31884 matches found
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the TIFF image parsing process due to missing validation of the IFD offset in the image header before memory allocation. An attacker can cause excessive memory consumption or a...
SUSE CVE-2026-14758
A vulnerability was identified in radareorg radare2 up to 6.1.6. This vulnerability affects the function cmdanalopcode of the file libr/core/cmdanal.inc.c of the component hexpairs Parser. Such manipulation leads to integer overflow. The attack needs to be performed locally. The exploit is public...
SUSE CVE-2026-58384
A flaw was found in GIMP's PSD parser. An integer overflow in readRLEchannel can cause an undersized heap allocation for the RLE row-length table, after which subsequent per-row writes corrupt heap memory. This could lead to memory corruption, potentially resulting in denial of service or arbitra...
PYSEC-2026-1444 H2O Vulnerable to Denial of Service (DoS) and File Write
In h2oai/h2o-3 version 3.46.0.1, the runtool command exposes classes in the water.tools package through the ast parser. This includes the XGBoostLibExtractTool class, which can be exploited to shut down the server and write large files to arbitrary directories, leading to a denial of service...
PYSEC-2026-1993 unstructured XML External Entity (XXE)
unstructured v.0.14.2 and before is vulnerable to XML External Entity XXE via the XMLParser...
unstructured XML External Entity (XXE)
unstructured v.0.14.2 and before is vulnerable to XML External Entity XXE via the XMLParser...
PYSEC-2026-1944 Litestar allows unbounded resource consumption (DoS vulnerability)
Summary Litestar offers multiple methods to return a parsed representation of the request body, as well as extractors that rely on those parsers to map request content to structured data types. Multiple of those parsers do not have size limits when reading the request body into memory, which allo...
aiohttp allows request smuggling due to incorrect parsing of chunk extensions
SummaryThe Python parser parses newlines in chunk extensions incorrectly which can lead to request smuggling vulnerabilities under certain conditions. ImpactIf a pure Python version of aiohttp is installed i.e. without the usual C extensions or AIOHTTPNOEXTENSIONS is enabled, then an attacker may...
chaste-codegen (>=0.4.0, <=0.10.2), docker-tidy (>=0.1.0, <=0.1.4) +6 more potentially affected by CVE-2024-5569 via zipp (1.2.0)
zipp PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on zipp and may be impacted: - chaste-codegen =0.4.0, =0.1.0, =0.7.10, =1.18.3, =26.0.0, =1.0.4, =1.0.6 - mapyllary 0.0.6 Source cves: CVE-2024-5569 Source advisory: OSV:PYSEC-2026-20...
fabricauthenticator (>=1.3.1b0, <=1.3.4), nomad-catalysis (>=1.0.2, <=1.0.7) +4 more potentially affected by CVE-2024-37300 via oauthenticator (15.1.0)
oauthenticator PYPI version 15.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on oauthenticator and may be impacted: - fabricauthenticator =1.3.1b0, =1.0.2, =0.1.0, =1.1.9, =0.5.0, =0.10.0 Source cves: CVE-2024-37300 Source advisory: OSV:PYSEC-2026-1...
glib2: Fix of CVE-2026-58016
CVE-2026-58016: fix XML parser state handling for element nesting in D-Bus introspection XML...
CLSA-2026-1783432860 glib2: Fix of CVE-2026-58016
CVE-2026-58016: fix XML parser state handling for element nesting in D-Bus introspection XML...
CLSA-2026-1783432728 glib2: Fix of CVE-2026-58016
CVE-2026-58016: fix XML parser state handling for element nesting in D-Bus introspection XML...
PYSEC-2026-1875 rockhopper Buffer Overflow vulnerability
A vulnerability, which was classified as critical, has been found in bwoodsend rockhopper up to 0.1.2. Affected by this issue is the function countrows of the file rockhopper/src/raggedarray.c of the component Binary Parser. The manipulation of the argument raw leads to buffer overflow. Local...
Ryu Infinite Loop vulnerability
OFPGroupDescStats in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via OFPBucket.len=0...
Ryu Infinite Loop vulnerability
OFPMultipartReply in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via b.length=0...
PYSEC-2026-1877 Ryu Infinite Loop vulnerability
OFPHello in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via length=0...
Ryu Infinite Loop vulnerability
OFPBucket in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via action.len=0...