https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 17:10:39 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-357984 EUVD-2026-357984 https://cve.radiocsirt.org/vuln/euvd-2026-357984 https://cve.radiocsirt.org/vuln/fkie_cve-2026-42570 <p>Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn&#39;t sufficient for the job. From version 5.6.3 to before version 5.8.1, devalue.parse could, due to quirks in some JavaScript engines, be convinced to allocate much more memory than was needed when deserializing sparse arrays, leading to excessive memory consumption. This issue has been patched in version 5.8.1.</p> <p>Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn&#39;t sufficient for the job. From version 5.6.3 to before version 5.8.1, devalue.parse could, due to quirks in some JavaScript engines, be convinced to allocate much more memory than was needed when deserializing sparse arrays, leading to excessive memory consumption. This issue has been patched in version 5.8.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-42570 https://cve.radiocsirt.org/vuln/ghsa-77vg-94rm-hx3p <p><strong>Affected:</strong> npm: devalue</p> <p>`devalue.parse` could, due to quirks in some JavaScript engines, be convinced to allocate much more memory than was needed when deserializing sparse arrays, leading to excessive memory consumption.</p> <p><strong>Affected:</strong> npm: devalue</p> <p>`devalue.parse` could, due to quirks in some JavaScript engines, be convinced to allocate much more memory than was needed when deserializing sparse arrays, leading to excessive memory consumption.</p> https://cve.radiocsirt.org/vuln/ghsa-77vg-94rm-hx3p https://cve.radiocsirt.org/vuln/rhsa-2026:37272 <p>image-size: image-size: Denial of Service due to infinite loop when processing specially crafted images. golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API devalue: devalue: Excessive memory consumption via deserialization of sparse arrays next.js: Next.js: Information disclosure due to middleware bypass in Pages Router with i18n Next.js: Next.js: Authorization bypass via crafted query parameters next.js: Next.js: Unauthorized access to protected content via middleware bypass Next.js: Next.js: Denial of Service via Image Optimization API Next.js: Next.js: Server-Side Request Forgery via crafted WebSocket upgrade requests next.js: Next.js: Denial of Service via crafted POST requests to server actions next.js: Next.js: Information disclosure via security fix bypass in middleware with Turbopack ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray` ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments</p> <p>image-size: image-size: Denial of Service due to infinite loop when processing specially crafted images. golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API devalue: devalue: Excessive memory consumption via deserialization of sparse arrays next.js: Next.js: Information disclosure due to middleware bypass in Pages Router with i18n Next.js: Next.js: Authorization bypass via crafted query parameters next.js: Next.js: Unauthorized access to protected content via middleware bypass Next.js: Next.js: Denial of Service via Image Optimization API Next.js: Next.js: Server-Side Request Forgery via crafted WebSocket upgrade requests next.js: Next.js: Denial of Service via crafted POST requests to server actions next.js: Next.js: Information disclosure via security fix bypass in middleware with Turbopack ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray` ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments</p> https://cve.radiocsirt.org/vuln/rhsa-2026:37272