https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 05 Nov 2026 17:34:43 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-87768 <p>DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds.</p> <p>_normalize_leap_seconds crosses day boundaries one day at a time, so add(seconds =&gt; $n) on an object with a non-floating time zone takes about |$n|/86400 iterations, and nothing limits $n. The XS implementation and the pure-Perl fallback both have the loop.</p> <p>An attacker who controls the number of seconds added can keep the process busy for as long as they choose.</p> <p>DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds.</p> <p>_normalize_leap_seconds crosses day boundaries one day at a time, so add(seconds =&gt; $n) on an object with a non-floating time zone takes about |$n|/86400 iterations, and nothing limits $n. The XS implementation and the pure-Perl fallback both have the loop.</p> <p>An attacker who controls the number of seconds added can keep the process busy for as long as they choose.</p> https://db.gcve.eu/vuln/fkie_cve-2026-87768 https://db.gcve.eu/vuln/ghsa-4rjq-xvjh-92j2 <p>DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds.</p> <p>_normalize_leap_seconds crosses day boundaries one day at a time, so add(seconds =&gt; $n) on an object with a non-floating time zone takes about |$n|/86400 iterations, and nothing limits $n. The XS implementation and the pure-Perl fallback both have the loop.</p> <p>An attacker who controls the number of seconds added can keep the process busy for as long as they choose.</p> <p>DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds.</p> <p>_normalize_leap_seconds crosses day boundaries one day at a time, so add(seconds =&gt; $n) on an object with a non-floating time zone takes about |$n|/86400 iterations, and nothing limits $n. The XS implementation and the pure-Perl fallback both have the loop.</p> <p>An attacker who controls the number of seconds added can keep the process busy for as long as they choose.</p> https://db.gcve.eu/vuln/ghsa-4rjq-xvjh-92j2