Most recent entries from all

EUVD-2026-188221

fkie_cve-2023-26141

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service (DoS) due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests.

GHSA-3qc2-v3hp-6cv8 — sidekiq Denial of Service vulnerability

Affected: RubyGems: sidekiq

Versions of the package sidekiq before 7.1.3 and 6.5.10 are vulnerable to Denial of Service (DoS) due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests.

gsd-2023-26141

RHSA-2024:0797 — Red Hat Security Advisory: Satellite 6.14.2 Async Security Update

mosquitto: memory leak leads to unresponsive broker mosquitto: memory leak leads to unresponsive broker gRPC: file descriptor exhaustion leads to denial of service jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies sidekiq: DoS in dashboard-charts mosquitto: memory leak leads to unresponsive broker jetty: Improper addition of quotation marks to user inputs in CgiServlet curl: heap based buffer overflow in the SOCKS5 proxy handshake jetty: Improper validation of HTTP/1 content-length rubygem-puma: HTTP request smuggling when parsing chunked transfer encoding bodies and zero-length content-length headers

Withdrawn: UBUNTU-CVE-2023-26141

Withdrawn by the publisher.

Affected: Ubuntu:Pro:16.04:LTS: ruby-sidekiq, Ubuntu:Pro:18.04:LTS: ruby-sidekiq, Ubuntu:Pro:20.04:LTS: ruby-sidekiq, Ubuntu:22.04:LTS: ruby-sidekiq, Ubuntu:24.04:LTS: ruby-sidekiq