https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 02:38:26 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-55254 <p>NCalc is a fast, lightweight expression evaluator for .NET. Prior to 6.1.1, the factorial operator implementation in src/NCalc.Core/Helpers/MathHelper.cs permits specially crafted expressions with extremely large factorial operands, causing excessive CPU consumption or a non-terminating loop due to integer overflow in the factorial calculation logic when applications evaluate untrusted expressions. This issue is fixed in version 6.1.1.</p> <p>NCalc is a fast, lightweight expression evaluator for .NET. Prior to 6.1.1, the factorial operator implementation in src/NCalc.Core/Helpers/MathHelper.cs permits specially crafted expressions with extremely large factorial operands, causing excessive CPU consumption or a non-terminating loop due to integer overflow in the factorial calculation logic when applications evaluate untrusted expressions. This issue is fixed in version 6.1.1.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-55254 https://vulnerability.circl.lu/vuln/ghsa-3w5p-95mh-gq75 <p><strong>Affected:</strong> NuGet: NCalc.Core, NuGet: NCalcSync</p> <p>### Impact</p> <p>A denial-of-service (DoS) vulnerability exists in the factorial operator implementation of NCalc. Specially crafted expressions containing extremely large factorial operands can trigger excessive CPU consumption or cause evaluation to enter a non-terminating loop due to integer overflow in the factorial calculation logic.</p> <p>Applications that evaluate untrusted expressions using affected versions of NCalc may be vulnerable to resource exhaustion, potentially resulting in service disruption or application unresponsiveness.</p> <p>This issue can be triggered with expressions such as:</p> <p>```text 99999999999999! 9223372036854775807! 1.5e16! ```</p> <p>### Patches</p> <p>The vulnerability has been fixed by adding bounds validation for factorial operands and rejecting unsupported values before evaluation.</p> <p>Users should upgrade to the first release containing the fix from pull request #575. (**v6.1.1+**)</p> <p>### Workarounds</p> <p>If upgrading is not immediately possible:</p> <p>* Do not evaluate expressions originating from untrusted users. * Validate or sanitize expressions before evaluation and reject factorial operations on large values. * Implement execution time limits, request timeouts, or cancellation mechanisms around expression evaluation.</p> <p>These mitigations may reduce exposure but do not fully address the underlying vulnerability.</p> <p><strong>Affected:</strong> NuGet: NCalc.Core, NuGet: NCalcSync</p> <p>### Impact</p> <p>A denial-of-service (DoS) vulnerability exists in the factorial operator implementation of NCalc. Specially crafted expressions containing extremely large factorial operands can trigger excessive CPU consumption or cause evaluation to enter a non-terminating loop due to integer overflow in the factorial calculation logic.</p> <p>Applications that evaluate untrusted expressions using affected versions of NCalc may be vulnerable to resource exhaustion, potentially resulting in service disruption or application unresponsiveness.</p> <p>This issue can be triggered with expressions such as:</p> <p>```text 99999999999999! 9223372036854775807! 1.5e16! ```</p> <p>### Patches</p> <p>The vulnerability has been fixed by adding bounds validation for factorial operands and rejecting unsupported values before evaluation.</p> <p>Users should upgrade to the first release containing the fix from pull request #575. (**v6.1.1+**)</p> <p>### Workarounds</p> <p>If upgrading is not immediately possible:</p> <p>* Do not evaluate expressions originating from untrusted users. * Validate or sanitize expressions before evaluation and reject factorial operations on large values. * Implement execution time limits, request timeouts, or cancellation mechanisms around expression evaluation.</p> <p>These mitigations may reduce exposure but do not fully address the underlying vulnerability.</p> https://vulnerability.circl.lu/vuln/ghsa-3w5p-95mh-gq75