https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 13:23:54 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-366133 EUVD-2026-366133 https://cve.radiocsirt.org/vuln/euvd-2026-366133 https://cve.radiocsirt.org/vuln/fkie_cve-2026-87962 <p>t-digest versions 3.1 through 3.3 contain a denial of service vulnerability in MergingDigest.fromBytes that fails to validate length and capacity fields from serialized data. Attackers can supply crafted serialized digests with mismatched header fields to trigger ArrayIndexOutOfBoundsException or NegativeArraySizeException, aborting the parsing thread.</p> <p>t-digest versions 3.1 through 3.3 contain a denial of service vulnerability in MergingDigest.fromBytes that fails to validate length and capacity fields from serialized data. Attackers can supply crafted serialized digests with mismatched header fields to trigger ArrayIndexOutOfBoundsException or NegativeArraySizeException, aborting the parsing thread.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-87962 https://cve.radiocsirt.org/vuln/ghsa-p7mw-7cfx-cr67 <p>t-digest versions 3.1 through 3.3 contain a denial of service vulnerability in MergingDigest.fromBytes that fails to validate length and capacity fields from serialized data. Attackers can supply crafted serialized digests with mismatched header fields to trigger ArrayIndexOutOfBoundsException or NegativeArraySizeException, aborting the parsing thread.</p> <p>t-digest versions 3.1 through 3.3 contain a denial of service vulnerability in MergingDigest.fromBytes that fails to validate length and capacity fields from serialized data. Attackers can supply crafted serialized digests with mismatched header fields to trigger ArrayIndexOutOfBoundsException or NegativeArraySizeException, aborting the parsing thread.</p> https://cve.radiocsirt.org/vuln/ghsa-p7mw-7cfx-cr67 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-87962 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: t-digest, Ubuntu:18.04:LTS: t-digest, Ubuntu:20.04:LTS: t-digest, Ubuntu:22.04:LTS: t-digest, Ubuntu:24.04:LTS: t-digest, Ubuntu:26.04:LTS: t-digest</p> <p>t-digest versions 3.1 through 3.3 contain a denial of service vulnerability in MergingDigest.fromBytes that fails to validate length and capacity fields from serialized data. Attackers can supply crafted serialized digests with mismatched header fields to trigger ArrayIndexOutOfBoundsException or NegativeArraySizeException, aborting the parsing thread.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: t-digest, Ubuntu:18.04:LTS: t-digest, Ubuntu:20.04:LTS: t-digest, Ubuntu:22.04:LTS: t-digest, Ubuntu:24.04:LTS: t-digest, Ubuntu:26.04:LTS: t-digest</p> <p>t-digest versions 3.1 through 3.3 contain a denial of service vulnerability in MergingDigest.fromBytes that fails to validate length and capacity fields from serialized data. Attackers can supply crafted serialized digests with mismatched header fields to trigger ArrayIndexOutOfBoundsException or NegativeArraySizeException, aborting the parsing thread.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-87962