CVE ID :CVE-2026-112782 Published : Oct. 19, 2026, 8:17 p.m. | 1 hour, 47 minutes ago Description :Grav 1.7.53 before 1.7.53.5 and 2.0.0-rc.8 before 2.2.2 contains a resource exhaustion vulnerability that allows anonymous visitors to bypass the system.images.max_pixels limit when...

#Sicherheitslücke #DDoS

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-112782 - Grav before 1.7.53.5 and 2.2.2 Image Pixel Limit Bypass Denial of Service

VERWANDTEARTIKEL

CVE-2026-76788 - Stack out-of-bounds write in the OSDP Control Panel reply parser

CVE-2026-112390 - Pillow: Infinite loop in MIC n_frames when the embedded TIFF

CVE-2026-112393 - Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO

CVE-2026-53995 - MLflow 3.17.1 Path Traversal via Trace ID API

CVE-2026-112777 - Craft CMS before 4.18.8 and 5.11.0 Twig create() Blocklist Bypass Leading to RCE

CVE-2026-112781 - Grav 2.0.0 before 2.2.2 Information Disclosure via Form config-*@ Directives