EUVD-2026-82602

go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON parsing and serialization due to unbounded recursion with no depth limit. Remote unauthenticated attackers can submit deeply nested JSON documents to services accepting OpenAPI specifications, causing...

EUVD-2026-82533

redis-parser through 3.0.0 contains a denial of service vulnerability in the RESP protocol parser that allows malicious Redis endpoints to crash the client process through unbounded recursion on nested arrays. Attackers can send crafted RESP byte streams with repeated array headers that exhaust t...

CVE-2026-93450

go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON parsing and serialization due to unbounded recursion with no depth limit. Remote unauthenticated attackers can submit deeply nested JSON documents to services accepting OpenAPI specifications, causing...

AZL-103377 CVE-2026-93450 affecting package kubevirt 1.8.4-2

go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON parsing and serialization due to unbounded recursion with no depth limit. Remote unauthenticated attackers can submit deeply nested JSON documents to services accepting OpenAPI specifications, causing...

Important: Red Hat Security Advisory: perl-Net-DNS security update

An update for perl-Net-DNS is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

perl-Net-DNS: Net::DNS: Denial of Service via unbounded recursion with misplaced TSIG records

A flaw was found in Net::DNS versions before 1.57 for Perl. An attacker can cause a denial of service DoS by sending a specially crafted DNS message with a misplaced Transaction Signature TSIG record. When a system using Net::DNS, such as a forwarder or proxy, attempts to re-encode this message, ...

Important: Red Hat Security Advisory: perl-Net-DNS security update

An update for perl-Net-DNS is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

CVE-2026-61551: Uncontrolled Recursion

Icinga 2 is an open source monitoring system. Prior to 2.14.9, 2.15.4, and 2.16.2, parsing deeply nested JSON can exhaust the call stack because nesting depth is not bounded. The affected JSON parsing paths are reachable by unauthenticated network clients through the Icinga 2 service on TCP port...

Autodesk Shared Components < 1.12.0 / 2.x < 2.2.0 DoS (adsk-sa-2026-0015)

The version of Autodesk Shared Components installed on the remote Windows host is prior to 1.12.0, or 2.x prior to 2.2.0. It is, therefore, affected by an uncontrolled recursion vulnerability. A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an Uncontroll...

EulerOS Virtualization 2.11.1 : protobuf (EulerOS-SA-2026-3454)

According to the versions of the protobuf packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Any project that uses Protobuf Pure-Python backendto parse untrusted Protocol Buffers data containing an arbitrary number of...

CVE-2026-59156: Uncontrolled Recursion

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, A crafted fits stream containing consecutive 2880-byte header blocks without the mandatory end keyword makes...

Oracle Linux 9 : perl-Net-DNS (ELSA-2026-68786)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-68786 advisory. - Fix CVE-2026-81928: Unbounded recursion when re-encoding message with misplaced TSIG Tenable has extracted the preceding description block directly from the...

Oracle Linux 8 : perl-Net-DNS (ELSA-2026-68787)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-68787 advisory. - Fix unbounded recursion in TSIG record processing CVE-2026-81928 Tenable has extracted the preceding description block directly from the Oracle Linux securit...

EulerOS Virtualization 2.12.1 : python-pyasn1 (EulerOS-SA-2026-3613)

According to the versions of the python-pyasn1 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the pyasn1 library is vulnerable to a Denial of Service DoS...

RHEL 9 : perl-Net-DNS (RHSA-2026:68786)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:68786 advisory. The perl-Net-DNS package contains a collection of Perl modules that act as a Domain Name System DNS resolver. It allows the programmer to perform DN...

CVE-2026-93450: Uncontrolled Recursion

go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON parsing and serialization due to unbounded recursion with no depth limit. Remote unauthenticated attackers can submit deeply nested JSON documents to services accepting OpenAPI specifications, causing...

EulerOS Virtualization 2.12.0 : python-pyasn1 (EulerOS-SA-2026-3667)

According to the versions of the python-pyasn1 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the pyasn1 library is vulnerable to a Denial of Service DoS...

RHEL 8 : perl-Net-DNS (RHSA-2026:68787)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:68787 advisory. The perl-Net-DNS package contains a collection of Perl modules that act as a Domain Name System DNS resolver. It allows the programmer to perform DN...

EulerOS Virtualization 2.11.0 : python-pyasn1 (EulerOS-SA-2026-3553)

According to the versions of the python-pyasn1 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory...

EulerOS Virtualization 2.11.1 : python-pyasn1 (EulerOS-SA-2026-3466)

According to the versions of the python-pyasn1 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory...