Duplicate Advisory: Axios: HTTP/2 streamed uploads bypass `maxBodyLength`

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-mwf2-3pr3-8698. This link is maintained to preserve external references. Original Description axios versions =1.13.0 Node.js HTTP adapter fail to enforce the configured maxBodyLength limit on streamed request...

CVE-2026-67317

axios versions 1.7.0 before 1.18.0 fail to enforce maxBodyLength for WHATWG ReadableStream request bodies in the fetch adapter when Content-Length cannot be determined. Attackers can supply unknown-length stream data to bypass upload size limits and cause uncontrolled network egress or resource...

CVE-2026-67302

FreeRDP before 3.29.0 affected versions = 3.28.0 contains a divide-by-zero vulnerability in the rdpecam camera redirection client. ecamdevprocessstartstreamsrequest parses a server-controlled CAMMEDIATYPEDESCRIPTION from a StartStreamsRequest PDU but validates only Format and Flags, not...

CVE-2026-67302

FreeRDP before 3.29.0 affected versions = 3.28.0 contains a divide-by-zero vulnerability in the rdpecam camera redirection client. ecamdevprocessstartstreamsrequest parses a server-controlled CAMMEDIATYPEDESCRIPTION from a StartStreamsRequest PDU but validates only Format and Flags, not...

EUVD-2026-51834

FreeRDP before 3.29.0 affected versions = 3.28.0 contains a divide-by-zero vulnerability in the rdpecam camera redirection client. ecamdevprocessstartstreamsrequest parses a server-controlled CAMMEDIATYPEDESCRIPTION from a StartStreamsRequest PDU but validates only Format and Flags, not...

CVE-2026-67302

CVE-2026-67302 affects FreeRDP before 3.29.0 (versions ≤ 3.28.0) and targets the rdpecam camera redirection client. A StartStreamsRequest with a server-controlled CAM_MEDIA_TYPE_DESCRIPTION may include a zero FrameRateDenominator; ecam_dev_process_start_streams_request() only validates Format and...

CVE-2026-67302 FreeRDP rdpecam StartStreamsRequest divide-by-zero denial of service

FreeRDP before 3.29.0 affected versions = 3.28.0 contains a divide-by-zero vulnerability in the rdpecam camera redirection client. ecamdevprocessstartstreamsrequest parses a server-controlled CAMMEDIATYPEDESCRIPTION from a StartStreamsRequest PDU but validates only Format and Flags, not...

CVE-2026-67302

FreeRDP before 3.29.0 affected versions = 3.28.0 contains a divide-by-zero vulnerability in the rdpecam camera redirection client. ecamdevprocessstartstreamsrequest parses a server-controlled CAMMEDIATYPEDESCRIPTION from a StartStreamsRequest PDU but validates only Format and Flags, not...

CVE-2026-67302 FreeRDP rdpecam StartStreamsRequest divide-by-zero denial of service

FreeRDP before 3.29.0 affected versions = 3.28.0 contains a divide-by-zero vulnerability in the rdpecam camera redirection client. ecamdevprocessstartstreamsrequest parses a server-controlled CAMMEDIATYPEDESCRIPTION from a StartStreamsRequest PDU but validates only Format and Flags, not...

EUVD-2026-51863

axios versions 1.7.0 before 1.18.0 fail to enforce maxBodyLength for WHATWG ReadableStream request bodies in the fetch adapter when Content-Length cannot be determined. Attackers can supply unknown-length stream data to bypass upload size limits and cause uncontrolled network egress or resource...

PT-2026-67282

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.29.0 Description The rdpecam camera redirection client contains a divide-by-zero issue. The function ecam dev process start streams request parses a server-controlled CAM MEDIA TYPE DESCRIPTION from a...

CVE-2026-18141

A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible EDA. An unauthenticated remote attacker can bypass mutual Transport Layer Security mTLS authentication for event streams. This is achieved by manipulating the event stream URL and forging the HTTP...

CVE-2026-18141

The CVE-2026-18141 entry concerns aap-gateway in Ansible Automation Platform’s Event-Driven Ansible (EDA). Affected component: aap-gateway. Vulnerability: an unauthenticated remote attacker can bypass mutual TLS on event streams by manipulating the event stream URL and forging the HTTP Subject he...

CVE-2026-18141

A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible EDA. An unauthenticated remote attacker can bypass mutual Transport Layer Security mTLS authentication for event streams. This is achieved by manipulating the event stream URL and forging the HTTP...

SUSE CVE-2026-53522

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.0.0 to before version 2.2.0, the Nezha dashboard exposes two endpoints that create long-lived WebSocket streams to monitored agents: POST /api/v1/terminal - createTerminal...

EUVD-2026-50440

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the Bzip2Decoder handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a malformed bzip2 stream that permanently captures the...

CVE-2026-59901

Netty CVE-2026-59901 affects the Bzip2Decoder in the compression codec pipeline. The issue is a flaw in the Bzip2BlockDecompressor.read() RLE state machine that can cause an infinite loop, hanging the event-loop thread and triggering DoS. Fixed in Netty versions 4.1.136.Final and 4.2.16.Final. Af...

CVE-2026-64391

A flaw was found in ksmbd, the in-kernel Server Message Block SMB daemon. This vulnerability allows a remote attacker to bypass security restrictions by incorrectly handling credentials for Alternate Data Streams ADS input/output I/O operations. Instead of using the credentials established when t...

GHSA-JRMC-QG6P-94FP veraPDF Parser DoS via PostScript CMap Streams

Summary Description A PostScript-interpreter-driven Denial of Service CWE-1325 vulnerability in veraPDF allows a remote attacker to exhaust validator memory or CPU by submitting a PDF whose Type 0 font /Encoding or any /ToUnicode is a CMap stream containing attacker-supplied PostScript. veraPDF...

veraPDF Parser DoS via PostScript CMap Streams

Summary Description A PostScript-interpreter-driven Denial of Service CWE-1325 vulnerability in veraPDF allows a remote attacker to exhaust validator memory or CPU by submitting a PDF whose Type 0 font /Encoding or any /ToUnicode is a CMap stream containing attacker-supplied PostScript. veraPDF...