medium5.9
CVE-2026-62303
Pistache: DoS via stack exhaustion in REST router path normalization (regex_replace on long slash runs)
pistacheio · pistache
Your agent Now with CVE context
Find published vulnerabilities, affected versions, and available fixes.
Bring the source evidence into your coding agent to investigate what affects your project.
Sponsored by MoxsoBuild security habits with adaptive training and phishing simulations.Opens in a new tabORIGINAL EVIDENCE. READY FOR YOUR WORKFLOW.CVE / OSV / CISA KEV
Find vulnerabilities that affect you.
Explore advisories by severity, ecosystem, and known exploitation. Take the evidence into your next agent session.
Severity
39 matching advisories · 30 shown
Follow substantive record changes →SEVERITYVULNERABILITY / AFFECTED PACKAGESPUBLISHED
high8.7
CVE-2026-119762
Axigen Mail Server before 10.5.69, 10.6.40, and 10.7.2 Unauthenticated DoS via Nested Requests
Axigen · Axigen Mail Server
medium4.3
CVE-2026-119542
Org.infinispan/infinispan-query: infinispan: deeply nested ickle queries can trigger a stackoverflowerror
Red Hat · Red Hat build of Apache Camel 4 for Quarkus 3 / Red Hat · Red Hat Data Grid 8
medium6.8
CVE-2026-119591
SQLite before 3.54.0 Stack Exhaustion via countOfViewOptimization() in VALUES Clause
SQLite · SQLite
medium6.8
medium6.8
CVE-2026-119371
SQLite before 3.54.0 Stack Exhaustion via CTE Chain in selectExpander()
SQLite · SQLite
high7.5
CVE-2026-119191
Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDer
digitalbazaar · forge
high7.5
CVE-2026-119187Fix available
Forge: Denial of service in TLS record processing via call stack exhaustion
medium6.3
GHSA-wwpr-jff3-395cFix available
Crass: A large number of adjacent CSS comments can trigger a SystemStackError
medium6.3
GHSA-6jxj-px6v-747wFix available
Crass: Deeply nested CSS blocks and functions can trigger a SystemStackError or excessive memory usage
medium6.3
unknown
CVE-2026-105042
Apache Qpid Proton C: Unbounded recursion in parsing AMQP message bodies can lead to crash
Apache Software Foundation · Apache Qpid Proton C
medium6.5
CVE-2026-88858
Server-side expression parser denial of service
Grafana · Grafana OSS / Grafana · Grafana Enterprise
high7.5
CVE-2026-118037
Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadSpreadProcessing and RadSpreadStreamProcessing
Progress Software · Telerik Document Processing Libraries
high7.5
CVE-2026-118036
Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question Answering
Progress Software · Telerik Document Processing Libraries
high7.5
CVE-2026-118035
Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessing
Progress Software · Telerik Document Processing Libraries
high7.5
low3.3
CVE-2026-108331
Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.
Tanium · Endpoint Configuration Toolset Solution / Tanium · threat-response-cx
high8.7
CVE-2026-116871
Semantic MediaWiki 3.0.0 before 7.3.1 Uncontrolled Recursion via Special:Ask
SemanticMediaWiki · SemanticMediaWiki
medium6.9
CVE-2026-116586Fix available
Go JOSE: Panics in JSON parsing
medium5.9
EEF-CVE-2026-65628Fix available
Infinite recursion (CPU denial-of-service) in JOSE.JWK.shared_secret/2 on mismatched key types
medium4.8
CVE-2026-116144
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Overflow via MVG Decoder
ImageMagick · ImageMagick / ImageMagick · ImageMagick
high8.7
CVE-2026-116011
Crow before 1.3.4 Denial of Service via Deeply Nested JSON in crow::json::load()
CrowCpp · Crow
high7.5
GHSA-45c3-73f7-pv4mFix available
dnspython dns.name.from_wire_parser() excessive CPU use
medium6.3
CVE-2026-110974
Uncontrolled Recursion on Nested JSON Allows Denial of Service in android-json
vaadin · android-json
high7.5
CVE-2026-54427
Apache bRPC: Stack Exhaustion via Unbounded Recursion in AMF Parser
Apache Software Foundation · Apache bRPC
high7.5
CVE-2026-54426
Apache bRPC: Stack Exhaustion via Unbounded Recursion in Redis Reply Parser
Apache Software Foundation · Apache bRPC
high7.5
CVE-2026-54425
Apache bRPC: Stack Exhaustion via Recursive HPACK Dynamic Table Size Update Decoding
Apache Software Foundation · Apache bRPC
medium6.2
CVE-2026-92822
Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml
Red Hat · Red Hat Enterprise Linux 10 / Red Hat · Red Hat Enterprise Linux 8
high7.5