Lucene search
+L

3 matches found

PyPA
PyPA
•added 2026/07/13 3:15 p.m.•33 views

eml_parser has recursion DoS via nested message/rfc822 attachments

SummaryEmlParser.getrawbodytext recurses unconditionally for every nested message/rfc822 attachment without any depth limit. An attacker who can supply a badly crafted EML file with approximately 120 nested message/rfc822 parts triggers an unhandled RecursionError and aborts parsing of the messag...

6.3CVSS5.9AI score0.00428EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
•added 2026/06/05 12:00 a.m.•27 views

PT-2026-47601

Name of the Vulnerable Software and Affected Versions netty-codec-redis versions prior to 4.1.135.Final netty-codec-redis versions prior to 4.2.15.Final Description A denial of service can occur when an attacker sends a crafted Redis payload containing deeply nested arrays. The...

7.8CVSS7.2AI score0.00849EPSS
SaveExploits0References289
OSV
OSV
•added 2026/03/03 11:15 p.m.•15 views

UBUNTU-CVE-2026-27601

Underscore.js is a utility-belt library for JavaScript. Prior to 1.13.8, the .flatten and .isEqual functions use recursion without a depth limit. Under very specific conditions, detailed below, an attacker could exploit this in a Denial of Service DoS attack by triggering a stack overflow...

8.2CVSS6.5AI score0.01025EPSS
SaveExploits1References5
Rows per page
Query Builder