AZL-93144

Import Source

JSON Data

https://api.osv.dev/v1/vulns/AZL-93144

Upstream

Published

2026-07-21T20:17:02Z

Modified

2026-09-06T05:31:44Z

Summary

CVE-2026-56852 affecting package cf-cli for versions less than 8.7.11-8

Details

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.7.11-8

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-93144.json"