Search Vulnerabilities

SurrealDB before 2.2.2 Memory Exhaustion via Nested Functions

SurrealDB before 1.1.0 Uncontrolled Recursion Denial of Service

Zeroconf: Unbounded recursion in DNS compression-pointer decoder allows LAN-local denial of service

Symfony: [Yaml] Harden the parser when handling untrusted input

Apache IoTDB: Unauthenticated unbounded recursion in IoTDB AirGap receiver's E-language prefix parser causes per-connection StackOverflowError

Mistune directives/include: mutual `.. include::` recursion crashes the renderer with `RecursionError`, denial of service via two attacker-controll...

Mojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder

ImageMagick: Stack Overflow in MVG decoder due to missing depth check.

Uncontrolled Recursion in Elasticsearch Leading to Denial of Service

Microsoft.OpenAPI: Circular schema references may terminate OpenAPI parsing

Net::BitTorrent versions through 2.0.1 for Perl allow remote memory exhaustion via deeply nested bencoded input

Uncontrolled recursion over deeply nested Markdown crashes the BEAM in mdex

P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing

jq: stack overflow in deep structural equality

Faraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nested query parameters

MuPDF < 1.27.0-rc1 Stack Exhaustion DoS via EPUB CSS Rendering

MessagePack-CSharp: Denial of service vulnerabilities can swamp the CPU or crash the process with stack and heap overflows

MessagePack-CSharp: MessagePackReader.Skip can recurse without enforcing maximum object graph depth

MessagePack-CSharp: JSON conversion APIs can recurse without consistent depth enforcement

MessagePack-CSharp: DynamicUnionResolver generated deserializers miss depth enforcement