64 matches found
CVE-2025-61301: Uncontrolled Resource Consumption
Denial-of-analysis in reporting/mongodb.py and reporting/jsondump.py in CAPEv2 commit 52e4b43, on 2025-05-17 allows attackers who can submit samples to cause incomplete or missing behavioral analysis reports by generating deeply nested or oversized behavior data that trigger MongoDB BSON limits o...
CVE-2025-61301
Denial-of-analysis in reporting/mongodb.py and reporting/jsondump.py in CAPEv2 commit 52e4b43, on 2025-05-17 allows attackers who can submit samples to cause incomplete or missing behavioral analysis reports by generating deeply nested or oversized behavior data that trigger MongoDB BSON limits o...
Exploit for CVE-2025-61301
CVE-2025-61301 - CAPEv2: Denial-Of-Analysis via Recursive Proc...
EUVD-2024-0130
Malicious code in bioql PyPI...
CVE-2024-27454
orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents...
OPENSUSE-SU-2024:13735-1 python310-orjson-3.9.15-1.1 on GA media
These are all security issues fixed in the python310-orjson-3.9.15-1.1 package on the GA media of openSUSE Tumbleweed...
SUSE CVE-2024-27454
orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents...
Denial Of Service (DoS)
orjson is vulnerable to Denial Of Service. The vulnerability is due to the lack of recursion depth limits during parsing, which allows attackers to potentially cause denial of service by supplying deeply nested JSON documents...
orjson does not limit recursion for deeply nested JSON documents
orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents...
GHSA-PWR2-4V36-6QPR vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-orjson...
GHSA-PWR2-4V36-6QPR orjson does not limit recursion for deeply nested JSON documents
orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents...
GHSA-PWR2-4V36-6QPR vulnerabilities
Vulnerabilities for packages: py3-orjson, kubeflow-pipelines-visualization-server...
Design/Logic Flaw
orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents...
PYSEC-2024-40
orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents...
DEBIAN-CVE-2024-27454
orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents...
PYSEC-2024-40
orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents...
CVE-2024-27454 vulnerabilities
Vulnerabilities for packages: py3-orjson, kubeflow-pipelines-visualization-server...
CVE-2024-27454 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-orjson...
CVE-2024-27454
The CVE-2024-27454 issue affects the orjson project: orjson before 3.9.15 does not limit recursion for deeply nested JSON documents. Affected component is the orjson loader/parse path (orjson.loads) with potential recursion explosion. The vulnerability is reflected in CVSS 3.1 as HIGH impact to a...