Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 05:12:36 +0000 CVE-2026-27807 — MarkUs: YAML alias (‘billion laughs’) DoS in config upload https://cve.radiocsirt.org/vuln/cve-2026-27807 <p><strong>Affected:</strong> MarkUsProject Markus</p> <p>MarkUs is a web application for the submission and grading of student assignments. Prior to version 2.9.4, MarkUs allows course instructors to upload YAML files to create/update various entities (e.g., assignment settings). These YAML files are parsed with aliases enabled. This issue has been patched in version 2.9.4.</p> <p><strong>Affected:</strong> MarkUsProject Markus</p> <p>MarkUs is a web application for the submission and grading of student assignments. Prior to version 2.9.4, MarkUs allows course instructors to upload YAML files to create/update various entities (e.g., assignment settings). These YAML files are parsed with aliases enabled. This issue has been patched in version 2.9.4.</p> https://cve.radiocsirt.org/vuln/cve-2026-27807