https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:29:08 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-366283 EUVD-2026-366283 https://cve.radiocsirt.org/vuln/euvd-2026-366283 https://cve.radiocsirt.org/vuln/fkie_cve-2026-87822 <p>t-digest versions 3.1 through 3.3 fail to validate centroid means during deserialization in MergingDigest.fromBytes, allowing attackers to inject NaN values that bypass validation checks. Attackers can craft malicious serialized digests containing NaN centroids that degrade sorting performance from O(n log n) to O(n squared), causing severe processing delays during merge operations.</p> <p>t-digest versions 3.1 through 3.3 fail to validate centroid means during deserialization in MergingDigest.fromBytes, allowing attackers to inject NaN values that bypass validation checks. Attackers can craft malicious serialized digests containing NaN centroids that degrade sorting performance from O(n log n) to O(n squared), causing severe processing delays during merge operations.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-87822 https://cve.radiocsirt.org/vuln/ghsa-32f6-mgwr-pvc4 <p>t-digest versions 3.1 through 3.3 fail to validate centroid means during deserialization in MergingDigest.fromBytes, allowing attackers to inject NaN values that bypass validation checks. Attackers can craft malicious serialized digests containing NaN centroids that degrade sorting performance from O(n log n) to O(n squared), causing severe processing delays during merge operations.</p> <p>t-digest versions 3.1 through 3.3 fail to validate centroid means during deserialization in MergingDigest.fromBytes, allowing attackers to inject NaN values that bypass validation checks. Attackers can craft malicious serialized digests containing NaN centroids that degrade sorting performance from O(n log n) to O(n squared), causing severe processing delays during merge operations.</p> https://cve.radiocsirt.org/vuln/ghsa-32f6-mgwr-pvc4 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-87822 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: t-digest, Ubuntu:18.04:LTS: t-digest, Ubuntu:20.04:LTS: t-digest, Ubuntu:22.04:LTS: t-digest, Ubuntu:24.04:LTS: t-digest, Ubuntu:26.04:LTS: t-digest</p> <p>t-digest versions 3.1 through 3.3 fail to validate centroid means during deserialization in MergingDigest.fromBytes, allowing attackers to inject NaN values that bypass validation checks. Attackers can craft malicious serialized digests containing NaN centroids that degrade sorting performance from O(n log n) to O(n squared), causing severe processing delays during merge operations.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: t-digest, Ubuntu:18.04:LTS: t-digest, Ubuntu:20.04:LTS: t-digest, Ubuntu:22.04:LTS: t-digest, Ubuntu:24.04:LTS: t-digest, Ubuntu:26.04:LTS: t-digest</p> <p>t-digest versions 3.1 through 3.3 fail to validate centroid means during deserialization in MergingDigest.fromBytes, allowing attackers to inject NaN values that bypass validation checks. Attackers can craft malicious serialized digests containing NaN centroids that degrade sorting performance from O(n log n) to O(n squared), causing severe processing delays during merge operations.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-87822