LabStack Echo resource management error vulnerability

In LabStack Echo versions from 4.0.0 up to but including 4.16.1, there is a resource management error vulnerability. This vulnerability arises because the Decompress middleware fails to limit the size of the request body after gzip decompression. As a result, small-compressed requests can be...

n8n resource management error vulnerability

Versions prior to n8n 1.123.85, 2.43.5, and 2.44.1 contain a resource management error vulnerability stemming from a regular expression denial-of-service issue. Certified members can exploit this by using specially crafted glob patterns to disrupt the event loop; submitting a Files Selector patte...

OpenTelemetry - CNCF OpenTelemetry Python resource management error vulnerability

OpenTelemetry: Versions prior to 1.45.0 of CNCF’s OpenTelemetry Python contain a resource management error vulnerability. This vulnerability arises because JaegerPropagator.extract fails to limit the number of entries, their size per entry, and the total size when processing incoming uberctx-...

Eugene Russh resource management error vulnerability

Versions of Eugene Russh prior to 0.65.0 contain a resource management error vulnerability. This vulnerability arises because the client accepts a private EXTINFO message with encoded ID 7 via the Session::processpacket path; however, the handleextinfo function adds extension names to...

Google Chrome resource management error vulnerability

Google Chrome versions prior to 156.0.8078.73 contain a resource management error vulnerability. This vulnerability stems from a post-release reuse issue in SVGs, which may allow remote attackers to execute arbitrary code outside the sandbox via specially crafted HTML pages...

Google Chrome resource management error vulnerability

Google Chrome versions prior to 156.0.8078.73 contain a resource management error vulnerability. This vulnerability stems from a post-free reuse issue in FileSystem, which may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Google Chrome resource management error vulnerability

Versions of Google Chrome prior to 156.0.8078.73 contain a resource management error vulnerability. This vulnerability stems from PDFium’s reuse after release and may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Google Chrome resource management error vulnerability

Google Chrome versions prior to 156.0.8078.73 contain a resource management error vulnerability. This vulnerability stems from a post-release reuse issue in Layout, allowing remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Google Chrome resource management error vulnerability

Versions of Google Chrome prior to 156.0.8078.73 contain a resource management error vulnerability. This vulnerability stems from ImageCapture’s post-free reuse issue and may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Google Chrome resource management error vulnerability

Versions of Google Chrome prior to 156.0.8078.73 contain a resource management error vulnerability. This vulnerability stems from post-free reuse in Modularization, allowing remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Eugene Russh resource management error vulnerability

Versions of Eugene Russh prior to 0.65.0 contain a resource management error vulnerability. This vulnerability arises when duplicate SSHAGENTCONSTRAINCONFIRM records are accepted during key addition; each Constraint::Confirm record is then appended to the constraint vector used for key retention...

Google Chrome resource management error vulnerability

Versions of Google Chrome prior to 156.0.8078.73 contain a resource management error vulnerability. This vulnerability stems from a post-free reuse issue in the Video component, which may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Nextcloud Server resource management error vulnerability

A resource management error vulnerability exists in Nextcloud Server versions 22.0.0 through 34.0.0. This vulnerability arises because the federated sharing endpoint can write arbitrary rows to the ocshareexternal database table without any automatic cleanup mechanism, potentially leading to a...

lxsmnsyc seroval resource management error vulnerability

In versions lxsmnsyc seroval from 1.4.1 up to but including 1.6.8, there is a resource management error vulnerability. This vulnerability arises because fromJSON and fromCrossJSON fail to require that the list of elements in array nodes be an actual array. A specially crafted payload can allow...

vLLM resource management error vulnerability

Versions prior to vLLM 0.32.0 contain a resource management error vulnerability. This vulnerability arises because the Phi-4 multimodal audio encoder defaults to using eager attention in phi4mmaudio.py and phi4mmutils.py. A remote client can submit a valid long audio segment, causing the full...

Mattermost resource management error vulnerability

Versions 11.9.1 and earlier of Mattermost, as well as versions 11.8.5 and earlier, 11.7.10 and earlier, and 11.10.1 and earlier are affected by a resource management error vulnerability. This vulnerability arises because the WebSocket msgpack decoder fails to enforce allocation limits on byte...

Mattermost resource management error vulnerability

Mattermost versions 11.9.1 and earlier within the 11.9.x series, 11.8.5 and earlier within the 11.8.x series, 11.7.10 and earlier within the 11.7.x series, and 11.10.1 and earlier within the 11.10.x series contain a resource management error vulnerability. This vulnerability arises from the lack ...

BenoitC Hackney resource management error vulnerability

Versions 2.0.0-beta.1 through 4.9.0 of benoitc hackney contain a resource management error vulnerability. This vulnerability arises because hackneyconn fails to restrict or throttle resource allocation; as a result, hackney:request/5 and hackney:body/1 return full response bodies without limiting...

Andrew Bennett JOSE Resource Management error vulnerability

Versions of Andrew Bennett JOSE from 1.0.0 up to and including 1.11.13 contain a resource management error vulnerability. This vulnerability arises because the JOSEjwezip:uncompress/2 function fails to limit the output size and expansion ratio when decompressing JWE plaintext files containing a...

Go JOSE resource management error vulnerability

Versions of Go JOSE prior to 4.1.5 contain a resource management error vulnerability. This vulnerability arises when parsing JSON controlled by an attacker; deeply nested arrays or objects exceed Go’s stack limits, leading to a stack overflow and potentially causing a denial of service...