85 matches found
lightrag-hku: SSRF via IPv6-transition address bypass (NAT64, IPv4-compatible, 6to4) of the native-markdown image-download guard
SummaryLightRAG's native markdown parser downloads external images referenced by an uploaded markdown or textpack document. The only SSRF guard, validatedaddresses in lightrag/parser/markdown/parser.py, resolves the image host and rejects it when the resolved IP is not isglobal. That check is...
PYSEC-2026-4064 lightrag-hku: SSRF via IPv6-transition address bypass (NAT64, IPv4-compatible, 6to4) of the native-markdown image-download guard
Summary LightRAG's native markdown parser downloads external images referenced by an uploaded markdown or textpack document. The only SSRF guard, validatedaddresses in lightrag/parser/markdown/parser.py, resolves the image host and rejects it when the resolved IP is not isglobal. That check is...
PT-2026-105820
Summary LightRAG's native markdown parser downloads external images referenced by an uploaded markdown or textpack document. The only SSRF guard, validated addresses in lightrag/parser/markdown/parser.py, resolves the image host and rejects it when the resolved IP is not is global. That check is...
lightrag-hku: SSRF via IPv6-transition address bypass (NAT64, IPv4-compatible, 6to4) of the native-markdown image-download guard
Summary LightRAG's native markdown parser downloads external images referenced by an uploaded markdown or textpack document. The only SSRF guard, validatedaddresses in lightrag/parser/markdown/parser.py, resolves the image host and rejects it when the resolved IP is not isglobal. That check is...
CVE-2026-85740 LightRAG: SSRF via IPv6-transition address bypass (NAT64, IPv4-compatible, 6to4) of the native-markdown image-download guard
LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, validatedaddresses in lightrag/parser/markdown/parser.py evaluates the literal resolved address with ipaddress.isglobal without consistently classifying an IPv4 address embedded in an IPv6 transition wrapper. A call...
CVE-2026-85740: Server-Side Request Forgery (SSRF)
LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, validatedaddresses in lightrag/parser/markdown/parser.py evaluates the literal resolved address with ipaddress.isglobal without consistently classifying an IPv4 address embedded in an IPv6 transition wrapper. A call...
PT-2026-94387
Name of the Vulnerable Software and Affected Versions Soup Sieve versions prior to 2.9 Description A Regular Expression Denial of Service ReDoS exists in the selector parser located in src/soupsieve/css parser.py. The IDENTIFIER pattern uses adjacent quantified groups over overlapping character...
CVE-2026-55618: Improper Encoding or Escaping of Output
emlparser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, the cleanfounduri function in emlparser/parser.py validates potential URL strings before unescaping HTML entities used for colon, slash,...
PYSEC-2026-1878 FaucetSDN Ryu Denial of Service Vulnerability
An issue was discovered in OFPQueueGetConfigReply in parser.py in FaucetSDN Ryu version 4.34, allows remote attackers to cause a denial of service DoS infinite loop...
CVE-2026-3816: Improper Resource Shutdown or Release
A security vulnerability has been detected in OWASP DefectDojo up to 2.55.4. This vulnerability affects the function inputzip.read of the file parser.py of the component SonarQubeParser/MSDefenderParser. The manipulation leads to denial of service. The attack can be initiated remotely. The exploi...
CVE-2024-34487
OFPFlowStats in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via inst.length=0...
EUVD-2023-2205
Malicious code in bioql PyPI...
EUVD-2023-2220
Malicious code in bioql PyPI...
CVE-2024-34488
OFPMultipartReply in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via b.length=0...
CVE-2020-35139
An issue was discovered in OFPBundleCtrlMsg in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of service DoS infinite loop...
Denial Of Service (DoS)
ryu is vulnerable to Denial Of Service DoS. The vulnerability is due to inadequate input validation when the OFPQueueProp length is 0 within the OFPPacketQueue function in parser.py, which allows an attacker to trigger an infinite loop by setting the length parameter to 0...
Denial Of Service (DoS)
ryu is vulnerable to Denial Of Service DoS. The vulnerability is due to inadequate input validation within the OFPFlowStats function in parser.py, which allows an attackers to trigger an infinite loop by setting the length of the inst parameter to 0...
Denial Of Service (DoS)
ryu is vulnerable to Denial Of Service DoS. The vulnerability is due to inadequate input validation within the OFPMultipartReply function in parser.py, allowing an attacker to trigger an infinite loop by setting the length parameter to 0...