# CWE-248.

Every Advisory and CVE whose sources give the weakness CWE-248, newest first.

## Records, newest first (an older page)

- [Granian vulnerable to unauthenticated DoS via WebSocket subprotocol header panic](https://agentprime.io/advisories/GHSA-vrg7-482j-p6f6.md)
  `GHSA-vrg7-482j-p6f6`, `CVE-2026-42544`, `PYSEC-2026-2503` · PyPI `granian`: affected `>=1.2.0, <2.7.4`, fixed in `2.7.4` · CVSS 7.5 High · Not analysed yet · Published 6 May 2026 · Tags: Denial of service, CWE-20, CWE-248
- [gix-pack has multiple DoS vectors: unchecked indexing panics and uncapped OOM allocations from crafted pack data](https://agentprime.io/advisories/GHSA-x494-mj8g-cj27.md)
  `GHSA-x494-mj8g-cj27`, `CVE-2026-82254` · crates.io `gix-pack`: affected `<0.69.0`, fixed in `0.69.0` · CVSS 8.7 High · Not analysed yet · Published 5 May 2026 · Tags: Denial of service, CWE-248
- [An issue was discovered in Vanetza V2X v26.02 allowing remote unauthorized attackers to cause a denial of service.](https://agentprime.io/advisories/CVE-2026-37554.md)
  `CVE-2026-37554` · CVE record · CVSS 7.5 High · Not analysed yet · Published 1 May 2026 · Tags: CWE-248
- [aligungr UERANSIM Radio Link Simulation Layer rls_pdu.cpp DecodeRlsMessage uncaught exception](https://agentprime.io/advisories/CVE-2026-7183.md)
  `CVE-2026-7183` · CVE record: aligungr UERANSIM · CVSS 6.9 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: CWE-248
- [Foxit PDF Editor/Reader's insufficient parameter validation leads to denial-of-service vulnerability](https://agentprime.io/advisories/CVE-2026-5937.md)
  `CVE-2026-5937` · CVE record: Foxit Software Inc. Foxit PDF Editor and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: CWE-248
- [uutils coreutils has an Uncaught Exception When Encountering Valid but Non-UTF-8 Paths](https://agentprime.io/advisories/GHSA-f2jv-wjjc-2c94.md)
  `GHSA-f2jv-wjjc-2c94`, `CVE-2026-35348` · crates.io `coreutils`: affected `<=0.8.0`, no fixed version yet · CVSS 5.5 Medium · Not analysed yet · Published 22 Apr 2026 · Tags: CWE-248
- [Zebra Vulnerable to Denial of Service via Interrupted JSON-RPC Requests from Authenticated Clients](https://agentprime.io/advisories/GHSA-29x4-r6jv-ff4w.md)
  `GHSA-29x4-r6jv-ff4w`, `CVE-2026-41585` · crates.io `zebrad` and 1 more: affected `>=2.2.0, <4.3.1`, fixed in `4.3.1` · CVSS 6.9 Medium · Not analysed yet · Published 18 Apr 2026 · Tags: Denial of service, CWE-248
- [Wasmtime segfault or unused out-of-sandbox load with \`f64x2.splat\` operator on Cranelift x86-64](https://agentprime.io/advisories/GHSA-qqfj-4vcm-26hv.md)
  `GHSA-qqfj-4vcm-26hv`, `CVE-2026-34944`, `RUSTSEC-2026-0087` · crates.io `wasmtime`: affected `>=0.0.0-0, <24.0.7 || >=25.0.0, <36.0.7 || >=37.0.0, <42.0.2 || >=43.0.0, <43.0.1`, fixed in `24.0.7`, `36.0.7`, `42.0.2`, `43.0.1` · CVSS 4.1 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-248
- [Panic when lifting \`flags\` component value](https://agentprime.io/advisories/GHSA-m758-wjhj-p3jq.md)
  `GHSA-m758-wjhj-p3jq`, `CVE-2026-34943`, `RUSTSEC-2026-0085` · crates.io `wasmtime`: affected `>=0.0.0-0, <24.0.7 || >=25.0.0, <36.0.7 || >=37.0.0, <42.0.2 || >=43.0.0, <43.0.1`, fixed in `24.0.7`, `36.0.7`, `42.0.2`, `43.0.1` · CVSS 5.6 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-248
- [Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder](https://agentprime.io/advisories/GHSA-xmrv-pmrh-hhx2.md)
