CVE-2026-14257 brace-expansion DoS via unbounded expansion length causing an out-of-memory process crash

brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expand function limits the number of results with a max option default 100,000 but does not bound the length of each result string. By chaining multiple brace groups, an attacker keeps the result count und...

Samba LDAP Null Pointer DoS

The vulnerability in the LDAP protocol-based network interaction software from Samba arises from the assignment of a null pointer when reaching the maximum search result size. This information is cached in a memory object with a maximum size of 256 MB. Exploiting this vulnerability allows an...