Threats tagged 'ghsa-xfhf-c35f-773q'

A high-severity security vulnerability (CVE-2026-116620) exists in Tencent RapidJSON up to version 1.1.0. The flaw is in the GenericStringStream<UTF8<char>>::Take function within the Regex Parser component, causing an out-of-bounds read. This vulnerability can be exploited remotely. Public exploit details have been disclosed, but the vendor has not yet responded or provided a patch.