Lucene search
+L

84 matches found

Tenable Nessus
Tenable Nessus
•added 2026/10/04 12:00 a.m.•16 views

CentOS Linux 7 [TuxCare] Security Update: haproxy (CENTOS7:CLSA-2026:1790671238)

The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1790671238 advisory. - HAProxy before 2.8.2 accepts as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecifi...

8.2CVSS7AI score0.01514EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•8 views

CentOS Linux 8.5 [TuxCare] Security Update: pcs / pcs-snmp Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1790611274)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1790611274 advisory. - A flaw was found in the Pacemaker configuration tool pcs. The pcs daemon was allowing expired accounts, and accounts with expired...

8.8CVSS6.4AI score0.23789EPSS
SaveExploits3References9
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•10 views

AlmaLinux 9.2 [TuxCare] Security Update: haproxy Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1736503350)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1736503350 advisory. - HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, 2.7.x befor...

8.2CVSS7.1AI score0.02147EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•8 views

CentOS Linux 8.4 [TuxCare] Security Update: pcs / pcs-snmp Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1790610952)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1790610952 advisory. - A flaw was found in the Pacemaker configuration tool pcs. The pcs daemon was allowing expired accounts, and accounts with expired...

8.8CVSS6.4AI score0.23789EPSS
SaveExploits3References9
OSV
OSV
•added 2026/09/01 9:30 a.m.•13 views

CLSA-2026-1788255041 TuxCare security update for decode-uri-component (1 CVE)

TuxCare rebuilt decode-uri-component to address 1 CVE. Fixed in 0.2.2-tuxcare.1...

8.7CVSS5.9AI score0.00507EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/01 12:00 a.m.•4 views

PT-2026-89824

TuxCare rebuilt decode-uri-component to address 2 CVEs. Fixed in 0.2.2-tuxcare.1...

5.9AI score
SaveExploits0References1
Patchstack
Patchstack
•added 2026/08/31 10:10 p.m.•13 views

NPM: decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input

NPM: decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input vulnerability discovered by ? in WordPress Npm decode-uri-component versions = 0.4.2...

8.7CVSS5.9AI score0.00507EPSS
SaveExploits0References7Affected Software1
EUVD
EUVD
•added 2026/08/31 10:10 p.m.•27 views

EUVD-2026-40267

decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input...

8.7CVSS5.9AI score0.00507EPSS
SaveExploits0References6
OSV
OSV
•added 2026/08/31 10:10 p.m.•11 views

GHSA-VCC3-GHJQ-M6FR decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input

Impact An attacker who can supply input to decodeUriComponent directly or via a dependency that uses this package on URL/query/path data can cause excessive CPU usage and application unresponsiveness. This is an availability issue; there is no known memory corruption, data disclosure, or remote...

8.7CVSS6.3AI score0.00507EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2026/08/31 10:10 p.m.•25 views

decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input

Impact An attacker who can supply input to decodeUriComponent directly or via a dependency that uses this package on URL/query/path data can cause excessive CPU usage and application unresponsiveness. This is an availability issue; there is no known memory corruption, data disclosure, or remote...

8.7CVSS6.3AI score0.00507EPSS
SaveExploits0References7Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/08/25 6:06 p.m.•12 views

Security Bulletin: Vulnerability in decode-uri-component affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in decode-uri-component has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...

8.7CVSS5.9AI score0.00507EPSS
SaveExploits0Affected Software2
IBM Security Bulletins
IBM Security Bulletins
•added 2026/08/13 9:07 a.m.•16 views

Security Bulletin:Vulnerability in decode-uri affects IBM Netezza Appliance

Summary The decode-uri package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-45822 Vulnerability Details CVEID:CVE-2026-45822 DESCRIPTION: decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode function splits input on...

8.7CVSS6AI score0.00507EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2026/08/04 2:52 p.m.•12 views

CLSA-2026-1780620683 TuxCare security update for decode-uri-component (1 CVE)

TuxCare rebuilt decode-uri-component to address 1 CVE. Fixed in 0.2.0-tuxcare.1...

7.5CVSS6.8AI score0.23789EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2026/08/04 12:00 a.m.•4 views

PT-2026-74956

TuxCare rebuilt decode-uri-component to address 1 CVE. Fixed in 0.2.0-tuxcare.1...

5.9AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/07/02 12:00 a.m.•26 views

Linux Distros Unpatched Vulnerability : CVE-2026-45822

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode function splits input on '%' producing N tokens and calls decodeComponents,...

8.7CVSS5.9AI score0.00507EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/06/30 3:24 p.m.•25 views

CVE-2026-45822

A flaw was found in the decode-uri-component library. This vulnerability allows a remote attacker to trigger a Denial of Service DoS by submitting specially crafted input. The decode function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can le...

8.7CVSS5.9AI score0.00507EPSS
SaveExploits0References6
OSV
OSV
•added 2026/06/30 9:16 a.m.•14 views

AZL-92075 CVE-2026-45822 affecting package js-jquery 3.5.0-4

decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode function splits input on '%' producing N tokens and calls decodeComponents, exhibiting super-linear parsing time: 200 '%ab' tokens takes approximately 0.7s, 700 tokens approximately 6s, and 1400 tokens approximately...

8.7CVSS5.9AI score0.00507EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/30 8:05 a.m.•23 views

CVE-2026-45822

decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode function splits input on '%' producing N tokens and calls decodeComponents, exhibiting super-linear parsing time: 200 '%ab' tokens takes approximately 0.7s, 700 tokens approximately 6s, and 1400 tokens approximately...

8.7CVSS5.9AI score0.00507EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2026/06/30 8:05 a.m.•49 views

CVE-2026-45822

decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode function splits input on '%' producing N tokens and calls decodeComponents, exhibiting super-linear parsing time: 200 '%ab' tokens takes approximately 0.7s, 700 tokens approximately 6s, and 1400 tokens approximately...

8.7CVSS0.00507EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/06/30 8:05 a.m.•19 views

CVE-2026-45822

decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode function splits input on '%' producing N tokens and calls decodeComponents, exhibiting super-linear parsing time: 200 '%ab' tokens takes approximately 0.7s, 700 tokens approximately 6s, and 1400 tokens approximately...

8.7CVSS5.9AI score0.00507EPSS
SaveExploits0References3
Rows per page
Query Builder