https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 15:13:16 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-35694 EUVD-2026-35694 https://cve.radiocsirt.org/vuln/euvd-2026-35694 https://cve.radiocsirt.org/vuln/fkie_cve-2020-1898 <p>The fb_unserialize function did not impose a depth limit for nested deserialization. That meant a maliciously constructed string could cause deserialization to recurse, leading to stack exhaustion. This issue affected HHVM prior to v4.32.3, between versions 4.33.0 and 4.56.0, 4.57.0, 4.58.0, 4.58.1, 4.59.0, 4.60.0, 4.61.0, 4.62.0.</p> <p>The fb_unserialize function did not impose a depth limit for nested deserialization. That meant a maliciously constructed string could cause deserialization to recurse, leading to stack exhaustion. This issue affected HHVM prior to v4.32.3, between versions 4.33.0 and 4.56.0, 4.57.0, 4.58.0, 4.58.1, 4.59.0, 4.60.0, 4.61.0, 4.62.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-1898 https://cve.radiocsirt.org/vuln/ghsa-86q4-p3xc-6m2h <p>The fb_unserialize function did not impose a depth limit for nested deserialization. That meant a maliciously constructed string could cause deserialization to recurse, leading to stack exhaustion. This issue affected HHVM prior to v4.32.3, between versions 4.33.0 and 4.56.0, 4.57.0, 4.58.0, 4.58.1, 4.59.0, 4.60.0, 4.61.0, 4.62.0.</p> <p>The fb_unserialize function did not impose a depth limit for nested deserialization. That meant a maliciously constructed string could cause deserialization to recurse, leading to stack exhaustion. This issue affected HHVM prior to v4.32.3, between versions 4.33.0 and 4.56.0, 4.57.0, 4.58.0, 4.58.1, 4.59.0, 4.60.0, 4.61.0, 4.62.0.</p> https://cve.radiocsirt.org/vuln/ghsa-86q4-p3xc-6m2h https://cve.radiocsirt.org/vuln/gsd-2020-1898 gsd-2020-1898 https://cve.radiocsirt.org/vuln/gsd-2020-1898 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-1898 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: hhvm, Ubuntu:18.04:LTS: hhvm</p> <p>The fb_unserialize function did not impose a depth limit for nested deserialization. That meant a maliciously constructed string could cause deserialization to recurse, leading to stack exhaustion. This issue affected HHVM prior to v4.32.3, between versions 4.33.0 and 4.56.0, 4.57.0, 4.58.0, 4.58.1, 4.59.0, 4.60.0, 4.61.0, 4.62.0.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: hhvm, Ubuntu:18.04:LTS: hhvm</p> <p>The fb_unserialize function did not impose a depth limit for nested deserialization. That meant a maliciously constructed string could cause deserialization to recurse, leading to stack exhaustion. This issue affected HHVM prior to v4.32.3, between versions 4.33.0 and 4.56.0, 4.57.0, 4.58.0, 4.58.1, 4.59.0, 4.60.0, 4.61.0, 4.62.0.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-1898