[SECURITY] Fedora 40 Update: ghc-toml-parser-1.3.2.0-29.fc40

TOML parser using generated lexers and parsers with careful attention to the TOML 1.0.0 semantics for defining tables...

Fedora: Security Advisory for ghc-toml-parser (FEDORA-2024-7d83cbccb6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

com.fasterxml.jackson.dataformat: jackson-dataformat-toml is vulnerable to Denial of Service DoS attacks. The vulnerability is due a lack of a max nesting depth; If the TOML parser is run on user supplied input an attacker is able to cause a stackoverflow, resulting in an application crash...

Stellar.org: heap-buffer-overflow (READ of size 1) in cpptoml::parser::consume_whitespace()

@geeknik found a heap buffer overflow in stellar-core's toml parser. This is low severity because toml parser is only used to parse config file of stellar-core...