https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:18:58 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-04925 bdu:2020-04925 https://cve.radiocsirt.org/vuln/bdu:2020-04925 https://cve.radiocsirt.org/vuln/brew-travis-cve-2018-16470 <p><strong>Affected:</strong> Homebrew: travis</p> <p>There is a possible DoS vulnerability in the multipart parser in Rack before 2.0.6. Specially crafted requests can cause the multipart parser to enter a pathological state, causing the parser to use CPU resources disproportionate to the request size.</p> <p><strong>Affected:</strong> Homebrew: travis</p> <p>There is a possible DoS vulnerability in the multipart parser in Rack before 2.0.6. Specially crafted requests can cause the multipart parser to enter a pathological state, causing the parser to use CPU resources disproportionate to the request size.</p> https://cve.radiocsirt.org/vuln/brew-travis-cve-2018-16470 https://cve.radiocsirt.org/vuln/certfr-2018-avi-532 certfr-2018-avi-532 https://cve.radiocsirt.org/vuln/certfr-2018-avi-532 https://cve.radiocsirt.org/vuln/cnvd-2018-23633 cnvd-2018-23633 https://cve.radiocsirt.org/vuln/cnvd-2018-23633 https://cve.radiocsirt.org/vuln/euvd-2026-68157 EUVD-2026-68157 https://cve.radiocsirt.org/vuln/euvd-2026-68157 https://cve.radiocsirt.org/vuln/fkie_cve-2018-16470 <p>There is a possible DoS vulnerability in the multipart parser in Rack before 2.0.6. Specially crafted requests can cause the multipart parser to enter a pathological state, causing the parser to use CPU resources disproportionate to the request size.</p> <p>There is a possible DoS vulnerability in the multipart parser in Rack before 2.0.6. Specially crafted requests can cause the multipart parser to enter a pathological state, causing the parser to use CPU resources disproportionate to the request size.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-16470 https://cve.radiocsirt.org/vuln/ghsa-hg78-4f6x-99wq <p><strong>Affected:</strong> RubyGems: rack</p> <p>There is a possible DoS vulnerability in the multipart parser in Rack before 2.0.6. Specially crafted requests can cause the multipart parser to enter a pathological state, causing the parser to use CPU resources disproportionate to the request size.</p> <p><strong>Affected:</strong> RubyGems: rack</p> <p>There is a possible DoS vulnerability in the multipart parser in Rack before 2.0.6. Specially crafted requests can cause the multipart parser to enter a pathological state, causing the parser to use CPU resources disproportionate to the request size.</p> https://cve.radiocsirt.org/vuln/ghsa-hg78-4f6x-99wq https://cve.radiocsirt.org/vuln/gsd-2018-16470 gsd-2018-16470 https://cve.radiocsirt.org/vuln/gsd-2018-16470 https://cve.radiocsirt.org/vuln/opensuse-su-2019:0185-1 <p>Security update for rmt-server</p> <p>Security update for rmt-server</p> https://cve.radiocsirt.org/vuln/opensuse-su-2019:0185-1 https://cve.radiocsirt.org/vuln/rhsa-2019:3172 <p>python-werkzeug: Cross-site scripting in render_full function in debug/tbtools.py python-jinja2: Sandbox escape due to information disclosure via str.format rubygem-rack: Buffer size in multipart parser allows for denial of service dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents foreman: Recover of plaintext password or token for the compute resources foreman: authorization bypasses in foreman-tasks leading to information disclosure python-jinja2: str.format_map allows sandbox escape python-twisted: Improper neutralization of CRLF characters in URIs and HTTP methods katello: registry credentials are captured in plain text during repository discovery</p> <p>python-werkzeug: Cross-site scripting in render_full function in debug/tbtools.py python-jinja2: Sandbox escape due to information disclosure via str.format rubygem-rack: Buffer size in multipart parser allows for denial of service dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents foreman: Recover of plaintext password or token for the compute resources foreman: authorization bypasses in foreman-tasks leading to information disclosure python-jinja2: str.format_map allows sandbox escape python-twisted: Improper neutralization of CRLF characters in URIs and HTTP methods katello: registry credentials are captured in plain text during repository discovery</p> https://cve.radiocsirt.org/vuln/rhsa-2019:3172 https://cve.radiocsirt.org/vuln/suse-su-2019:0272-1 <p>Security update for rmt-server</p> <p>Security update for rmt-server</p> https://cve.radiocsirt.org/vuln/suse-su-2019:0272-1