Labs

Short research notes on newly disclosed vulnerabilities: the problem, the payload, and the fix.

• high

  http4s-blaze-server Unbounded WebSocket Message Aggregation DoS

  A remote WebSocket client can send an endless stream of fragmented frames to a blaze-server instance, forcing it to accumulate fragments in heap memory with no size limit until the JVM crashes with…

• highCVE-2026-16584

  CVE-2026-16584: AWS API MCP Server Security Policy Bypass via Startup Initialization Failure

  If the AWS API MCP Server fails to load its security policy enforcement data at startup, it silently skips all per-request policy checks for the life of the process, letting any caller run operations…

• high

  OmniFaces: Forged Resource IDs, XSS via o:hashParam, and Push-Channel Replay

  Multiple flaws in OmniFaces let an attacker forge combined-resource identifiers to exhaust server memory, inject JavaScript through unescaped URL-fragment values, and replay WebSocket push messages…

• high

  Oh My Posh: Arbitrary Command Execution via Template Injection in Path Segment

  Oh My Posh re-renders the current working directory path through Go's text/template engine, which exposes a cmd() function, so navigating into a directory with a crafted name executes arbitrary OS…

• critical

  shescape: Shell Injection via Unescaped Parentheses on Windows CMD

  A shell injection flaw in the shescape npm library lets an attacker break out of CMD command context by supplying parentheses in user input, because those characters were never escaped before being…

• high

  Shescape: Quadratic-Time Denial of Service in Flag Protection

  A crafted input string fed to any Shescape escape or quote function causes the flag-protection logic to run in quadratic time, letting an attacker freeze a Node.js server with a moderately large…

• high

  py-libp2p yamux connection DoS via oversized DATA frame

  Any peer that completes a standard libp2p handshake can permanently freeze a victim node's yamux read loop by sending a single 12-byte frame that claims a 4 GB body, killing all streams on that…

• highCVE-2026-16756

  CVE-2026-16756: aws-smithy-http-server Slowloris Denial of Service

  The default HTTP server in aws-smithy-http-server had no connection timeouts or concurrent-connection limits, letting any unauthenticated attacker exhaust all server sockets by opening many…

• highCVE-2026-16796

  CVE-2026-16796: bedrock-agentcore Argument Injection in install_packages()

  A flaw in the AWS Bedrock AgentCore Python SDK lets a user slip pip flags into a crafted package name, redirecting package installs to an attacker-controlled server or reading arbitrary files inside…

• high

  etcd tlsListener Unbounded TLS Handshake Goroutine DoS

  An attacker who can reach an etcd TLS port can open thousands of TCP connections and send nothing, spawning an unlimited number of goroutines that block forever inside the TLS handshake and exhaust…

• highCVE-2026-44907

  CVE-2026-44907: react-server-dom-webpack Denial of Service in Server Functions

  Sending a specially crafted HTTP request to a React Server Function endpoint can exhaust server memory or CPU, taking the application offline without any authentication required.

• high

  Budibase: App-Scoped Builder Privilege Escalation via Public Role Assignment API

  A user who is only a builder for one specific app can grant themselves builder access to every other app in the tenant, or assign any user an admin role in any app, by calling the public…