3 matches found
CVE-2026-21012-Rust-serde-Deserialization-of-Untrusted-Enum-Variant-Injection-
CVE-2026-21012 – Rust serde Deserialization of Untrusted Enum Variant Injection Program Code Rust // serdevuln.rs - Deserializes an enum from user JSON without validation use serde::Deserialize, Serialize; use serdejson; deriveDeserialize, Debug enum AdminAction ReadLogs, DeleteUserString,...
6.8CVSS6.1AI score0.00093EPSS
SaveExploits0
PT-2026-69305
Name of the Vulnerable Software and Affected Versions lmammino oidc-authorizer versions prior to 0.4.1 Description The Lambda Authorizer component contains an issue where raw Authorization header values and complete bearer tokens or JWTs are logged on authentication failure paths, potentially...
6.9CVSS5.9AI score0.00668EPSS
SaveExploits0References9
20