github.com/getkin/kin-openapi: kin-openapi: Denial of Service via self-referential schema definitions

A flaw was found in kin-openapi. A remote attacker could cause a Denial of Service DoS by providing a specially crafted OpenAPI document containing self-referential schema definitions. During parsing, an uninitialized reference causes the application to terminate unexpectedly prior to document...

Apache Pulsar authorization issue vulnerability

Versions of Apache Pulsar from 2.2.0 up to and including 4.0.14, from 4.1.0 up to and including 4.1.3, and from 4.2.0 up to and including 4.2.5 contain an authorization issue vulnerability. This vulnerability arises because the GetSchema and GetOrCreateSchema commands only verify the client’s...

github.com/getkin/kin-openapi: kin-openapi: Denial of Service via self-referential schema definitions

A flaw was found in kin-openapi. A remote attacker could cause a Denial of Service DoS by providing a specially crafted OpenAPI document containing self-referential schema definitions. During parsing, an uninitialized reference causes the application to terminate unexpectedly prior to document...

github.com/getkin/kin-openapi: kin-openapi: Denial of Service via self-referential schema definitions

A flaw was found in kin-openapi. A remote attacker could cause a Denial of Service DoS by providing a specially crafted OpenAPI document containing self-referential schema definitions. During parsing, an uninitialized reference causes the application to terminate unexpectedly prior to document...

github.com/getkin/kin-openapi: kin-openapi: Denial of Service via self-referential schema definitions

A flaw was found in kin-openapi. A remote attacker could cause a Denial of Service DoS by providing a specially crafted OpenAPI document containing self-referential schema definitions. During parsing, an uninitialized reference causes the application to terminate unexpectedly prior to document...

CVE-2026-102497 Apache XMLSchema: Denial of service through cyclic schema definitions in the schema walker

The Apache XmlSchema walker xmlschema-walker doesn't detect cycles in type derivation, substitution groups, model groups or attribute groups. A malicious schema with such a cycle can make the walker recurse until the stack overflows, causing a denial of service. Users are recommended to upgrade t...

CVE-2026-102497

The Apache XmlSchema walker (xmlschema-walker) is vulnerable to a denial of service because it fails to detect cycles in type derivation, substitution groups, model groups, or attribute groups. A malicious schema containing such cycles can cause the walker to recurse indefinitely until a stack ov...

CVE-2026-102497 Apache XMLSchema: Denial of service through cyclic schema definitions in the schema walker

The Apache XmlSchema walker xmlschema-walker doesn't detect cycles in type derivation, substitution groups, model groups or attribute groups. A malicious schema with such a cycle can make the walker recurse until the stack overflows, causing a denial of service. Users are recommended to upgrade t...

CVE-2026-102497 Apache XMLSchema: Denial of service through cyclic schema definitions in the schema walker

The Apache XmlSchema walker xmlschema-walker doesn't detect cycles in type derivation, substitution groups, model groups or attribute groups. A malicious schema with such a cycle can make the walker recurse until the stack overflows, causing a denial of service. Users are recommended to upgrade t...

CVE-2025-65111 SpiceDB's LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results

SpiceDB is an open source database system for creating and managing security-critical application permissions. Prior to version 1.47.1, if a schema includes the following characteristics: permission defined in terms of a union + and that union references the same relation on both sides but one si...

[SECURITY] Fedora 35 Update: golang-github-appc-spec-0.8.11-14.fc35

This package contains schema definitions and tools for the App Container app c specification. These include technical details on how an appc image is downloaded over a network, cryptographically verified, and executed on a host. See SPEC.md for details of the specification itself...

[SECURITY] Fedora 36 Update: golang-github-appc-spec-0.8.11-14.fc36

This package contains schema definitions and tools for the App Container app c specification. These include technical details on how an appc image is downloaded over a network, cryptographically verified, and executed on a host. See SPEC.md for details of the specification itself...

GHSA-QFR5-WJPW-Q4C4 Denial of Service in python-ldap

python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regular expression denial of service ReDoS flaw in the LDAP schema parser. By sending crafted regex input, a remote authenticated attacker could exploit this...

[SECURITY] Fedora 34 Update: golang-github-appc-spec-0.8.11-13.fc34

This package contains schema definitions and tools for the App Container app c specification. These include technical details on how an appc image is downloaded over a network, cryptographically verified, and executed on a host. See SPEC.md for details of the specification itself...

[SECURITY] Fedora 35 Update: golang-github-appc-spec-0.8.11-13.fc35

This package contains schema definitions and tools for the App Container app c specification. These include technical details on how an appc image is downloaded over a network, cryptographically verified, and executed on a host. See SPEC.md for details of the specification itself...

tomcat6 security update

0:6.0.24-78 - Related: CVE-2013-4590 - remove xml schema names javaee5, - javaeewebservices12, and javaeewebservices12client - from descriptor.DigesterFactory initialization. These - schema definitions are not relevant to 6.0.24 as the version - of their spec did not exist at the time. 0:6.0.24-7...