https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:21:45 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-06542 bdu:2024-06542 https://cve.radiocsirt.org/vuln/bdu:2024-06542 https://cve.radiocsirt.org/vuln/euvd-2026-12640 EUVD-2026-12640 https://cve.radiocsirt.org/vuln/euvd-2026-12640 https://cve.radiocsirt.org/vuln/fkie_cve-2022-3433 <p>The aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse this flaw to produce a hash collision in the underlying unordered-containers library by sending specially crafted JSON data, resulting in a denial of service.</p> <p>The aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse this flaw to produce a hash collision in the underlying unordered-containers library by sending specially crafted JSON data, resulting in a denial of service.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-3433 https://cve.radiocsirt.org/vuln/ghsa-p383-f595-x4qw <p>The aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse this flaw to produce a hash collision in the underlying unordered-containers library by sending specially crafted JSON data, resulting in a denial of service.</p> <p>The aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse this flaw to produce a hash collision in the underlying unordered-containers library by sending specially crafted JSON data, resulting in a denial of service.</p> https://cve.radiocsirt.org/vuln/ghsa-p383-f595-x4qw https://cve.radiocsirt.org/vuln/gsd-2022-3433 gsd-2022-3433 https://cve.radiocsirt.org/vuln/gsd-2022-3433 https://cve.radiocsirt.org/vuln/hsec-2023-0001 <p><strong>Affected:</strong> Hackage: aeson</p> <p># Hash flooding vulnerability in aeson</p> <p>*aeson* was vulnerable to hash flooding (a.k.a. hash DoS). The issue is a consequence of the HashMap implementation from *unordered-containers*. It results in a denial of service through CPU consumption. This technique has been used in real-world attacks against a variety of languages, libraries and frameworks over the years.</p> <p><strong>Affected:</strong> Hackage: aeson</p> <p># Hash flooding vulnerability in aeson</p> <p>*aeson* was vulnerable to hash flooding (a.k.a. hash DoS). The issue is a consequence of the HashMap implementation from *unordered-containers*. It results in a denial of service through CPU consumption. This technique has been used in real-world attacks against a variety of languages, libraries and frameworks over the years.</p> https://cve.radiocsirt.org/vuln/hsec-2023-0001 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-3433 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: haskell-aeson, Ubuntu:18.04:LTS: haskell-aeson, Ubuntu:20.04:LTS: haskell-aeson, Ubuntu:22.04:LTS: haskell-aeson</p> <p>The aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse this flaw to produce a hash collision in the underlying unordered-containers library by sending specially crafted JSON data, resulting in a denial of service.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: haskell-aeson, Ubuntu:18.04:LTS: haskell-aeson, Ubuntu:20.04:LTS: haskell-aeson, Ubuntu:22.04:LTS: haskell-aeson</p> <p>The aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse this flaw to produce a hash collision in the underlying unordered-containers library by sending specially crafted JSON data, resulting in a denial of service.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-3433