GHSA-353C-V8X9-V7C3 MCP-Framework: Unbounded memory allocation in readRequestBody allows denial of service via HTTP transport

Summary The readRequestBody function in src/transports/http/server.ts concatenates HTTP request body chunks into a string with no size limit, allowing a remote unauthenticated attacker to crash the server via memory exhaustion with a single large HTTP POST request. Details File:...

Allocation of Resources Without Limits or Throttling

Overview mcp-framework is a Framework for building Model Context Protocol MCP servers in Typescript Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the readRequestBody function. An attacker can exhaust system memory and cause a server...

PT-2026-33368

Name of the Vulnerable Software and Affected Versions mcp-framework versions prior to 0.2.22 Description The readRequestBody function in the HTTP transport concatenates request body chunks into a string without enforcing a size limit. Although a maxMessageSize configuration value exists, it is no...

MCP Framework security vulnerabilities

MCP Framework is a TypeScript framework developed by Alex Andru as a building block for context protocols. Versions of the MCP Framework prior to 0.2.21 contained security vulnerabilities. These vulnerabilities stemmed from the readRequestBody function in HTTP transmissions, which concatenated th...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005441)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005441 advisory. In the Linux kernel, the following vulnerability has been resolved: bcache: avoid oversized read request in cache missing code path In the cache missing code path o...

Linux kernel RAID1 Buffer Overflow DoS

The vulnerability of the raid1readrequest function in the drivers/md/raid1.c module of the Linux kernel’s device drivers for RAID and LVM systems is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause service...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005009)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005009 advisory. In the Linux kernel, the following vulnerability has been resolved: bcache: avoid oversized read request in cache missing code path In the cache missing code path o...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46686)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46686 advisory. - In the Linux kernel, the following vulnerability has been resolved: smb/client: avoid dereferencing rdata=NU...

Unity Linux 20.1060a Security Update: kernel (UTSA-2026-003887)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003887 advisory. An incorrect read request flaw was found in the Infrared Transceiver USB driver in the Linux kernel. This issue occurs when a user attaches a malicious USB device. A...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992899)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992899 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Add workaround for Errata i2037 AM65x SR 1.0 Errata i2037 in AM65x/DRA80xM...

GHSA-7WFC-4796-GMG5 ZITADEL Vulnerable to Unauthenticated Full-Read SSRF via V2 Login

Summary Zitadel is vulnerable to an unauthenticated, full-read SSRF vulnerability. An unauthenticated remote attacker can force Zitadel into making HTTP requests to arbitrary domains, including internal addresses. The server then returns the upstream response to the attacker, enabling data...

EUVD-2005-1860

Malware in sbrugna...

EUVD-2009-2945

Malware in sbrugna...

EUVD-2025-8105

Malicious code in bioql PyPI...

EUVD-2021-31269

Malicious code in bioql PyPI...

EUVD-2022-27230

Malicious code in bioql PyPI...

CVE-2022-50410 NFSD: Protect against send buffer overflow in NFSv2 READ

In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send buffer overflow in NFSv2 READ Since before the git era, NFSD has conserved the number of pages held by each nfsd thread by combining the RPC receive and send buffers into a single array of pages. This...

CVE-2022-50410

CVE-2022-50410 pertains to the Linux kernel NFSD component handling NFSv2 READ. The issue arises from the historical optimization that combines the RPC receive and send buffers into a single page array, shrinking the send buffer when a large RPC Call is received. A client can trigger this shrinka...

Linux Distros Unpatched Vulnerability : CVE-2024-41050

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: cachefiles: cyclic allocation of msgid to avoid reuse Reusing the msgid after a maliciously...

Linux Distros Unpatched Vulnerability : CVE-2021-47275

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bcache: avoid oversized read request in cache missing code path In the cache missing code path of cached device, if a proper location from the internal B+ tree...