692 matches found
BIT-GOLANG-2025-61723 Quadratic complexity when parsing some invalid inputs in encoding/pem
The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs...
BIT-GOLANG-2025-58187 Quadratic complexity when checking name constraints in crypto/x509
Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains...
Quadratic complexity in os.path.expandvars() with user-controlled template
...
CVE-2025-6075
CVE-2025-6075 affects Python’s os.path.expandvars() with user-controlled input, causing potential performance degradation during environment variable expansion. Connected advisories confirm this affects multiple Python versions and distributions, with patches available: Debian LTS DLA-4445-1 (pyt...
Quadratic complexity when parsing some invalid inputs in encoding/pem
...
CVE-2025-61723 Quadratic complexity when parsing some invalid inputs in encoding/pem
The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs...
CVE-2025-61723
CVE-2025-61723 identifies a vulnerability where the processing time for parsing certain invalid inputs scales non-linearly relative to the input size. This issue specifically impacts programs that parse untrusted PEM inputs , leading to a high availability impact (CVSS 7.5). The vulnerability is ...
CVE-2025-61723
The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs...
CVE-2025-58187
The cri-tools and buildkitd packages are affected by CVE-2025-58187. The vulnerability stems from a design flaw in the name constraint checking algorithm , where the processing time for certain inputs scales non-linearly relative to the size of the certificate. This issue impacts any programs tha...
CVE-2025-58187 Quadratic complexity when checking name constraints in crypto/x509
Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains...
CVE-2025-58187 Quadratic complexity when checking name constraints in crypto/x509
Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains...
GO-2025-4009 Quadratic complexity when parsing some invalid inputs in encoding/pem
The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs...
GO-2025-4007 Quadratic complexity when checking name constraints in crypto/x509
Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains...
EUVD-2006-0050
Malware in sbrugna...
EUVD-2024-0077
Malicious code in bioql PyPI...
EUVD-2023-0326
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2025-6069
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The html.parser.HTMLParser class had worse-case quadratic complexity when processing certain crafted malformed inputs potentially leading to amplified...
BIT-LIBPYTHON-2025-6069 HTMLParser quadratic complexity when processing malformed inputs
The html.parser.HTMLParser class had worse-case quadratic complexity when processing certain crafted malformed inputs potentially leading to amplified denial-of-service...
HTMLParser quadratic complexity when processing malformed inputs
...
Security update for python311
This update for python311 fixes the following issues: CVE-2025-6069: Avoid worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser bsc1244705. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...