Known Vulnerabilities for Decimal by Ericmj

Listed below are 10 of the newest known vulnerabilities associated with "Decimal" by "Ericmj".

These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.

Data on known vulnerable versions is also displayed based on information from known CPEs

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2026-116733 json flatcc through 0.6.4 contains an out-of-bounds read vulnerability in __flatcc_json_parser_number that allows attackers to rea... Not Provided 2026-10-26 2026-11-02
CVE-2026-116678 json Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to version 1.37.0, the Vaultwarden icon downloader valida... Not Provided 2026-10-27 2026-10-30
CVE-2026-114144 json toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() passes unbounded hexadecimal, octal, bin... Not Provided 2026-10-21 2026-10-30
CVE-2026-114116 json Vyper 0.1.0b1 before 0.1.0b17 and 0.4.1 through 0.5.0b1 builds its source-line table with str.splitlines(), which treats char... Not Provided 2026-10-21 2026-10-28
CVE-2026-110676 json Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal digits u... Not Provided 2026-10-19 2026-10-29
CVE-2026-110604 json Mini-XML 4.0.0 through 4.0.6 contains an off-by-one stack out-of-bounds write in mxml_strtod() when the locale decimal point ... Not Provided 2026-10-14 2026-10-14
CVE-2026-109821 json Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's URI module allows an attack... Not Provided 2026-10-30 2026-10-30
CVE-2026-107275 json @fastify/jwt is a JSON Web Token plugin for the Fastify web framework. In versions before 10.2.3, a time span passed to expir... Not Provided 2026-10-08 2026-10-08
CVE-2026-106438 json An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept certain over-precision inputs contai... Not Provided 2026-10-08 2026-10-08
CVE-2026-106069 json A flaw in Node.js TLS hostname verification can cause a server certificate to be validated against a different IP address tha... Not Provided 2026-10-23 2026-11-02

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report