  `GHSA-xmrv-pmrh-hhx2`, `CVE-2026-89090`, `GO-2026-5764` · Go `github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream` and 11 more: affected `<1.7.8`, fixed in `1.7.8` · CVSS 8.2 High · Not analysed yet · Published 8 Apr 2026 · Tags: CWE-20, CWE-248
- [NVIDIA Triton Inference Server: NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a…](https://agentprime.io/advisories/CVE-2026-24175.md)
  `CVE-2026-24175` · CVE record: NVIDIA Triton Inference Server · CVSS 7.5 High · Not analysed yet · Published 7 Apr 2026 · Tags: CWE-248
- [Go JOSE Panics in JWE decryption](https://agentprime.io/advisories/GHSA-78h2-9frx-2jm8.md)
  `GHSA-78h2-9frx-2jm8`, `CVE-2026-34986`, `GO-2026-4945` · Go `github.com/go-jose/go-jose` and 2 more: affected `<=2.6.3`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 3 Apr 2026 · Tags: Memory corruption, CWE-248
- [Haraka affected by DoS via \`\_\_proto\_\_\` email header](https://agentprime.io/advisories/GHSA-xph3-r2jf-4vp3.md)
  `GHSA-xph3-r2jf-4vp3`, `CVE-2026-34752` · npm `Haraka`: affected `<3.1.4`, fixed in `3.1.4` · CVSS 8.7 High · Not analysed yet · Published 1 Apr 2026 · Tags: CWE-248
- [Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation](https://agentprime.io/advisories/GHSA-9cx6-37pm-9jff.md)
  `GHSA-9cx6-37pm-9jff`, `CVE-2026-33939` · npm `handlebars`: affected `>=4.0.0, <4.7.9`, fixed in `4.7.9` · CVSS 7.5 High · Not analysed yet · Published 27 Mar 2026 · Tags: CWE-248, CWE-754
- [free5GC UDM vulnerable to null byte injection in URL path parameters causing 500 Internal Server Error](https://agentprime.io/advisories/GHSA-p9hg-pq3q-v9gv.md)
  `GHSA-p9hg-pq3q-v9gv`, `CVE-2026-33191`, `GO-2026-4763` · Go `github.com/free5gc/udm`: affected `<1.4.2`, fixed in `1.4.2` · CVSS 8.7 High · Not analysed yet · Published 18 Mar 2026 · Tags: CWE-158, CWE-248
- [SiYuan has an Unauthenticated WebSocket DoS via Auth Keepalive Bypass](https://agentprime.io/advisories/GHSA-3g9h-9hp4-654v.md)
  `GHSA-3g9h-9hp4-654v`, `CVE-2026-33203`, `GO-2026-4752` · Go `github.com/siyuan-note/siyuan/kernel`: affected `<3.6.2`, fixed in `3.6.2` · CVSS 7.5 High · Not analysed yet · Published 18 Mar 2026 · Tags: Authentication bypass, CWE-248
- [Parse Server LiveQuery subscription with invalid regular expression crashes server](https://agentprime.io/advisories/GHSA-827p-g5x5-h86c.md)
  `GHSA-827p-g5x5-h86c`, `BIT-parse-2026-32770`, `CVE-2026-32770` · npm `parse-server`: affected `<8.6.43 || >=9.0.0, <9.6.0-alpha.19`, fixed in `8.6.43`, `9.6.0-alpha.19` · CVSS 5.9 Medium · Not analysed yet · Published 17 Mar 2026 · Tags: CWE-248
- [Undici has Unhandled Exception in WebSocket Client Due to Invalid server_max_window_bits Validation](https://agentprime.io/advisories/GHSA-v9p9-hfj2-hcw8.md)
  `GHSA-v9p9-hfj2-hcw8`, `CVE-2026-2229` · npm `undici`: affected `<6.24.0 || >=7.0.0, <7.24.0`, fixed in `6.24.0`, `7.24.0` · CVSS 7.5 High · Not analysed yet · Published 13 Mar 2026 · Tags: CWE-248, CWE-1284
- [Undici: Malicious WebSocket 64-bit length overflows parser and crashes the client](https://agentprime.io/advisories/GHSA-f269-vfmq-vjvj.md)
  `GHSA-f269-vfmq-vjvj`, `CVE-2026-1528` · npm `undici`: affected `>=6.0.0, <6.24.0 || >=7.0.0, <7.24.0`, fixed in `6.24.0`, `7.24.0` · CVSS 7.5 High · Not analysed yet · Published 13 Mar 2026 · Tags: CWE-248, CWE-1284
