Most recent entries from all

CLEANSTART-2026-YD02167 — pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential…

2026-10-02T16:33:10.535711+00:00

Affected: CleanStart: wildfly

Security vulnerability affects the wildfly package. A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service.

EUVD-2026-348899

2026-10-02T16:33:10.535772+00:00

EUVD-2026-348899

fkie_cve-2026-66273

2026-10-02T16:33:10.535789+00:00

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service.

This issue affects Apache Qpid Proton-J: through 0.34.1.

Users are recommended to upgrade to version 0.35.0, which fixes the issue.

GHSA-wr2r-m36x-734x

2026-10-02T16:33:10.535815+00:00

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service.

This issue affects Apache Qpid Proton-J: through 0.34.1.

Users are recommended to upgrade to version 0.35.0, which fixes the issue.

RHSA-2026:66488 — Red Hat Security Advisory: Red Hat AMQ Broker 7.14.1 release and security update

2026-10-02T16:33:10.535831+00:00

bouncycastle: BC-JAVA: GOSTCTR implementation unable to process more than 255 blocks correctly bouncycastle: BC-JAVA: LDAP injection vulnerability in LDAPStoreHelper.java bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid webpack-dev-server: webpack-dev-server: Information disclosure and denial of service via improper proxy configuration jetty-security: Eclipse Jetty: Authentication bypass via Digest authentication encoding collision jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections form-data: form-data: Form field override via CRLF injection undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization org.apache.logging.log4j/log4j-core: Apache Log4j Core: Log injection via CRLF sequences due to configuration attribute renames org.apache.logging.log4j/log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging org.apache.logging.log4j: Apache Log4j JsonTemplateLayout: Denial of Service via invalid JSON output micrometer: micrometer-core: Micrometer: Denial of Service via specially crafted gRPC requests micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests jdbc.postgresql.org: pgjdbc: Client…