https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 15:41:33 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1233 certfr-2026-avi-1233 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1233 https://cve.radiocsirt.org/vuln/euvd-2026-261795 EUVD-2026-261795 https://cve.radiocsirt.org/vuln/euvd-2026-261795 https://cve.radiocsirt.org/vuln/fkie_cve-2025-13466 <p>body-parser 2.2.0 is vulnerable to denial of service due to inefficient handling of URL-encoded bodies with very large numbers of parameters. An attacker can send payloads containing thousands of parameters within the default 100KB request size limit, causing elevated CPU and memory usage. This can lead to service slowdown or partial outages under sustained malicious traffic. This issue is addressed in version 2.2.1.</p> <p>body-parser 2.2.0 is vulnerable to denial of service due to inefficient handling of URL-encoded bodies with very large numbers of parameters. An attacker can send payloads containing thousands of parameters within the default 100KB request size limit, causing elevated CPU and memory usage. This can lead to service slowdown or partial outages under sustained malicious traffic. This issue is addressed in version 2.2.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-13466 https://cve.radiocsirt.org/vuln/ghsa-wqch-xfxh-vrr4 <p><strong>Affected:</strong> npm: body-parser</p> <p>### Impact</p> <p>body-parser 2.2.0 is vulnerable to denial of service due to inefficient handling of URL-encoded bodies with very large numbers of parameters. An attacker can send payloads containing thousands of parameters within the default 100KB request size limit, causing elevated CPU and memory usage. This can lead to service slowdown or partial outages under sustained malicious traffic.</p> <p>### Patches</p> <p>This issue is addressed in version 2.2.1.</p> <p><strong>Affected:</strong> npm: body-parser</p> <p>### Impact</p> <p>body-parser 2.2.0 is vulnerable to denial of service due to inefficient handling of URL-encoded bodies with very large numbers of parameters. An attacker can send payloads containing thousands of parameters within the default 100KB request size limit, causing elevated CPU and memory usage. This can lead to service slowdown or partial outages under sustained malicious traffic.</p> <p>### Patches</p> <p>This issue is addressed in version 2.2.1.</p> https://cve.radiocsirt.org/vuln/ghsa-wqch-xfxh-vrr4 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-13466 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: node-body-parser, Ubuntu:18.04:LTS: node-body-parser, Ubuntu:20.04:LTS: node-body-parser, Ubuntu:22.04:LTS: node-body-parser, Ubuntu:24.04:LTS: node-body-parser, Ubuntu:25.10: node-body-parser, Ubuntu:26.04:LTS: node-body-parser</p> <p>body-parser 2.2.0 is vulnerable to denial of service due to inefficient handling of URL-encoded bodies with very large numbers of parameters. An attacker can send payloads containing thousands of parameters within the default 100KB request size limit, causing elevated CPU and memory usage. This can lead to service slowdown or partial outages under sustained malicious traffic. This issue is addressed in version 2.2.1.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: node-body-parser, Ubuntu:18.04:LTS: node-body-parser, Ubuntu:20.04:LTS: node-body-parser, Ubuntu:22.04:LTS: node-body-parser, Ubuntu:24.04:LTS: node-body-parser, Ubuntu:25.10: node-body-parser, Ubuntu:26.04:LTS: node-body-parser</p> <p>body-parser 2.2.0 is vulnerable to denial of service due to inefficient handling of URL-encoded bodies with very large numbers of parameters. An attacker can send payloads containing thousands of parameters within the default 100KB request size limit, causing elevated CPU and memory usage. This can lead to service slowdown or partial outages under sustained malicious traffic. This issue is addressed in version 2.2.1.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-13466 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2909 <p>Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um beliebigen Programmcode auszuführen, um Dateien zu manipulieren, um einen Denial of Service Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um beliebigen Programmcode auszuführen, um Dateien zu manipulieren, um einen Denial of Service Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2909