https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 06:36:08 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-331373 EUVD-2026-331373 https://cve.radiocsirt.org/vuln/euvd-2026-331373 https://cve.radiocsirt.org/vuln/fkie_cve-2026-53433 <p>fzf is vulnerable to a Denial of Service (DoS) due to inefficient HTTP body processing in the --listen mode due to inefficient HTTP body processing using repeated string concatenation, resulting in quadratic time complexity (O(n²)). A crafted POST request with many small segments can trigger excessive CPU usage during request handling.This allows a single malicious request to monopolize the single‑threaded HTTP server, blocking all other clients and resulting in denial of service.</p> <p>This issue was fixed in version 0.73.1.</p> <p>fzf is vulnerable to a Denial of Service (DoS) due to inefficient HTTP body processing in the --listen mode due to inefficient HTTP body processing using repeated string concatenation, resulting in quadratic time complexity (O(n²)). A crafted POST request with many small segments can trigger excessive CPU usage during request handling.This allows a single malicious request to monopolize the single‑threaded HTTP server, blocking all other clients and resulting in denial of service.</p> <p>This issue was fixed in version 0.73.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-53433 https://cve.radiocsirt.org/vuln/ghsa-mvmf-94v6-879g <p><strong>Affected:</strong> Go: github.com/junegunn/fzf</p> <p>fzf is vulnerable to a Denial of Service (DoS) due to inefficient HTTP body processing in the --listen mode due to inefficient HTTP body processing using repeated string concatenation, resulting in quadratic time complexity (O(n²)). A crafted POST request with many small segments can trigger excessive CPU usage during request handling.This allows a single malicious request to monopolize the single‑threaded HTTP server, blocking all other clients and resulting in denial of service.</p> <p>This issue was fixed in version 0.73.1.</p> <p><strong>Affected:</strong> Go: github.com/junegunn/fzf</p> <p>fzf is vulnerable to a Denial of Service (DoS) due to inefficient HTTP body processing in the --listen mode due to inefficient HTTP body processing using repeated string concatenation, resulting in quadratic time complexity (O(n²)). A crafted POST request with many small segments can trigger excessive CPU usage during request handling.This allows a single malicious request to monopolize the single‑threaded HTTP server, blocking all other clients and resulting in denial of service.</p> <p>This issue was fixed in version 0.73.1.</p> https://cve.radiocsirt.org/vuln/ghsa-mvmf-94v6-879g https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-53433 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: fzf, Ubuntu:22.04:LTS: fzf, Ubuntu:24.04:LTS: fzf, Ubuntu:25.10: fzf, Ubuntu:26.04:LTS: fzf</p> <p>fzf is vulnerable to a Denial of Service (DoS) due to inefficient HTTP body processing in the --listen mode due to inefficient HTTP body processing using repeated string concatenation, resulting in quadratic time complexity (O(n²)). A crafted POST request with many small segments can trigger excessive CPU usage during request handling.This allows a single malicious request to monopolize the single‑threaded HTTP server, blocking all other clients and resulting in denial of service. This issue was fixed in version 0.73.1.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: fzf, Ubuntu:22.04:LTS: fzf, Ubuntu:24.04:LTS: fzf, Ubuntu:25.10: fzf, Ubuntu:26.04:LTS: fzf</p> <p>fzf is vulnerable to a Denial of Service (DoS) due to inefficient HTTP body processing in the --listen mode due to inefficient HTTP body processing using repeated string concatenation, resulting in quadratic time complexity (O(n²)). A crafted POST request with many small segments can trigger excessive CPU usage during request handling.This allows a single malicious request to monopolize the single‑threaded HTTP server, blocking all other clients and resulting in denial of service. This issue was fixed in version 0.73.1.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-53433