Search Vulnerabilities

Hulumi: Drift classifier fails open on adapter errors and over-promotes Mixed verdicts

Dbus-broker: dbus-broker: session bus denial of service via emfile during peer setup

CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin

Excelize: Negative shared-string index causes panic in GetCellValue and GetRows

CoreWCF: Kafka consume pump halts permanently on a Kafka tombstone (null-value record), causing persistent endpoint denial of service.

Mistune directives/include: mutual `.. include::` recursion crashes the renderer with `RecursionError`, denial of service via two attacker-controll...

ImageMagick: Heap Buffer Overflow in ImageMagick MVG decoder

Nimiq network-libp2p: Untrusted peer can wedge DHT

Routinator crashes on specifically crafted RRDP XML files

Routinator exits when accepting an incoming HTTP or RTR connection fails

Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws

PyJWT: PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)

free5GC: NEF crashes via logger.Fatal on PFD notification delivery failure (attacker-controlled notifyUri)

free5GC: NRF POST /oauth2/token structured-form parser type-confusion panic family (Reflect.Set on incompatible types)

opentelemetry-js: Prometheus exporter process crash via malformed HTTP request

IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Fie...

Granian: DoS via WSGI response header panic

multiparty vulnerable to Denial of Service via Uncaught Exception in filename* parameter parsing

nimiq-primitives: Node crash due to missing interlink validation in election macro block proposals

.NET Framework Denial of Service Vulnerability