CVSS5.8AI score0.00006EPSS
Exploits0References6
CVE
CVE
added 2026/02/20 9:10 p.m.15 views

CVE-2026-27024

CVE-2026-27024 affects the pypdf (pypdf2) library prior to 6.7.1. The vulnerability allows an attacker to craft a PDF that causes an infinite loop when processing TreeObject children (e.g., in outlines), resulting in a DoS. The issue is fixed in version 6.7.1; multiple connected advisories (openS...

6.9CVSS5.5AI score0.00006EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2026/02/20 9:10 p.m.20 views

CVE-2026-27024 pypdf has a possible infinite loop when processing TreeObject

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires accessing the children of a TreeObject, for example as part of outlines. This vulnerability is fixed in 6.7.1...

6.9CVSS0.00006EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/02/20 9:10 p.m.0 views

CVE-2026-27024 pypdf has a possible infinite loop when processing TreeObject

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires accessing the children of a TreeObject, for example as part of outlines. This vulnerability is fixed in 6.7.1...

6.9CVSS5.4AI score0.00006EPSS
Exploits0References4
OSV
OSV
added 2026/02/20 9:10 p.m.4 views

CVE-2026-27024 pypdf has a possible infinite loop when processing TreeObject

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires accessing the children of a TreeObject, for example as part of outlines. This vulnerability is fixed in 6.7.1...

6.9CVSS5.5AI score0.00006EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2026/02/20 9:10 p.m.4 views

CVE-2026-27024

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires accessing the children of a TreeObject, for example as part of outlines. This vulnerability is fixed in 6.7.1...

6.9CVSS5.3AI score0.00006EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2026/02/20 10:20 a.m.2 views

CVE-2026-2739

A flaw was found in bn.js. When calling the maskn0 function on a BN instance, there is potential for this action to corrupt the internal state of the library, causing critical methods such as toString and divmod to enter an infinite loop. The primary consequence is a Denial of Service DoS, where...

6.9CVSS5.6AI score0.00022EPSS
Exploits0References9
Github Security Blog
Github Security Blog
added 2026/02/20 6:30 a.m.12 views

bn.js affected by an infinite loop

This affects versions of the package bn.js before 4.12.3 and 5.2.3. Calling maskn0 on any BN instance corrupts the internal state, causing toString, divmod, and other methods to enter an infinite loop, hanging the process indefinitely...

6.9CVSS5.3AI score0.00022EPSS
Exploits0References10Affected Software1
OSV
OSV
added 2026/02/20 6:30 a.m.1 views

GHSA-378V-28HJ-76WF bn.js affected by an infinite loop

This affects versions of the package bn.js before 4.12.3 and 5.2.3. Calling maskn0 on any BN instance corrupts the internal state, causing toString, divmod, and other methods to enter an infinite loop, hanging the process indefinitely...

6.9CVSS5.9AI score0.00022EPSS
Exploits0References10
NVD
NVD
added 2026/02/20 5:17 a.m.5 views

CVE-2026-2739

This affects versions of the package bn.js before 5.2.3. Calling maskn0 on any BN instance corrupts the internal state, causing toString, divmod, and other methods to enter an infinite loop, hanging the process indefinitely...

6.9CVSS0.00022EPSS
Exploits0References6
OSV
OSV
added 2026/02/20 5:17 a.m.3 views

CVE-2026-2739

This affects versions of the package bn.js before 5.2.3. Calling maskn0 on any BN instance corrupts the internal state, causing toString, divmod, and other methods to enter an infinite loop, hanging the process indefinitely...

6.9CVSS5.5AI score
Exploits0References6
OSV
OSV
added 2026/02/20 5:17 a.m.2 views

UBUNTU-CVE-2026-2739

This affects versions of the package bn.js before 5.2.3. Calling maskn0 on any BN instance corrupts the internal state, causing toString, divmod, and other methods to enter an infinite loop, hanging the process indefinitely...

6.9CVSS5.8AI score0.00022EPSS
Exploits0References8
ATTACKERKB
ATTACKERKB
added 2026/02/20 5:0 a.m.5 views

CVE-2026-2739

This affects versions of the package bn.js before 5.2.3. Calling maskn0 on any BN instance corrupts the internal state, causing toString, divmod, and other methods to enter an infinite loop, hanging the process indefinitely...

6.9CVSS5.5AI score0.00022EPSS
Exploits0References7
Cvelist
Cvelist
added 2026/02/20 5:0 a.m.27 views

CVE-2026-2739

This affects versions of the package bn.js before 5.2.3. Calling maskn0 on any BN instance corrupts the internal state, causing toString, divmod, and other methods to enter an infinite loop, hanging the process indefinitely...

6.9CVSS0.00022EPSS
Exploits0References6
CVE
CVE
added 2026/02/20 5:0 a.m.20 views

CVE-2026-2739

CVE-2026-2739 affects bn.js versions before 5.2.3. Calling maskn(0) on any BN instance corrupts internal state, causing toString(), divmod(), and related methods to enter an infinite loop and hang the process. The Snyk/NVD/CVE listings confirm the impact and provide examples; the recommended reme...

6.9CVSS5.5AI score0.00022EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2026/02/20 5:0 a.m.4 views

CVE-2026-2739

This affects versions of the package bn.js before 5.2.3. Calling maskn0 on any BN instance corrupts the internal state, causing toString, divmod, and other methods to enter an infinite loop, hanging the process indefinitely...

6.9CVSS5.2AI score0.00022EPSS
Exploits0
Rows per page
Query Builder