2227 matches found
PT-2026-102377
Name of the Vulnerable Software and Affected Versions brace-expansion versions prior to 1.1.20 brace-expansion versions prior to 2.1.6 brace-expansion versions prior to 3.0.8 brace-expansion versions prior to 5.0.11 Description Deeply nested brace groups supplied as an untrusted pattern can cause...
CVE-2026-102278: Uncontrolled Resource Consumption
The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand to recurse once per nesting level at comma-member and single-set expansion sites, exhausting the native stack before...
CVE-2026-75758
A flaw was found in the Elixir standard library. An attacker who controls a list can trigger an uncontrolled recursion vulnerability by passing a specially crafted list to functions like inspect/1, List.tostring/1, or List.tocharlist/1. This leads to the exhaustion of a BEAM node's memory,...
Uncontrolled Recursion
Overview nodemailer is an Easy as cake e-mail sending from your Node.js applications Affected versions of this package are vulnerable to Uncontrolled Recursion via parseAddresses in src/mime-node/index.ts when a recipient field is supplied as a deeply nested array. The native array-to-string...
Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to Uncontrolled Recursion due to IBM Java (CVE-2026-16440)
Summary IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to Uncontrolled Recursion due to IBM Java. Vulnerability Details CVEID:CVE-2026-16440 DESCRIPTION: In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation...
Uncontrolled Recursion
Overview org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol is an AMQP 0-8, 0-9 and 0-9-1 protocol broker plug-in. Affected versions of this package are vulnerable to Uncontrolled Recursion through unbounded nesting of types in the field-table processing. An attacker can cause a stack overflow...
Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in axios (CVE-2026-67312, CVE-2026-67313, CVE-2026-67316, CVE-2026-67317, CVE-2026-67319)
Summary Multiple vulnerabilities in the axios HTTP client library CVE-2026-67312, CVE-2026-67313, CVE-2026-67316, CVE-2026-67317, CVE-2026-67319 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 1.18.0. Vulnerability Details CVEID:CVE-2026-67312...
ROS-20260925-73-0148
The vulnerability of the BTFID function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for Linux’s operating system, is related to an uncontrolled recursion. Exploiting this vulnerability could allow a attacker to cause a service failure...
Adobe Bridge 15.1.7 < 15.1.8 / 16.x < 16.0.7 Multiple Vulnerabilities (APSB26-148)
The version of Adobe Bridge installed on the remote host is prior to 15.1.8 or 16.0.7. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb26-148 advisory. - Bridge is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution...
CVE-2026-61811: Uncontrolled Recursion
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. From 3.8.0 until 4.14.7, the getattributes function in src/osxml/osxml.c recursively processes every XML attribute without a depth limit while allocating two large local buffers ...
Oracle Linux 8 : postgresql:12 (ELSA-2026-69924)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69924 advisory. - Add backport of CVE-2025-8714 Orabug: 38667546 - Resolves: CVE-2026-14662, CVE-2026-14664, CVE-2026-14668, CVE-2026-14669 - Resolves: CVE-2026-14670...
CVE-2026-91863
A flaw was found in Apache Neethi. A remote attacker could exploit this vulnerability by sending a specially crafted WS-Policy document containing deeply nested policy elements. This crafted document can bypass the parser's nesting-depth limit, leading to uncontrolled recursion that exhausts the...
CVE-2026-78253
A flaw was found in Qt. An attacker can exploit uncontrolled recursion in the QXmlStreamReader::readElementText function by providing a specially crafted XML document. This can lead to a denial of service DoS, causing the application to crash due to stack exhaustion...
CVE-2026-78253
Uncontrolled recursion in QXmlStreamReader::readElementText in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted XML document...
CVE-2026-78253
Uncontrolled recursion in QXmlStreamReader::readElementText in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted XML document...
UBUNTU-CVE-2026-78253
Uncontrolled recursion in QXmlStreamReader::readElementText in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted XML document...
EUVD-2026-85238
Uncontrolled recursion in QXmlStreamReader::readElementText in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted XML document...
CVE-2026-78253
Uncontrolled recursion in QXmlStreamReader::readElementText in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted XML document...
CVE-2026-78253: Uncontrolled Recursion
Uncontrolled recursion in QXmlStreamReader::readElementText in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted XML document...
postgresql:12 security update
12.22-10.0.1 - Add backport of CVE-2025-8714 Orabug: 38667546 12.22-10 - Backport fixes for multiple CVEs - Resolves: CVE-2026-14662, CVE-2026-14664, CVE-2026-14668, CVE-2026-14669 - Resolves: CVE-2026-14670, CVE-2026-14671, CVE-2026-14677, CVE-2026-14679 - Resolves: CVE-2026-14680, CVE-2026-1574...