- [Yamux vulnerable to remote Panic via malformed Data frame with SYN set and len = 262145](https://agentprime.io/advisories/GHSA-vxx9-2994-q338.md)
  `GHSA-vxx9-2994-q338`, `CVE-2026-32314` · crates.io `yamux`: affected `<0.13.10`, fixed in `0.13.10` · CVSS 8.7 High · Not analysed yet · Published 13 Mar 2026 · Tags: Denial of service, CWE-248
- [LibreChat Denial of Service (DoS) via Unhandled Exception in DELETE /api/convos](https://agentprime.io/advisories/CVE-2026-31949.md)
  `CVE-2026-31949` · CVE record: danny-avila LibreChat · CVSS 6.5 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: CWE-248
- [cpp-httplib Affected by Remote Process Crash via Malformed Content-Length Response Header](https://agentprime.io/advisories/CVE-2026-31870.md)
  `CVE-2026-31870` · CVE record: yhirose cpp-httplib · CVSS 7.5 High · Not analysed yet · Published 11 Mar 2026 · Tags: CWE-248
- [Quinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsing](https://agentprime.io/advisories/GHSA-6xvm-j4wr-6v98.md)
  `GHSA-6xvm-j4wr-6v98`, `CVE-2026-31812`, `RUSTSEC-2026-0037` · crates.io `quinn-proto`: affected `<0.11.14`, fixed in `0.11.14` · CVSS 8.7 High · Not analysed yet · Published 11 Mar 2026 · Tags: CWE-248
- [Python-Markdown has an Uncaught Exception](https://agentprime.io/advisories/GHSA-5wmx-573v-2qwq.md)
  `GHSA-5wmx-573v-2qwq`, `CVE-2025-69534`, `PYSEC-2026-89` · PyPI `markdown`: affected `<3.8.1`, fixed in `3.8.1` · CVSS 7.5 High · Not analysed yet · Published 5 Mar 2026 · Tags: Denial of service, CWE-248
- [Multiple Cisco Products Snort 3 TBD Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-20068.md)
  `CVE-2026-20068` · CVE record: Cisco Cisco Cyber Vision and 2 more · CVSS 5.8 Medium · Not analysed yet · Published 4 Mar 2026 · Tags: CWE-248
- [ClamAV CSS Image Parsing Error Handling Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-20031.md)
  `CVE-2026-20031` · CVE record: Cisco Cisco Secure Endpoint · CVSS 5.3 Medium · Not analysed yet · Published 4 Mar 2026 · Tags: CWE-248
- [Exiv2: Uncaught exception - cannot create std::vector larger than max_size()](https://agentprime.io/advisories/CVE-2026-27631.md)
  `CVE-2026-27631` · CVE record: Exiv2 exiv2 · CVSS 2.7 Low · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-248
- [Vikunja has Path Traversal in CLI Restore](https://agentprime.io/advisories/GHSA-42wg-38gx-85rh.md)
  `GHSA-42wg-38gx-85rh`, `CVE-2026-27819`, `GO-2026-4556` · Go `code.vikunja.io/api`: affected `<=0.24.6`, no fixed version yet · CVSS 7.2 High · Not analysed yet · Published 26 Feb 2026 · Tags: Path traversal, CWE-248
- [Uncaught Exception vulnerability in AVEVA PI Data Archive](https://agentprime.io/advisories/CVE-2026-1507.md)
  `CVE-2026-1507` · CVE record: AVEVA PI Data Archive PI Server · CVSS 8.7 High · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-248
- [100GbE Intel(R) Ethernet Controller E810: Uncaught exception in the firmware for some 100GbE Intel(R) Ethernet Controller E810…](https://agentprime.io/advisories/CVE-2025-24851.md)
  `CVE-2025-24851` · CVE record: 100GbE Intel(R) Ethernet Controller E810 · CVSS 6.0 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-248
- [Emmett-Core: Unhandled CookieError Exception Causing Denial of Service](https://agentprime.io/advisories/GHSA-x6cr-mq53-cc76.md)
