CVE-2026-115398

Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by TarFileSystem and ZipFileSystem, which store unbounded archive entries. Attackers can persuade a user to open or batch-import a crafted TAR or ZIP archive with excessive entries to...

CVE-2026-115397

Ghidra before 12.2 contains a resource allocation without limits vulnerability in ExtensionUtils.unzipToInstallationFolder that extracts every extension ZIP entry without limiting file count. Attackers who persuade a user to install a crafted extension archive with many files can exhaust filesyst...

CVE-2026-115395

Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in ThemeReader.readZipTheme that extracts unlimited theme ZIP entries to the images directory. Attackers can persuade users to import a crafted theme archive with many small files, exhausting inodes and disk space...

EUVD-2026-108334

Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by TarFileSystem and ZipFileSystem, which store unbounded archive entries. Attackers can persuade a user to open or batch-import a crafted TAR or ZIP archive with excessive entries to...

CVE-2026-115398 Ghidra before 12.2 Denial of Service via TAR and ZIP File System Mount

Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by TarFileSystem and ZipFileSystem, which store unbounded archive entries. Attackers can persuade a user to open or batch-import a crafted TAR or ZIP archive with excessive entries to...

CVE-2026-115398

Ghidra versions prior to 12.2 are susceptible to a Denial of Service vulnerability caused by resource allocation without limits in the FileSystemIndexHelper component. This component, utilized by TarFileSystem and ZipFileSystem , fails to restrict the number of archive entries it stores. An attac...

CVE-2026-115398 Ghidra before 12.2 Denial of Service via TAR and ZIP File System Mount

Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by TarFileSystem and ZipFileSystem, which store unbounded archive entries. Attackers can persuade a user to open or batch-import a crafted TAR or ZIP archive with excessive entries to...

EUVD-2026-108333

Ghidra before 12.2 contains a resource allocation without limits vulnerability in ExtensionUtils.unzipToInstallationFolder that extracts every extension ZIP entry without limiting file count. Attackers who persuade a user to install a crafted extension archive with many files can exhaust filesyst...

CVE-2026-115397

Ghidra versions before 12.2 are vulnerable to a resource allocation flaw in the ExtensionUtils.unzipToInstallationFolder() function. The component fails to limit the file count when extracting entries from extension ZIP archives. An attacker could trick a user into installing a crafted archive co...

CVE-2026-115397 Ghidra before 12.2 Denial of Service via Extension Archive Install

Ghidra before 12.2 contains a resource allocation without limits vulnerability in ExtensionUtils.unzipToInstallationFolder that extracts every extension ZIP entry without limiting file count. Attackers who persuade a user to install a crafted extension archive with many files can exhaust filesyst...

CVE-2026-115395

Ghidra versions 10.3 before 12.2 are vulnerable to a resource allocation without limits flaw in ThemeReader.readZipTheme() . This vulnerability allows an attacker to cause a denial of service by persuading a user to import a crafted theme ZIP archive containing a massive number of small files. Th...

CVE-2026-115395 Ghidra 10.3 before 12.2 Denial of Service via ThemeReader.readZipTheme()

Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in ThemeReader.readZipTheme that extracts unlimited theme ZIP entries to the images directory. Attackers can persuade users to import a crafted theme archive with many small files, exhausting inodes and disk space...

EUVD-2026-108331

Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in ThemeReader.readZipTheme that extracts unlimited theme ZIP entries to the images directory. Attackers can persuade users to import a crafted theme archive with many small files, exhausting inodes and disk space...

CVE-2026-96365

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform allows Excessive Allocation. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1...

EUVD-2026-107831

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform allows Excessive Allocation. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in GifImagePlugin.seek when processing a multi-frame GIF image. The decompression bomb check calls Image.decompressionbombcheck but, prior to the fix, assigns the oversized dimensions...

Security Bulletin: Multiple Vulnerabilities have been found in IBM Guardium Data Protection, including DataLake deployments

Summary Multiple Vulnerabilities have been addressed in IBM Guardium Data Protection, including DataLake deployments Vulnerability Details CVEID:CVE-2026-66053 DESCRIPTION: Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings. This issue affects...

CVE-2026-107564: Allocation of Resources Without Limits or Throttling

An unauthenticated remote attacker may use an allocation of resources without limits or throttling weakness in the affected product to cause high CPU load leading to a denial of service...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: tomcat (UTSA-2026-130129)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130129 advisory. Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1...

BIT-THRIFT-2026-96990 Apache Thrift: Erlang thrift_json_protocol reads a whole message with no size bound

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Erlang bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...