Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.7In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage component built its node tree with no bound on its depth.EPSS 0.5%Oct 15, 2026
- High7.5An issue in lottie-android 6.7.1 and earlier (and master) allows a remote attacker to cause a denial of service via a crafted Lottie animation JSON containing a cyclic…Oct 15, 2026
- High8.7In Symfony YAML prior to versions 5.4.54, 6.4.45, 7.4.18, and 8.1.6, Yaml\Parser::lexInlineStructure() recursed through lexInlineMapping() and lexInlineSequence() for…EPSS 0.5%Oct 15, 2026
- High7.5kin-openapi is a Go project for handling OpenAPI files.EPSS 0.4%Oct 15, 2026
- Medium6.8OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in SignatureReader.parseType() that allows attackers to exhaust the stack via deeply nested ge…EPSS 0.2%Oct 14, 2026
- Medium6.8OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in ClassWriter.replaceAsmInstructions() that allows attackers to cause denial of service throu…EPSS 0.2%Oct 14, 2026
- Medium6.9ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a stack overflow in the MSL decoder caused by an incorrect depth check that fails to limit recursion.EPSS 0.4%Oct 12, 2026
- High8.2Uncontrolled RecursionEPSS 0.4%Oct 9, 2026
- Medium5.7FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av_encryption_init_info_free() in libavutil/encryption_info.c, which recursively frees AVEncryptionIn…EPSS 0.1%Oct 8, 2026
- High8.7braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards.EPSS 0.8%Sep 18, 2026
- High8.7NLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.decode_obj() that allows attackers to cause denial of service by supplying…EPSS 0.5%Aug 22, 2026
- High7.5Unleash is an open-source feature management platform.EPSS 0.7%Aug 21, 2026
- Medium6.2A flaw was found in p11-kit.EPSS 0.2%Jun 29, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() target_tg_pt_gp_members_…EPSS 0.1%May 28, 2026
- Medium6.5IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a denial-of-service attack due to uncontrolled recursion in the Integrated Language Environment (ILE) compiler.EPSS 0.4%May 27, 2026
- Medium6.3eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information.May 26, 2026
- Medium5.5A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can cause a Stack Exhaustion vulnerability, leading to a denial-of-service condition.May 26, 2026
- Low2.1A vulnerability was determined in postcss-selector-parser up to 6.1.2/7.1.2.May 24, 2026
- High7.5Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Excessive Allocation.May 19, 2026
- High7.5Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Oversized Serialized Data Payloads.May 19, 2026
- Medium6.0Stack exhaustion vulnerability in the MongoDB PHP driver can cause application crashes when processing deeply nested BSON documents in unusual circumstances when the s…May 14, 2026
- High7.1Vvveb before 1.0.8.3 contains an uncontrolled recursion vulnerability in the admin controller dispatch cycle where Base::init() repeatedly invokes permission() on erro…May 14, 2026
- High7.5Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL AF_UNIX socket to achieve sustained denial of service.May 14, 2026
- Medium5.3Uncontrolled Recursion vulnerability in Apache Commons.May 14, 2026
- High7.5protobufjs compiles protobuf definitions into JavaScript (JS) functions.May 13, 2026
98 records · page 1 of 4
PreviousNext