https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:31:05 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-342958 EUVD-2026-342958 https://cve.radiocsirt.org/vuln/euvd-2026-342958 https://cve.radiocsirt.org/vuln/fkie_cve-2026-18140 <p>Uncontrolled recursion in the unknown-key skip path of the aws-smithy-json runtime crate before 0.62.7, which the smithy-rs code generator invokes from every generated struct deserializer, might allow remote unauthenticated users to cause a denial of service (process abort via stack exhaustion) via a single small HTTP request containing deeply nested JSON to a smithy-rs generated server.</p> <p>To remediate this issue, users should upgrade to aws-smithy-json 0.62.7 or later and rebuild.</p> <p>Uncontrolled recursion in the unknown-key skip path of the aws-smithy-json runtime crate before 0.62.7, which the smithy-rs code generator invokes from every generated struct deserializer, might allow remote unauthenticated users to cause a denial of service (process abort via stack exhaustion) via a single small HTTP request containing deeply nested JSON to a smithy-rs generated server.</p> <p>To remediate this issue, users should upgrade to aws-smithy-json 0.62.7 or later and rebuild.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-18140 https://cve.radiocsirt.org/vuln/rhsa-2026:66521 <p>github.com/moby/buildkit: BuildKit: Denial of Service via malicious client request github.com/moby/go-archive: moby/go-archive: Arbitrary file write via link following in tar extraction aws-smithy-json: aws-smithy-json: Denial of Service via uncontrolled recursion with deeply nested JSON github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Denial of Service via crafted multi-value baggage headers encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey golang.org/x/crypto/s…</p> <p>github.com/moby/buildkit: BuildKit: Denial of Service via malicious client request github.com/moby/go-archive: moby/go-archive: Arbitrary file write via link following in tar extraction aws-smithy-json: aws-smithy-json: Denial of Service via uncontrolled recursion with deeply nested JSON github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Denial of Service via crafted multi-value baggage headers encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey golang.org/x/crypto/s…</p> https://cve.radiocsirt.org/vuln/rhsa-2026:66521