Lucene search
+L

5934 matches found

EUVD
EUVD
•added 2026/03/18 9:50 p.m.•31 views

EUVD-2026-12992

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.21 and 8.6.45, an unauthenticated attacker can crash the Parse Server process by sending a single request with deeply nested query condition operators. This terminates the...

8.7CVSS5.7AI score0.00633EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/03/18 9:50 p.m.•10 views

CVE-2026-32944

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.21 and 8.6.45, an unauthenticated attacker can crash the Parse Server process by sending a single request with deeply nested query condition operators. This terminates the...

8.7CVSS5.7AI score0.00633EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2026/03/18 9:50 p.m.•46 views

CVE-2026-32944

Technical details sufficient to assess the vulnerability are not provided in the connected documents; monitor for updates.

8.7CVSS5.7AI score0.00633EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2026/03/18 9:50 p.m.•34 views

CVE-2026-32944 Parse Server crash via deeply nested query condition operators

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.21 and 8.6.45, an unauthenticated attacker can crash the Parse Server process by sending a single request with deeply nested query condition operators. This terminates the...

8.7CVSS0.00633EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/03/18 9:50 p.m.•11 views

CVE-2026-32944 Parse Server crash via deeply nested query condition operators

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.21 and 8.6.45, an unauthenticated attacker can crash the Parse Server process by sending a single request with deeply nested query condition operators. This terminates the...

8.7CVSS5.7AI score0.00633EPSS
SaveExploits0References3
osv-cve
osv-cve
•added 2026/03/18 9:50 p.m.•15 views

CVE-2026-32944 Parse Server crash via deeply nested query condition operators

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.21 and 8.6.45, an unauthenticated attacker can crash the Parse Server process by sending a single request with deeply nested query condition operators. This terminates the...

8.7CVSS5.8AI score
SaveExploits0References5
Snyk
Snyk
•added 2026/03/18 8:17 p.m.•12 views

Uncontrolled Recursion

Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to Uncontrolled Recursion via the JSONTaggedDecoder.decodeobj function in jsontags.py. An attacker can cause the application to crash by submittin...

5.1CVSS5.9AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/03/18 8:17 p.m.•27 views

Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoS

Summary JSONTaggedDecoder.decodeobj in nltk/jsontags.py calls itself recursively without any depth limit. A deeply nested JSON structure exceeding sys.getrecursionlimit default: 1000 will raise an unhandled RecursionError, crashing the Python process. Affected code File: nltk/jsontags.py, lines...

8.7CVSS7.5AI score0.00521EPSS
SaveExploits1References6Affected Software1
RedHat Linux
RedHat Linux
•added 2026/03/18 1:54 p.m.•30 views

protobuf: StackOverflow vulnerability in Protocol Buffers

A flaw was found in Protocol Buffers protobuf. This issue can allows an attacker to cause a StackOverflow via parsing untrusted Protocol Buffers data containing arbitrarily nested SGROUP tags, leading to unbounded recursion...

8.7CVSS6.9AI score0.02772EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2026/03/18 1:54 p.m.•25 views

com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

A nested data handling flaw was found in Jackson Core. When parsing particularly deeply nested data structures, a StackoverflowError can occur...

8.7CVSS6.7AI score0.00772EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/03/18 1:19 p.m.•29 views

protobuf: StackOverflow vulnerability in Protocol Buffers

A flaw was found in Protocol Buffers protobuf. This issue can allows an attacker to cause a StackOverflow via parsing untrusted Protocol Buffers data containing arbitrarily nested SGROUP tags, leading to unbounded recursion...

8.7CVSS6.9AI score0.02772EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2026/03/18 1:19 p.m.•18 views

com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

A nested data handling flaw was found in Jackson Core. When parsing particularly deeply nested data structures, a StackoverflowError can occur...

8.7CVSS6.7AI score0.00772EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/03/18 1:17 p.m.•23 views

com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

A nested data handling flaw was found in Jackson Core. When parsing particularly deeply nested data structures, a StackoverflowError can occur...

8.7CVSS6.7AI score0.00772EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/03/18 1:17 p.m.•15 views

com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

A nested data handling flaw was found in Jackson Core. When parsing particularly deeply nested data structures, a StackoverflowError can occur...

8.7CVSS6.7AI score0.00772EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/03/18 1:17 p.m.•29 views

protobuf: StackOverflow vulnerability in Protocol Buffers

A flaw was found in Protocol Buffers protobuf. This issue can allows an attacker to cause a StackOverflow via parsing untrusted Protocol Buffers data containing arbitrarily nested SGROUP tags, leading to unbounded recursion...

8.7CVSS6.9AI score0.02772EPSS
SaveExploits1References5
PyPA
PyPA
•added 2026/03/18 4:17 a.m.•26 views

PYSEC-2026-2263

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the pyasn1 library is vulnerable to a Denial of Service DoS attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing thousands of nested SEQUENC...

7.5CVSS6.5AI score0.00968EPSS
SaveExploits1References4Affected Software1
osv-debian
osv-debian
•added 2026/03/18 4:17 a.m.•33 views

DEBIAN-CVE-2026-30922

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the pyasn1 library is vulnerable to a Denial of Service DoS attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing thousands of nested SEQUENC...

7.5CVSS6.5AI score0.00968EPSS
SaveExploits1References1
osv-pysec
osv-pysec
•added 2026/03/18 4:17 a.m.•18 views

PYSEC-2026-2263

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the pyasn1 library is vulnerable to a Denial of Service DoS attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing thousands of nested SEQUENC...

7.5CVSS6.5AI score0.00968EPSS
SaveExploits1References4
NVD
NVD
•added 2026/03/18 4:17 a.m.•15 views

CVE-2026-30922

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the pyasn1 library is vulnerable to a Denial of Service DoS attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing thousands of nested SEQUENC...

7.5CVSS0.00968EPSS
SaveExploits1References44
osv-ubuntu
osv-ubuntu
•added 2026/03/18 4:17 a.m.•20 views

UBUNTU-CVE-2026-30922

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the pyasn1 library is vulnerable to a Denial of Service DoS attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing thousands of nested SEQUENC...

7.5CVSS6.5AI score0.00968EPSS
SaveExploits1References5
Rows per page
Query Builder