Advisories · Weakness
CWE-1050.
Every Advisory and CVE whose sources give the weakness CWE-1050, newest first.
- CVSS 5.3 Medium
Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding
- Red Hat Hardened Images
- Red Hat Enterprise Linux 10
- CWE-1050
- CVSS 5.3 Medium
kin-openapi deepObject query decoding repeatedly compiles an invariant regular expression
- Denial of service
- CWE-1050
>=0.145.0, <0.146.0 · fixed in 0.146.0
GHSA-h4r5-mxv5-8mjc · CVE-2026-100350 - CVSS 5.5 Medium
Denial of service via unsigned underflow in libXpm's write path
- x.org libXpm
- CWE-1050
- CVSS 7.5 High
Remote CPU denial of service through cached SVCB/HTTPS AliasMode trees
- ISC BIND 9
- CWE-1050
- CVSS 8.7 High
league/commonmark: Denial of service via distinctly-named attributes in the Attributes extension
- Denial of service
- CWE-1050
>=1.5.0, <2.10.0 · fixed in 2.10.0
GHSA-8rr7-cvq3-gmfh · CVE-2026-86428 - CVSS 8.7 High
league/commonmark: Denial of service in the SmartPunct and Attributes extensions
- Denial of service
- CWE-1050
>=1.5.0, <2.9.1 · fixed in 2.9.1
GHSA-jjv6-8j6v-6j52 · CVE-2026-86429 - CVSS 8.7 High
league/commonmark: Denial of service via crafted code fences, reference links, and emphasis delimiters
- Denial of service
- CWE-1050
>=0.6.0, <2.9.1 · fixed in 2.9.1
GHSA-j8pm-gj4c-rq4x · CVE-2026-86430 - CVSS 3.1 Low
Sieve CPU resource usage is tracked in the compiled script, so an attacker that has valid credentials can reset the accounting by repeatedly changing the active script.
- Open-Xchange GmbH OX Dovecot Pro
- Open-Xchange GmbH OX Dovecot CE
- CWE-1050
- CVSS 7.5 High
league/commonmark: Quadratic-time denial of service when parsing crafted Markdown
- Denial of service
- CWE-1050
>=0.6.0, <2.9.0 · fixed in 2.9.0
GHSA-2q4p-g7hv-5rgv · CVE-2026-71488 - CVSS 7.5 High
ws: Memory exhaustion DoS from tiny fragments and data chunks
- Denial of service
- CWE-1050
>=1.1.0, <5.2.5 || >=6.0.0, <6.2.4 || >=7.0.0, <7.5.11 || >=8.0.0, <8.21.0 · fixed in 5.2.5, 6.2.4, 7.5.11, 8.21.0
GHSA-96hv-2xvq-fx4p · CVE-2026-48779 - CVSS 6.9 Medium
Unbounded name compression in certain cases causes degradation of service
- NLnet Labs Unbound
- Denial of service
- CWE-1050
- CVSS 6.6 Medium
Long list of incoming EDNS options degrades performance
- NLnet Labs Unbound
- Denial of service
- CWE-1050
- CVSS 7.5 High
Keycloak: Application-Level DoS via Scope Processing
- CWE-1050
<26.5.7 · fixed in 26.5.7
GHSA-h4wv-g838-66g3 · CVE-2026-4634 - CVSS 5.3 Medium
Suricata http1: quadratic complexity in headers parsing over multiple packets
- OISF suricata
- CWE-1050
- CVSS 3.7 Low
Suricata eve/alert: http1 xff handling can lead to denial of service
- OISF suricata
- CWE-1050
- CVSS 7.5 High
evershop allows unauthenticated attackers to exhaust application server's resources via "GET /images" API
- CWE-1050
<=2.1.0 · no fixed version yet
GHSA-m2q5-xhqg-92r2 · CVE-2025-67419 - CVSS 7.5 High
ModSecurity has possible DoS vulnerability in sanitiseArg action
- ModSecurity
- CWE-1050
- CVSS 7.5 High
ModSecurity Has Possible DoS Vulnerability
- ModSecurity
- CWE-1050
- CVSS 5.3 Medium
Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- CWE-1050
- CVSS 7.5 High
Uncontrolled resource consumption in braces
- Denial of service
- CWE-1050
<3.0.3 · fixed in 3.0.3
GHSA-grv7-fg5c-xmjg · CVE-2024-4068 - CVSS 7.5 High
A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module.
- Linux kernel (TIPC kernel module)
- CWE-1050
- CVSS 6.5 Medium
Excessive Platform Resource Consumption within a Loop in Kubernetes
- CWE-1050
<=2.1.0 · no fixed version yet
GHSA-wxc4-f4m6-wwqv · CVE-2019-11254 -
The Eclipse Foundation Eclipse Mosquitto: In versions 1.6 to 2.0.11 of Eclipse Mosquitto…
- The Eclipse Foundation Eclipse Mosquitto
- CWE-1050