165034 matches found
Security Bulletin:React Router Open Redirect and XSS Vulnerability Fixed in 7.13.0
Summary React Router is a router for React. In versions 6.30.2 through 6.30.4 and 7.9.6 through 7.12.0, applications that allow open redirects are vulnerable to XSS. An attacker could craft a malicious link that redirects users to an unexpected external site or that exploits an XSS vector.This...
Security Bulletin:RSCT 3.0 Improper Input Validation Denial of Service Vulnerability
Summary IBM Reliable Scalable Cluster Technology RSCT 3.0 could allow a remote attacker to cause a denial of service by sending a specially crafted request due improper input validation. Vulnerability Details CVEID:CVE-2026-14514 DESCRIPTION: IBM Reliable Scalable Cluster Technology RSCT 3.0 coul...
Security Bulletin:React Router SSR Error Handling Vulnerability in Versions 6.4.0 to 7.17.0
Summary React Router is a router for React. In versions 6.4.0 through 7.17.0, if application code was written in a way that allows attacker-supplied input to overwrite certain aspects of errors caught by the SSR process, then it was possible for an attacker to trigger unexpected constructor...
Security Bulletin:body-parser Limit Validation Vulnerability in Versions Prior to 1.20.6 and 2.3.0
Summary Impact: In body-parser versions prior to 1.20.6 1.x line and 2.3.0 2.x line, when the parser is configured with an invalid limit option value such as an unparseable string or NaN, bytes.parse returns null and the request body size check is silently skipped. Applications that rely on limit...
Security Bulletin:Jackson-databind Vulnerability: Record Constructor Bypass via PropertyNamingStrategy
Summary jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.15.0 until 2.18.8, 2.21.4, and 3.1.4, Java Records using a PropertyNamingStrategy can bypass @JsonIgnore because POJOPropertiesCollector.removeUnwantedIgnorals record...
Exploit for CVE-2026-102253
CVE-2026-102253-POC DOS infinite-loop Vulnerability POC Su...
Security Bulletin:Erlang OTP SSH Infinite Loop Vulnerability: Unauthorized Data Handling and System Lock-Up
Summary Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Erlang OTP ssh sshsftpd module allows an authenticated SFTP user to render an SFTP channel permanently unresponsive. The handledata/4 function in sshsftpd contains a catch-all clause that accepts channel data of any typ...
Security Bulletin:WebOb Open Redirect Vulnerability in HTTP Location Header Normalization
Summary WebOb provides objects for HTTP requests and responses. Prior to 1.8.10, the normalization of the HTTP Location header during a redirect is vulnerable to an open redirect: WebOb joins the redirect target to the request URI using Python's urljoin, and since Python 3.10 the underlying...
Security Bulletin:UltraJSON Malformed UTF-8 Byte Sequence Vulnerability
Summary UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.13.0, ujson.dumps or ujson.dump or ujson.encode have a rejectbytes=False option. When set, they may accept malformed or truncated UTF-8 byte sequences, silently rewriting them into...
Security Bulletin:Exposure of Sensitive Information to Unauthorized Actor in Erlang OTP ssh_sftpd Module
Summary Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Erlang OTP ssh sshsftpd module allows File Discovery. The SSHFXPREADLINK handler in sshsftpd sends the raw result of file:readlink/2 to the client without calling chrootfilename/2 to strip the backend root prefix...
Backstage: Improper authorization enforcement for TechDocs static content
Impact An authenticated user with access to one TechDocs documentation site could craft a URL able to read documentation belonging to a different entity. This only affects deployments using the external TechDocs builder with an external storage provider S3, GCS, etc. and the permission framework...
GHSA-RG9R-HR7G-5GC2 Backstage: Improper authorization enforcement for TechDocs static content
Impact An authenticated user with access to one TechDocs documentation site could craft a URL able to read documentation belonging to a different entity. This only affects deployments using the external TechDocs builder with an external storage provider S3, GCS, etc. and the permission framework...
Security Bulletin:Erlang OTP ssh (ssh_sftpd) File Discovery: Sensitive Information Exposure
Summary Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Erlang OTP ssh sshsftpd module allows File Discovery. The SSHFXPREADLINK handler in sshsftpd sends the raw result of file:readlink/2 to the client without calling chrootfilename/2 to strip the backend root prefix...
Security Bulletin:Erlang OTP ssh (ssh_sftpd) File Discovery: Sensitive Information Exposure
Summary Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Erlang OTP ssh sshsftpd module allows File Discovery. The SSHFXPREADLINK handler in sshsftpd sends the raw result of file:readlink/2 to the client without calling chrootfilename/2 to strip the backend root prefix...
Security Bulletin:Netty Versions 4.2.0.Final-4.2.16.Final, 4.1.136.Final: TLS Hostname Verification Disabled
Summary Netty io.netty:netty-handler versions from 4.2.0.Final through 4.2.16.Final and versions through 4.1.136.Final disable TLS hostname verification on the SslProvider.OPENSSL client path when a plain non-extended X509TrustManager is used and Unsafe-based trust-manager wrapping is unavailable...
Security Bulletin:Inconsistent Enforcement of MaxNumberLength in Jackson-Core Async JSON Parser, Leading to DoS
Summary The non-blocking asynchronous JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in StreamReadConstraints default: 1000 characters. An attacker able to submit JSON to an application that uses the async parser API can supply a number token of arbitrary...
Security Bulletin:Bouncy Castle Java OER Parser Recursion Issue on IEEE 1609.2 Schema
Summary In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcutil-fips 2.0.7 2.0.X series and 2.1.7 2.1.X series...
Security Bulletin:Netty Bzip2Decoder Handler Vulnerability: Denial of Service via Malformed bzip2 Stream
Summary Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the Bzip2Decoder handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a malformed bzip2 stream that permanently captures the...
Security Bulletin:Netty Bzip2Decoder Handler Vulnerability: Denial of Service via Malformed bzip2 Stream
Summary Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the Bzip2Decoder handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a malformed bzip2 stream that permanently captures the...
Security Bulletin:SSL/TLS Client Cipher Suite Selection Flaw Allows On-Path Attackers to Bypass Certificate Verification
Summary The Erlang/OTP ssl TLS 1.2 and earlier and DTLS client does not verify that the cipher suite selected by the server in ServerHello was among the suites offered by the client in ClientHello. The client-side tlshandshake:hello/5 handler validates the negotiated protocol version and the...