CVE-2026-16265

The WP Maps WordPress plugin before 4.9.7 does not perform a capability check in one of its AJAX actions and does not restrict the operation it dispatches, allowing users with a Subscriber account to trigger uncontrolled recursion that exhausts server resources, resulting in a Denial of Service...

PT-2026-68873

Name of the Vulnerable Software and Affected Versions WP Maps versions prior to 4.9.7 Description An issue exists where the plugin fails to perform a capability check in an AJAX action and does not restrict the dispatched operation. This allows users with a Subscriber account to trigger...

CVE-2026-16265: Uncontrolled Resource Consumption

The WP Maps WordPress plugin before 4.9.7 does not perform a capability check in one of its AJAX actions and does not restrict the operation it dispatches, allowing users with a Subscriber account to trigger uncontrolled recursion that exhausts server resources, resulting in a Denial of Service...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion in the aprxmlquoteelem function. An attacker can cause a crash and potentially execute arbitrary code by providing specially crafted XML input that triggers excessive stack recursion. Remediation Upgrade apr-util ...

EulerOS 2.0 SP13 : libxml2 (EulerOS-SA-2026-3030)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the function xmlParseSGMLCatal...

No title provided

A flaw was found in axios. A remote attacker could exploit an uncontrolled recursion vulnerability in the formDataToJSON function by supplying FormData with field names containing deeply nested bracket segments. This could exhaust the JavaScript call stack, leading to a RangeError and causing a...

CVE-2026-61483

UNSUPPORTED WHEN ASSIGNED Uncontrolled Recursion vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to...

Uncontrolled Recursion

Overview org.apache.qpid:proton-j is a lightweight messaging library. Affected versions of this package are vulnerable to Uncontrolled Recursion through unbounded nesting in the type processing. An attacker can cause a stack overflow and disrupt service availability by sending specially crafted...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through unbounded nesting of types in the process. An attacker can cause a stack overflow and disrupt service availability by sending specially crafted data prior to authentication. Remediation Upgrade...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through unbounded nesting of types in the process. An attacker can cause a stack overflow and disrupt service availability by sending specially crafted input prior to authentication. Remediation Upgrade...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion due to unchecked AMQP 1.0 type nesting in the SectionDecoderImpl and related codec constructors in broker-plugins/amqp-1-0-protocol. An unauthenticated attacker can trigger a StackOverflowError by sending a crafte...

EUVD-2026-53168

UNSUPPORTED WHEN ASSIGNED Uncontrolled Recursion vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to...

CVE-2026-61483

UNSUPPORTED WHEN ASSIGNED Uncontrolled Recursion vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to...

PT-2026-68029

Name of the Vulnerable Software and Affected Versions Apache Lucy affected versions not specified Description An uncontrolled recursion issue exists in Apache Lucy. Uncontrolled recursion occurs when a function calls itself without a proper termination condition, potentially leading to a stack...

CVE-2026-15996: Uncontrolled Recursion

A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause excessive CPU consumption and exhaust the pool of request-handling worker processes by sending a crafted form-encoded HTTP POST request containing deeply nested parameter...

CVE-2026-61483: Uncontrolled Recursion

UNSUPPORTED WHEN ASSIGNED Uncontrolled Recursion vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to...

CVE-2026-66274: Uncontrolled Recursion

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the issue...

Uncontrolled Recursion

Overview Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Affected versions of this package are vulnerable to Uncontrolled Recursion via GEOSGeometry when parsing deeply nested GEOMETRYCOLLECTION objects provided as well-known text WKT,...

CVE-2026-46714

Misskey web client (versions 8.63.0 and later prior to 2026.5.4) is vulnerable to a DoS caused by a malformed theme triggering uncontrolled recursion during theme compilation, which can slow or crash the client. The issue is fixed in version 2026.5.4. Remediation is to upgrade to 2026.5.4 or late...

CVE-2026-46714 Misskey: Denial of Service via Uncontrolled Recursion in Theme Compilation

Misskey is an open source, federated social media platform. IVersions 8.63.0 and later, but prior to 2026.5.4, contain a vulnerability that can cause the Misskey web client to slow down or crash when it applies a malformed theme. This issue has been fixed in version 2026.5.4...