  `GHSA-x6cr-mq53-cc76`, `CVE-2026-25577`, `PYSEC-2026-2469` · PyPI `emmett-core`: affected `<1.3.11`, fixed in `1.3.11` · CVSS 7.5 High · Not analysed yet · Published 10 Feb 2026 · Tags: Authentication bypass, CWE-248, CWE-703
- [A server-side injection was possible for a malicious admin to manipulate the application to include a malicious script which is executed by the server.](https://agentprime.io/advisories/CVE-2025-13064.md)
  `CVE-2025-13064` · CVE record: Axis Communications AB AXIS Camera Station Pro · CVSS 4.5 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-248
- [LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic](https://agentprime.io/advisories/GHSA-vhvq-fv9f-wh4q.md)
  `GHSA-vhvq-fv9f-wh4q`, `GO-2026-4465` · Go `github.com/authzed/spicedb`: affected `>=1.29.3, <1.49.1`, fixed in `1.49.1` · CVSS 4.0, no score published · Not analysed yet · Published 6 Feb 2026 · Tags: CWE-248
- [\[actix-files\] Panic triggered by empty Range header in GET request for static file](https://agentprime.io/advisories/GHSA-gcqf-3g44-vc9p.md)
  `GHSA-gcqf-3g44-vc9p`, `CVE-2026-72813` · crates.io `actix-files`: affected `<0.6.10`, fixed in `0.6.10` · CVSS 6.9 Medium · Not analysed yet · Published 6 Feb 2026 · Tags: CWE-20, CWE-248
- [fast-xml-parser has RangeError DoS Numeric Entities Bug](https://agentprime.io/advisories/GHSA-37qj-frw5-hhjh.md)
  `GHSA-37qj-frw5-hhjh`, `CVE-2026-25128` · npm `fast-xml-parser`: affected `>=5.0.9, <5.3.4`, fixed in `5.3.4` · CVSS 7.5 High · Not analysed yet · Published 30 Jan 2026 · Tags: CWE-20, CWE-248
- [node: We have identified a bug in Node.js error handling where "Maximum call stack size…](https://agentprime.io/advisories/CVE-2025-59466.md)
  `CVE-2025-59466` · CVE record: nodejs node · CVSS 5.9 Medium · Not analysed yet · Published 20 Jan 2026 · Tags: CWE-248
- [Uncontrolled resource consumption in node](https://agentprime.io/advisories/CVE-2025-59465.md)
  `CVE-2025-59465` · CVE record: nodejs node · CVSS 7.5 High · Not analysed yet · Published 20 Jan 2026 · Tags: Denial of service, CWE-248
- [SvelteKit is vulnerable to denial of service and possible SSRF when using prerendering](https://agentprime.io/advisories/GHSA-j62c-4x62-9r35.md)
  `GHSA-j62c-4x62-9r35`, `CVE-2025-67647` · npm `@sveltejs/adapter-node` and 1 more: affected `>=5.4.1, <5.5.1`, fixed in `5.5.1` · CVSS 8.4 High · Not analysed yet · Published 15 Jan 2026 · Tags: Denial of service, Server-side request forgery (SSRF), CWE-248
- [robrichards/xmlseclibs has an Libxml2 Canonicalization error which can bypass Digest/Signature validation](https://agentprime.io/advisories/GHSA-c4cc-x928-vjw9.md)
  `GHSA-c4cc-x928-vjw9`, `CVE-2025-66578`, `PKSA-pcdf-qvqm-w4tv` · Packagist `robrichards/xmlseclibs`: affected `<3.1.4`, fixed in `3.1.4` · CVSS 6.0 Medium · Not analysed yet · Published 8 Dec 2025 · Tags: CWE-248
- [In Modem, there is a possible system crash due to an uncaught exception.](https://agentprime.io/advisories/CVE-2025-20758.md)
  `CVE-2025-20758` · CVE record: MediaTek, Inc. MT2735, MT2737, MT6813, MT6833, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8673, MT8675, MT8676, MT8678, MT8755, MT8771, MT8791, MT8791T, MT8792, MT8793, MT8795T, MT8797, MT8798, MT8863, MT8873, MT8883, MT8893 · CVSS 4.9 Medium · Not analysed yet · Published 2 Dec 2025 · Tags: CWE-248
