CVE-2026-103008

Elasticsearch is vulnerable to Uncontrolled Recursion (CWE-674) , which can lead to a Denial of Service (DoS) . The root cause is an unbounded recursion depth when building and serializing geometry values produced by scripted runtime fields . While text-supplied geometry has nesting limits, geome...

CVE-2026-103008 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to Denial of Service via a specially crafted request that causes the server to construct and process a deeply nested data structure with no bound on recursion depth. Elasticsearch contains an uncontrolled recursion weakness in how it builds...

EUVD-2026-93938

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to Denial of Service via a specially crafted request that causes the server to construct and process a deeply nested data structure with no bound on recursion depth. Elasticsearch contains an uncontrolled recursion weakness in how it builds...

CVE-2026-103006

Elasticsearch is vulnerable to Uncontrolled Recursion (CWE-674) in its search aggregation processing . An authenticated user with read access to a single index can submit a specially crafted request containing deeply nested aggregation definitions. This triggers unbounded recursive execution, exh...

CVE-2026-103006 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested request submitted to the aggregation feature of the search API. Elasticsearch contains an uncontrolled recursion weakness in its search aggregation processing. An authenticated use...

EUVD-2026-93936

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested request submitted to the aggregation feature of the search API. Elasticsearch contains an uncontrolled recursion weakness in its search aggregation processing. An authenticated use...

EUVD-2026-93930

Uncontrolled Recursion CWE-674 in Elasticsearch can allow an authenticated user with low privileges to terminate an Elasticsearch node, resulting in denial of service, via Excessive Allocation CAPEC-130...

CVE-2026-102409 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service

Uncontrolled Recursion CWE-674 in Elasticsearch can allow an authenticated user with low privileges to terminate an Elasticsearch node, resulting in denial of service, via Excessive Allocation CAPEC-130...

CVE-2026-102409

Elasticsearch is vulnerable to Uncontrolled Recursion (CWE-674) leading to a Denial of Service (DoS) via Excessive Allocation (CAPEC-130). This flaw allows an authenticated user with low privileges to terminate an Elasticsearch node. The vulnerability exists in the text chunking functionality int...

CVE-2019-13288

CVE-2019-13288 – Infinite Recursion in Xpdf's Parser::getObj Overview CVE-2019-13288 is a vulnerability identified in Xpdf version 4.01.01 , specifically within the Parser::getObj function in Parser.cc. This flaw can lead to infinite recursion when processing a specially crafted PDF file, resulti...

CVE-2026-40345

deepmerge-ts mergeleft.self, right.self - mergeleft.self, right.self - mergeleft.self, right.self...

Linux Distros Unpatched Vulnerability : CVE-2026-83663

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled Recursion vulnerability in Apache Thrift go bindings. Both Go transports satisfy a read out of a buffered frame and, when that frame yields no...

Linux Distros Unpatched Vulnerability : CVE-2026-96289

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled Recursion vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version...

Linux Distros Unpatched Vulnerability : CVE-2026-94650

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled Recursion vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to versi...

Linux Distros Unpatched Vulnerability : CVE-2026-96288

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled Recursion, Allocation of resources without limits or throttling vulnerability in Apache Thrift Erlang bindings. This issue affects Apache Thrift:...

Linux Distros Unpatched Vulnerability : CVE-2026-85493

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled Recursion vulnerability in Apache Thrift Dart and Java ME bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgra...

CVE-2026-18464

CVE-2026-18464 — WP Maps Pro This repository is intended as a technical reference for an already disclosed vulnerability. It does not include a weaponized denial-of-service script. Overview Item| Details ---|--- CVE| CVE-2026-18464 Product| WP MAPS PRO Affected versions| 6.1.3 Fixed version| 6.1....

CVE-2026-94650

A flaw was found in Apache Thrift. An uncontrolled recursion vulnerability in the C GLib library bindings allows a remote, unauthenticated attacker to send specially crafted input to an affected application. Processing this input triggers excessive nested function calls that exhaust stack memory,...

CVE-2026-96289

Uncontrolled Recursion vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-83663

Uncontrolled Recursion vulnerability in Apache Thrift go bindings. Both Go transports satisfy a read out of a buffered frame and, when that frame yields no payload bytes, read the next frame and call Read again instead of looping. A peer produces such a frame for 4 bytes in TFramedTransport...