EUVD-2026-118025

In Vulnerability-Lookup 5.5.1 up to but not including 6.4.1, a signed-in user could make the server allocate memory far out of proportion to their input through a webhook notification's payload template. Each placeholder's format specifier was passed unchanged to Python's string formatting, which...

CVE-2026-123660

Vulnerability-Lookup versions 5.5.1 up to but not including 6.4.1 are vulnerable to memory amplification via webhook notification payload templates. The root cause is that placeholder format specifiers are passed directly to Python's string formatting , causing the server to build massive padded ...

CVE-2026-123660 Vulnerability-Lookup: memory amplification through webhook payload template format specifiers

In Vulnerability-Lookup 5.5.1 up to but not including 6.4.1, a signed-in user could make the server allocate memory far out of proportion to their input through a webhook notification's payload template. Each placeholder's format specifier was passed unchanged to Python's string formatting, which...