#uncontrolled-recursion

0 stories this week · 2 this month · 3 in 6 months · mostly security

Stories per day · 30 days

3 stories, newest first · one card per story

CVE-2026-120135 is CVSS 8.2 and can crash Java services; upgrade libthrift to 0.24.0.

Crafted MP4 input can recurse until the process stack is exhausted; CVSS is 5.5 medium.

Apache Neethi before 3.2.4 suffers denial of service via deeply nested WS-Policy documents that exhaust the parser's thread stack (CVE-2026-91863).

Stories tagged #uncontrolled-recursion