Uncontrolled Recursion

Overview org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol is an AMQP 0-8, 0-9 and 0-9-1 protocol broker plug-in. Affected versions of this package are vulnerable to Uncontrolled Recursion through unbounded nesting of types in the field-table processing. An attacker can cause a stack overflow...

Oracle Linux 8 : perl-DBI:1.641 (ELSA-2026-69112)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-69112 advisory. - Fix placeholder limit on :N and :pN style placeholders CVE-2026-73194 Resolves: RHEL-247869 - Fix unsafe string eval in DBI::Profile CVE-2026-14380 Resolves:...

CVE-2026-58004 Crafted oversized firmware image causes EL3 stack overflow during VAB authentication on Trusted Firmware.

Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers. This issue affects Trusted Firmware: through socfpgav2.14.0...

CVE-2026-58004

An out-of-bounds read vulnerability exists in Altera Trusted Firmware on HPS affecting versions up to and including socfpga_v2.14.0 . The root cause involves a crafted oversized firmware image which triggers an EL3 stack overflow during VAB authentication . This vulnerability can lead to Privileg...

CVE-2026-58004 Crafted oversized firmware image causes EL3 stack overflow during VAB authentication on Trusted Firmware.

Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers. This issue affects Trusted Firmware: through socfpgav2.14.0...

perl-DBI:1.641 security update

perl-DBI 1.641-10 - Fix number of tests Resolves: RHEL-247869 1.641-9 - Fix placeholder limit on :N and :pN style placeholders CVE-2026-73194 Resolves: RHEL-247869 1.641-8 - Fix unsafe string eval in DBI::Profile CVE-2026-14380 Resolves: RHEL-211151 1.641-7 - Fix patch. 1.641-6 - Fix heap overflo...

PT-2026-98198

Name of the Vulnerable Software and Affected Versions Wazuh versions 3.8.0 through 4.14.6 Description The getattributes function in src/os xml/os xml.c recursively processes XML attributes without a depth limit and allocates two large local buffers in each stack frame. An enrolled agent can submi...

PT-2026-97828

Name of the Vulnerable Software and Affected Versions Altera Trusted Firmware on HPS versions prior to socfpga v2.14.0 Description An out-of-bounds read issue occurs when a crafted oversized firmware image is processed, leading to an EL3 stack overflow during VAB authentication. This can result i...

SUSE SLES15 Security Update : podofo (SUSE-SU-2026:4311-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4311-1 advisory. - CVE-2018-8002: infinite loop vulnerability in ParseFileComplete bsc1084891. - CVE-2020-18971: stack-based buffer overflow in...

SUSE CVE-2026-89092

The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution for the system. Exploitation of this bug needs a system that has nscd enabled and using an untrusted...

SUSE-SU-2026:4311-1 Security update for podofo

This update for podofo fixes the following issues: - CVE-2018-8002: infinite loop vulnerability in ParseFileComplete bsc1084891. - CVE-2020-18971: stack-based buffer overflow in src/base/PdfDictionary.cpp bsc1190178. - CVE-2021-30470: uncontrolled recursive call of funtions in...

EUVD-2026-84017

Dasel: Unbounded recursion in JSON and XML readers causes unrecoverable stack-overflow DoS...

Dasel: Unbounded recursion in JSON and XML readers causes unrecoverable stack-overflow DoS

Summary dasel's JSON and XML readers parse nested structures with unbounded recursion, one native stack frame per nesting level, with no depth guard. A small sub-10 MB, deeply nested document drives the Go runtime past its goroutine stack limit and triggers a fatal error: stack overflow. This is...

GHSA-CQXR-JXR2-85PQ Dasel: Unbounded recursion in JSON and XML readers causes unrecoverable stack-overflow DoS

Summary dasel's JSON and XML readers parse nested structures with unbounded recursion, one native stack frame per nesting level, with no depth guard. A small sub-10 MB, deeply nested document drives the Go runtime past its goroutine stack limit and triggers a fatal error: stack overflow. This is...

CVE-2026-93687

A flaw was found in braces. This stack overflow vulnerability exists in the recursive Abstract Syntax Tree AST walkers due to a lack of depth guards. A remote attacker can exploit this by supplying deeply nested brace patterns, leading to the exhaustion of the call stack and termination of the...

CVE-2026-88406

FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the ValidateUnionClauses function /ast/astvalidations.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-88408

FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the GetGroup function /ops/opaggregate.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-61674

Fluent Bit is a fast and lightweight logs, metrics, and traces processor for Linux, BSD, macOS, and Windows. From 0.11.0 until 5.0.8, plugins/outforward/forward.c secureforwardpong copies the server-controlled PONG2 reason into the 32-byte stack buffer msg with memcpy without checking its...

CVE-2026-59168

The Dasel command-line tool and library (versions 3.0.0 through 3.11.0 ) are vulnerable to an unrecoverable Denial of Service (DoS) due to unbounded recursion in the JSON and XML readers. The decodeValue, decodeObject, and decodeArray functions in parsing/json/json_reader.go, along with parseElem...

CVE-2026-59168 Dasel: Unbounded recursion in JSON and XML readers causes unrecoverable stack-overflow DoS

Dasel is a command-line tool and library for querying, modifying, and transforming data structures. From 3.0.0 until 3.11.1, parsing/json/jsonreader.go decodeValue, decodeObject, and decodeArray, and parsing/xml/reader.go parseElement, recurse once per input nesting level without a depth guard...