unknown
CVE-2026-87768
DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds
DateTime-Lite
Your agent Now with CVE context
Find published vulnerabilities, affected versions, and available fixes.
Bring the source evidence into your coding agent to investigate what affects your project.
Sponsored by MoxsoBuild security habits with adaptive training and phishing simulations.Opens in a new tabORIGINAL EVIDENCE. READY FOR YOUR WORKFLOW.CVE / OSV / CISA KEV
Find vulnerabilities that affect you.
Explore advisories by severity, ecosystem, and known exploitation. Take the evidence into your next agent session.
Severity
41 matching advisories · 30 shown
Follow substantive record changes →SEVERITYVULNERABILITY / AFFECTED PACKAGESPUBLISHED
high7.5
CVE-2026-119197Fix available
pyasn1: Quadratic-complexity denial of service in binary REAL decoding
high7.5
CVE-2026-119196Fix available
pyasn1: Quadratic CPU consumption in constructed BIT STRING decoding
high7.5
CVE-2026-119195Fix available
pyasn1: Quadratic-time denial of service in constructed string and indefinite-length ANY decoding
high7.5
CVE-2026-119194Fix available
pyasn1: Quadratic CPU use in schemaless BER/CER/DER container decoding
high8.7
high8.7
CVE-2019-25781
Python-Markdown 3.0 through 3.11.2 Denial of Service via Link Bracket Parsing
Python-Markdown · Markdown
high8.7
CVE-2026-118694
python-markdown2 through 2.5.5 Denial of Service via Unclosed Inline Link Destinations
trentm · python-markdown2
high8.2
unknown
unknown
unknown
high7.5
CVE-2026-116795Fix available
RE2JS: Quadratic-time denial of service in re2js lookbehind matching
high7.5
CVE-2026-118036
Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question Answering
Progress Software · Telerik Document Processing Libraries
high7.5
CVE-2026-118035
Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessing
Progress Software · Telerik Document Processing Libraries
high8.7
CVE-2026-117540
svg-sanitizer before 1.1.0 Quadratic CPU-Exhaustion DoS via PHP-Tag Stripping Loop
darylldoyle · svg-sanitizer
high8.7
CVE-2026-116872
Semantic MediaWiki 3.0.0 before 7.3.1 Denial of Service via Special:Search Compact Filters
SemanticMediaWiki · SemanticMediaWiki
high7.5
medium5.3
CVE-2026-116577Fix available
Tornado: Quadratic CPU usage when parsing HTTP headers with line folding
medium6.9
high8.7
CVE-2026-108529
SETTINGS and stream-0 WINDOW_UPDATE frames trigger quadratic work over blocked streams in Bandit
mtrudel · bandit / mtrudel · bandit
high8.7
CVE-2026-113436
Quadratic bignum parsing of Content-Length and Host port values in Bandit
mtrudel · bandit / mtrudel · bandit
high7.1
CVE-2026-115585
pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up)
py-pdf · pypdf
high8.7
CVE-2026-115347
Mistune before 3.3.0 Quadratic Denial of Service via parse_link_text
lepture · mistune
low2.5
high8.2
CVE-2026-96640Fix available
Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion
high8.7
CVE-2026-114143
toml-node: Quadratic-complexity DoS via long dotted keys or table paths in toml.parse()
BinaryMuse · toml-node
high7.5
CVE-2026-114138
Django REST framework: Accept header with many large quoted parameters burns ~19s of CPU per request in content negotiation
encode · django-rest-framework
medium6.2
medium6.0
CVE-2026-113789
pypdf: Possible long runtimes/large memory usage when retrieving form fields
py-pdf · pypdf