27 matches found
CVE-2026-55099
icalendar is an RFC 5545 compatible parser and generator of iCalendar files for Python. From 7.1.0 until 7.1.3, the Component equality method in src/icalendar/cal/component.py compares nested subcomponents with two membership loops, and each membership test invokes the same method on child...
icalendar has Algorithmic Complexity in Equality
Summary Component.eq compares subcomponents in O2^n time relative to nesting depth. Because the parser accepts arbitrarily nested components, a sub-kilobyte .ics file is enough to make a single equality check run for minutes or hang indefinitely. Any application that compares parsed components ==...
CVE-2026-55099 icalendar: Algorithmic Complexity in Equality
icalendar is an RFC 5545 compatible parser and generator of iCalendar files for Python. From 7.1.0 until 7.1.3, the Component equality method in src/icalendar/cal/component.py compares nested subcomponents with two membership loops, and each membership test invokes the same method on child...
CVE-2026-55099 icalendar: Algorithmic Complexity in Equality
icalendar is an RFC 5545 compatible parser and generator of iCalendar files for Python. From 7.1.0 until 7.1.3, the Component equality method in src/icalendar/cal/component.py compares nested subcomponents with two membership loops, and each membership test invokes the same method on child...
CVE-2026-55099
icalendar is an RFC 5545 iCalendar parser and generator for Python. In versions 7.1.0 through 7.1.3 , the Component equality method in src/icalendar/cal/component.py compares nested subcomponents using two membership loops that recursively invoke the same method on child components, producing O(2...
Drupal Open Atrium Module Cross-Site Request Forgery Vulnerability
Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Open Atrium module is a collaborative team development module based on the Drupal platform. Multiple cross-site request forgery vulnerabilities exist in subcomponents of the Drupal Open...
Vulnerability of the Java Platform software platform, allowing a remote attacker to compromise the integrity of protected information
The vulnerability of the Java SE and Java SE Embedded software platform allows a malicious actor to compromise data integrity by using subcomponents called Libraries...
Vulnerability of the Java Platform software platform, allowing a remote attacker to compromise the integrity of protected information
The vulnerability of the Java SE software platform allows a malicious actor to compromise data integrity by using subcomponents called Libraries...
The vulnerability of the Java Development Kit application development tool allows a remote attacker to compromise data confidentiality and integrity.
The vulnerability of the Java Development Kit application development tool relates to JavaFX subcomponents. Exploiting this vulnerability allows a malicious attacker to compromise data confidentiality and integrity by using JavaFX subcomponents...
Vulnerability of the Java Runtime Environment software platform, which allows a malicious attacker to compromise data confidentiality and integrity
Vulnerability of the Java Runtime Environment, related to program subcomponents. Exploitation of this vulnerability allows an attacker to compromise data confidentiality and integrity by using the JSSE subcomponent...
The vulnerability of the Java Development Kit application development tool allows a remote attacker to compromise data confidentiality and integrity.
The vulnerability of the Java Development Kit, related to the subcomponents of the program. Exploiting this vulnerability allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of data, by using the Hotspot subcomponent...
The vulnerability of the Java Development Kit application development tool allows a remote attacker to compromise data confidentiality and integrity.
The vulnerability of the Java Development Kit, related to the subcomponents of the program. Exploiting this vulnerability allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of data, by using these subcomponents...
The vulnerability of the Java Development Kit application development tool allows a remote attacker to compromise data confidentiality and integrity.
The vulnerability of the Java Development Kit application development tool relates to JavaFX subcomponents. Exploiting this vulnerability allows a malicious attacker to manipulate data accessibility by using JavaFX subcomponents...
Vulnerability of the Java Runtime Environment software platform, which allows a malicious attacker to compromise data confidentiality and integrity
Vulnerability of the Java Runtime Environment, related to program subcomponents. Exploiting this vulnerability allows a malicious actor to compromise data confidentiality and integrity by using the subcomponents of Libraries...
The vulnerability of the Java Development Kit application development tool allows a remote attacker to compromise data confidentiality and integrity.
The vulnerability of the Java Development Kit, related to the subcomponents of the program. Exploiting this vulnerability allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of data, by using these subcomponents...
The vulnerability of the Java Development Kit application development tool allows a remote attacker to compromise data confidentiality and integrity.
The vulnerability of the Java Development Kit application development tool relates to the subcomponents of the program. Exploiting this vulnerability allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of data by using these subcomponents...
The vulnerability of the Java Development Kit application development tool allows a remote attacker to compromise data confidentiality and integrity.
The vulnerability of the Java Development Kit, related to the subcomponents of the program. Exploiting this vulnerability allows a malicious attacker to compromise data confidentiality and integrity by using these subcomponents...
The vulnerability of the Java Development Kit application development tool allows a remote attacker to compromise data confidentiality and integrity.
The vulnerability of the Java Development Kit, related to the subcomponents of the program. Exploiting this vulnerability allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of data, by using these subcomponents...
