Mistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitions

Summary Type: Algorithmic-complexity DoS in reference-link definition handling. A markdown document with N reference-link definitions of the same key or many distinct keys takes ON² parser time. 5000 repeated a: u\n definitions take 1.1 second; 10000 → 4.5 seconds. File: src/mistune/blockparser.p...

EUVD-2026-42302

js-yaml: YAML merge-key chains can force quadratic CPU consumption in js-yaml...

EUVD-2026-42301

js-yaml: YAML merge-key chains can force quadratic CPU consumption...

NPM: js-yaml: Quadratic-complexity (O(n^2)) DoS via !!omap tag in YAML11_SCHEMA

NPM: js-yaml: Quadratic-complexity On^2 DoS via !!omap tag in YAML11SCHEMA vulnerability discovered by ? in WordPress Npm js-yaml versions = 5.0.0, = 5.2.0...

GHSA-724G-MXRG-4QVM js-yaml: Quadratic-complexity (O(n^2)) DoS via !!omap tag in YAML11_SCHEMA

Summary js-yaml v5.x introduces YAML11SCHEMA support with the !!omap ordered map tag. The omapTag.addItem function performs a linear On scan for duplicate key detection on every insertion, resulting in On^2 total time to parse a document with n omap entries. An attacker can send a small crafted...

CVE-2026-64651

The @ai-sdk/harness-opencode tool connects HarnessAgent to OpenCode through a sandboxed bridge. Prior to version 1.0.28, the tool relay authorizes requests from any process whose command line contains an allowed helper script path host-tool-mcp.mjs. This allows untrusted code executing in the...

CVE-2026-64650

The @ai-sdk/harness-opencode tool is an HarnessV1 adapter backed by @openai/codex-sdk, which drives the codex command line interface. Prior to version 1.0.29, the tool relay authorizes requests from any process whose command line contains an allowed helper script path the Codex CLI shim. This...

CVE-2026-55626

creationtimestamp| type| source ---|---|--- 2026-07-20 21:16:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr47p6qwva2o...

EUVD-2026-40269

brace-expansion: DoS via exponential-time expansion of consecutive non-expanding groups...

brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups

Summary brace-expansion's expand exhibits exponential-time - O2ⁿ - behavior in the number of consecutive non-expanding groups. A short, all-ASCII input 90 bytes/30 groups blocks the calling thread for minutes; a slightly longer input hangs it effectively indefinitely. Because the dominant consume...

GHSA-3JXR-9VMJ-R5CP brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups

Summary brace-expansion's expand exhibits exponential-time - O2ⁿ - behavior in the number of consecutive non-expanding groups. A short, all-ASCII input 90 bytes/30 groups blocks the calling thread for minutes; a slightly longer input hangs it effectively indefinitely. Because the dominant consume...

CVE-2026-64650

The CVE concerns the @ai-sdk/harness-opencode tool (HarnessV1 adapter backed by @openai/codex-sdk) that drives the codex CLI. Prior to version 1.0.29, it relayed requests from any process whose command line contained an allowed helper script path (Codex CLI shim), allowing untrusted sandbox code ...

CVE-2026-64650 AI SDK Codex Harness Tool Relay Authorization Bypass

The @ai-sdk/harness-opencode tool is an HarnessV1 adapter backed by @openai/codex-sdk, which drives the codex command line interface. Prior to version 1.0.29, the tool relay authorizes requests from any process whose command line contains an allowed helper script path the Codex CLI shim. This...

CVE-2026-64651 AI SDK OpenCode Harness Tool Relay Authorization Bypass

The @ai-sdk/harness-opencode tool connects HarnessAgent to OpenCode through a sandboxed bridge. Prior to version 1.0.28, the tool relay authorizes requests from any process whose command line contains an allowed helper script path host-tool-mcp.mjs. This allows untrusted code executing in the...

CVE-2026-64651 AI SDK OpenCode Harness Tool Relay Authorization Bypass

The @ai-sdk/harness-opencode tool connects HarnessAgent to OpenCode through a sandboxed bridge. Prior to version 1.0.28, the tool relay authorizes requests from any process whose command line contains an allowed helper script path host-tool-mcp.mjs. This allows untrusted code executing in the...

CVE-2026-64651

The CVE-2026-64651 entry concerns the @ai-sdk/harness-opencode tool that connects HarnessAgent to OpenCode via a sandboxed bridge. Before version 1.0.28, the tool would relay requests from any process whose command line included an allowed helper script path (host-tool-mcp.mjs), enabling untruste...

Tornado: Quadratic DoS via Repeated Header Coalescing

Summary The HTTPHeaders.add method in Tornado accumulates values using string concatenation when the same header name is repeated. Due to Python string immutability, each concatenation copies the entire string, resulting in On² time complexity. Given Tornado's single event loop architecture, a...

CVE-2026-64192

creationtimestamp| type| source ---|---|--- 2026-07-20 18:22:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3vyzkyyq2i...

CVE-2026-61548

creationtimestamp| type| source ---|---|--- 2026-07-20 17:42:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mr3trxldl322...

CVE-2026-63837

A flaw was found in the Linux kernel's Elastic Network Adapter ENA driver. The driver's Precision Time Protocol PTP Hardware Clock PHC support, specifically the enaphcgettimex64 function, fails to check the return code of an internal timestamp retrieval function. This oversight can lead to...