- [In Modem, there is a possible system crash due to an incorrect bounds check.](https://agentprime.io/advisories/CVE-2025-20754.md)
  `CVE-2025-20754` · CVE record: MediaTek, Inc. MT2735, MT2737, MT6813, MT6833, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8673, MT8675, MT8676, MT8678, MT8755, MT8771, MT8791, MT8791T, MT8792, MT8793, MT8795T, MT8797, MT8798, MT8863, MT8873, MT8883, MT8893 · CVSS 5.3 Medium · Not analysed yet · Published 2 Dec 2025 · Tags: CWE-248
- [In Modem, there is a possible system crash due to an uncaught exception.](https://agentprime.io/advisories/CVE-2025-20753.md)
  `CVE-2025-20753` · CVE record: MediaTek, Inc. MT2735, MT2737, MT6833, MT6833P, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT8675, MT8771, MT8791, MT8791T, MT8797 · CVSS 5.3 Medium · Not analysed yet · Published 2 Dec 2025 · Tags: CWE-248
- [Grav vulnerable to Denial of Service via Improper Input Handling in 'Supported' Parameter](https://agentprime.io/advisories/GHSA-m8vh-v6r6-w7p6.md)
  `GHSA-m8vh-v6r6-w7p6`, `CVE-2025-66305`, `PKSA-nbf5-vjfz-hnnq` · Packagist `getgrav/grav`: affected `<1.8.0-beta.27`, fixed in `1.8.0-beta.27` · CVSS 6.9 Medium · Not analysed yet · Published 2 Dec 2025 · Tags: CWE-248
- [ALC WebCTRL Carrier i-Vu and Gen5 Controllers Array Index out-of-range](https://agentprime.io/advisories/CVE-2025-0657.md)
  `CVE-2025-0657` · CVE record: Automated Logic WebCtrl and 2 more · CVSS 8.8 High · Not analysed yet · Published 27 Nov 2025 · Tags: CWE-129, CWE-248
- [On affected platforms running Arista EOS, certain serial console input might result in an unexpected reload of the device.](https://agentprime.io/advisories/CVE-2025-8870.md)
  `CVE-2025-8870` · CVE record: Arista Networks EOS · CVSS 5.6 Medium · Not analysed yet · Published 14 Nov 2025 · Tags: CWE-248
- [Denial of Service - Protocol Manipulation](https://agentprime.io/advisories/CVE-2025-12423.md)
  `CVE-2025-12423` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Oct 2025 · Tags: CWE-248
- [Denial-of-service (DoS) via delayed or missing client response](https://agentprime.io/advisories/CVE-2025-59462.md)
  `CVE-2025-59462` · CVE record: SICK AG TLOC100-100 all Firmware versions · CVSS 6.5 Medium · Not analysed yet · Published 27 Oct 2025 · Tags: CWE-248
- [Gallagher Command Centre Server: Uncaught Exception (CWE-248) in the Command Centre Server allows an Authorized and…](https://agentprime.io/advisories/CVE-2025-48430.md)
  `CVE-2025-48430` · CVE record: Gallagher Command Centre Server · CVSS 5.5 Medium · Not analysed yet · Published 23 Oct 2025 · Tags: CWE-248
- [DoS vulnerability on \`alloy_dyn_abi::TypedData\` hashing](https://agentprime.io/advisories/GHSA-pgp9-98jm-wwq2.md)
  `GHSA-pgp9-98jm-wwq2`, `CVE-2025-62370`, `RUSTSEC-2025-0073` · crates.io `alloy-dyn-abi`: affected `>=0.0.0-0, <0.8.26 || >=1.0.0, <1.4.1`, fixed in `0.8.26`, `1.4.1` · CVSS 7.5 High · Not analysed yet · Published 15 Oct 2025 · Tags: CWE-248
- [Microsoft Office Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-59229.md)
  `CVE-2025-59229` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: CWE-248
- [Rockwell Automation Compact GuardLogix® 5370 Denial-Of-Service Vulnerability](https://agentprime.io/advisories/CVE-2025-9124.md)
  `CVE-2025-9124` · CVE record: Rockwell Automation Compact GuardLogix® 5370 · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2025 · