https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 07 Nov 2026 08:26:26 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-73095 <p>Allocation of Resources Without Limits or Throttling vulnerability in Apache Juneau.</p> <p>The MessagePack parser, which the REST server enables by default, sizes buffers from length values in the input. An unauthenticated client can send a few bytes that force a multi-gigabyte allocation and an OutOfMemoryError, causing denial of service. Related unbounded allocations in REST request handling (multipart uploads and request reader buffers) are fixed at the same time.</p> <p>This issue affects Apache Juneau: through 9.2.0.</p> <p>Users are recommended to upgrade to version 9.2.1, which fixes the issue.</p> <p>Allocation of Resources Without Limits or Throttling vulnerability in Apache Juneau.</p> <p>The MessagePack parser, which the REST server enables by default, sizes buffers from length values in the input. An unauthenticated client can send a few bytes that force a multi-gigabyte allocation and an OutOfMemoryError, causing denial of service. Related unbounded allocations in REST request handling (multipart uploads and request reader buffers) are fixed at the same time.</p> <p>This issue affects Apache Juneau: through 9.2.0.</p> <p>Users are recommended to upgrade to version 9.2.1, which fixes the issue.</p> https://db.gcve.eu/vuln/fkie_cve-2026-73095 https://db.gcve.eu/vuln/ghsa-79vh-374g-g44h <p>Allocation of Resources Without Limits or Throttling vulnerability in Apache Juneau.</p> <p>The MessagePack parser, which the REST server enables by default, sizes buffers from length values in the input. An unauthenticated client can send a few bytes that force a multi-gigabyte allocation and an OutOfMemoryError, causing denial of service. Related unbounded allocations in REST request handling (multipart uploads and request reader buffers) are fixed at the same time.</p> <p>This issue affects Apache Juneau: through 9.2.0.</p> <p>Users are recommended to upgrade to version 9.2.1, which fixes the issue.</p> <p>Allocation of Resources Without Limits or Throttling vulnerability in Apache Juneau.</p> <p>The MessagePack parser, which the REST server enables by default, sizes buffers from length values in the input. An unauthenticated client can send a few bytes that force a multi-gigabyte allocation and an OutOfMemoryError, causing denial of service. Related unbounded allocations in REST request handling (multipart uploads and request reader buffers) are fixed at the same time.</p> <p>This issue affects Apache Juneau: through 9.2.0.</p> <p>Users are recommended to upgrade to version 9.2.1, which fixes the issue.</p> https://db.gcve.eu/vuln/ghsa-79vh-374g-g44h