160860 matches found
Security Bulletin:React Router SSR Error Handling Vulnerability in Versions 6.4.0 to 7.17.0
Summary React Router is a router for React. In versions 6.4.0 through 7.17.0, if application code was written in a way that allows attacker-supplied input to overwrite certain aspects of errors caught by the SSR process, then it was possible for an attacker to trigger unexpected constructor...
Security Bulletin:body-parser Limit Validation Vulnerability in Versions Prior to 1.20.6 and 2.3.0
Summary Impact: In body-parser versions prior to 1.20.6 1.x line and 2.3.0 2.x line, when the parser is configured with an invalid limit option value such as an unparseable string or NaN, bytes.parse returns null and the request body size check is silently skipped. Applications that rely on limit...
Security Bulletin:Jackson-databind Vulnerability: Record Constructor Bypass via PropertyNamingStrategy
Summary jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.15.0 until 2.18.8, 2.21.4, and 3.1.4, Java Records using a PropertyNamingStrategy can bypass @JsonIgnore because POJOPropertiesCollector.removeUnwantedIgnorals record...
Exploit for CVE-2026-102253
CVE-2026-102253-POC DOS infinite-loop Vulnerability POC Su...
Security Bulletin:Erlang OTP SSH Infinite Loop Vulnerability: Unauthorized Data Handling and System Lock-Up
Summary Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Erlang OTP ssh sshsftpd module allows an authenticated SFTP user to render an SFTP channel permanently unresponsive. The handledata/4 function in sshsftpd contains a catch-all clause that accepts channel data of any typ...
Security Bulletin:WebOb Open Redirect Vulnerability in HTTP Location Header Normalization
Summary WebOb provides objects for HTTP requests and responses. Prior to 1.8.10, the normalization of the HTTP Location header during a redirect is vulnerable to an open redirect: WebOb joins the redirect target to the request URI using Python's urljoin, and since Python 3.10 the underlying...
Security Bulletin:UltraJSON Malformed UTF-8 Byte Sequence Vulnerability
Summary UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.13.0, ujson.dumps or ujson.dump or ujson.encode have a rejectbytes=False option. When set, they may accept malformed or truncated UTF-8 byte sequences, silently rewriting them into...
Security Bulletin:Exposure of Sensitive Information to Unauthorized Actor in Erlang OTP ssh_sftpd Module
Summary Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Erlang OTP ssh sshsftpd module allows File Discovery. The SSHFXPREADLINK handler in sshsftpd sends the raw result of file:readlink/2 to the client without calling chrootfilename/2 to strip the backend root prefix...
GHSA-RG9R-HR7G-5GC2 Backstage: Improper authorization enforcement for TechDocs static content
Impact An authenticated user with access to one TechDocs documentation site could craft a URL able to read documentation belonging to a different entity. This only affects deployments using the external TechDocs builder with an external storage provider S3, GCS, etc. and the permission framework...
Backstage: Improper authorization enforcement for TechDocs static content
Impact An authenticated user with access to one TechDocs documentation site could craft a URL able to read documentation belonging to a different entity. This only affects deployments using the external TechDocs builder with an external storage provider S3, GCS, etc. and the permission framework...
Security Bulletin:Erlang OTP ssh (ssh_sftpd) File Discovery: Sensitive Information Exposure
Summary Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Erlang OTP ssh sshsftpd module allows File Discovery. The SSHFXPREADLINK handler in sshsftpd sends the raw result of file:readlink/2 to the client without calling chrootfilename/2 to strip the backend root prefix...
Security Bulletin:Erlang OTP ssh (ssh_sftpd) File Discovery: Sensitive Information Exposure
Summary Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Erlang OTP ssh sshsftpd module allows File Discovery. The SSHFXPREADLINK handler in sshsftpd sends the raw result of file:readlink/2 to the client without calling chrootfilename/2 to strip the backend root prefix...
Security Bulletin:Netty Versions 4.2.0.Final-4.2.16.Final, 4.1.136.Final: TLS Hostname Verification Disabled
Summary Netty io.netty:netty-handler versions from 4.2.0.Final through 4.2.16.Final and versions through 4.1.136.Final disable TLS hostname verification on the SslProvider.OPENSSL client path when a plain non-extended X509TrustManager is used and Unsafe-based trust-manager wrapping is unavailable...
Security Bulletin:Inconsistent Enforcement of MaxNumberLength in Jackson-Core Async JSON Parser, Leading to DoS
Summary The non-blocking asynchronous JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in StreamReadConstraints default: 1000 characters. An attacker able to submit JSON to an application that uses the async parser API can supply a number token of arbitrary...
Security Bulletin:Bouncy Castle Java OER Parser Recursion Issue on IEEE 1609.2 Schema
Summary In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcutil-fips 2.0.7 2.0.X series and 2.1.7 2.1.X series...
Security Bulletin:Netty Bzip2Decoder Handler Vulnerability: Denial of Service via Malformed bzip2 Stream
Summary Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the Bzip2Decoder handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a malformed bzip2 stream that permanently captures the...
Security Bulletin:Netty Bzip2Decoder Handler Vulnerability: Denial of Service via Malformed bzip2 Stream
Summary Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the Bzip2Decoder handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a malformed bzip2 stream that permanently captures the...
Security Bulletin:SSL/TLS Client Cipher Suite Selection Flaw Allows On-Path Attackers to Bypass Certificate Verification
Summary The Erlang/OTP ssl TLS 1.2 and earlier and DTLS client does not verify that the cipher suite selected by the server in ServerHello was among the suites offered by the client in ClientHello. The client-side tlshandshake:hello/5 handler validates the negotiated protocol version and the...
CVE-2026-106572
A flaw was found in ImageMagick. A remote attacker can trigger a Denial of Service DoS by submitting a specially crafted Continuous Acquisition and Life-cycle Support CALS raster image for processing. Due to a missing recursion depth limit in the CALS decoder, parsing the malicious file exhausts...
Security Bulletin:Axios Node.js HTTP Adapter Proxy Credential Leakage Vulnerability in 0.32.0 and 1.16.0
Summary Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios' Node.js HTTP adapter can leak proxy credentials to a redirect target in affected versions. When a request is sent through an authenticated proxy, Axios may add a Proxy-Authorization header...