Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 11:16:38 +0000 CVE-2026-70377 — imagecli - Uncontrolled Memory Allocation via Unbounded scale Ratio Causes Denial of Service https://cve.radiocsirt.org/vuln/cve-2026-70377 <p><strong>Affected:</strong> theotherphil imagecli</p> <p>imagecli&#39;s pipeline operation (Scale::apply in src/image_ops.rs) computes output width/height as (dimension as f32 * ratio) as u32 with no upper-bound validation on the CLI-supplied ratio, which is parsed via nom::number::complete::float with no range check. Any application embedding imagecli as a library and accepting user-controlled pipeline strings is remotely crashable with a single request.</p> <p><strong>Affected:</strong> theotherphil imagecli</p> <p>imagecli&#39;s pipeline operation (Scale::apply in src/image_ops.rs) computes output width/height as (dimension as f32 * ratio) as u32 with no upper-bound validation on the CLI-supplied ratio, which is parsed via nom::number::complete::float with no range check. Any application embedding imagecli as a library and accepting user-controlled pipeline strings is remotely crashable with a single request.</p> https://cve.radiocsirt.org/vuln/cve-2026-70377