Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.3Stack overflow when parsing deeply nested input in pest_grammarsOpen the advisoryOct 16, 2026
- High7.5Remote DoS through unchecked allocation in negentropyOpen the advisoryOct 14, 2026
- UnknownException tags can cause host data structures to be unalignedOpen the advisoryOct 14, 2026
- Medium6.2Component-model handle tables are capped only per instance and charged to no limitOpen the advisoryOct 14, 2026
- UnknownWasmtime may not properly enforce async-entrypoint requirementOpen the advisoryOct 14, 2026
- UnknownPanic when pending calls are run after a trapOpen the advisoryOct 14, 2026
- UnknownOverlapping string transcode in a fused adapter can panicOpen the advisoryOct 14, 2026
- Medium5.3Stack overflow dropping a long chain of recursive typesOpen the advisoryOct 14, 2026
- UnknownYielding in a component start function can lead to a host panicOpen the advisoryOct 14, 2026
- UnknownOut-of-bounds zero-length stream writes can panicOpen the advisoryOct 14, 2026
- Medium5.3Panic on erroneous call-to-host from guest realloc callOpen the advisoryOct 14, 2026
- UnknownPanic viewing component model stream or future as the wrong typeOpen the advisoryOct 14, 2026
- UnknownHost panic when component is cancelled under some conditionsOpen the advisoryOct 14, 2026
- UnknownPanic when invoking an async-lifted function viaOpen the advisoryOct 14, 2026
- UnknownFilesystem sandbox escape when renaming symlinks with trailing slashesOpen the advisoryOct 14, 2026
- Unknown: Request with long url before query parameter crashes hostOpen the advisoryOct 14, 2026
- UnknownGuests can send absolute-form HTTP requests to different hostsOpen the advisoryOct 14, 2026
- Low3.7Unauthenticated ServerHello can downgrade later connections to classical key exchangeOpen the advisoryOct 14, 2026
- Low3.7Brotli certificate decompression can allocate up to 1 GiB before authenticationOpen the advisoryOct 14, 2026
- Low2.3Buffered application data sent to outer server after ECH rejectionOpen the advisoryOct 14, 2026
- Medium4.0impls for client session values expose TLS secretsOpen the advisoryOct 14, 2026
- High7.5Decompression bomb in : a tiny input can exhaust memory (OOM)Open the advisoryOct 11, 2026
- Critical9.1ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the targetOpen the advisoryOct 10, 2026
- Unknownzip: creates symbolic links whose attacker-controlled targets are outside the destination directoryOpen the advisoryOct 9, 2026
- High7.3Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege EscalationOpen the advisoryOct 9, 2026
39 records · page 1 of 2
PreviousNext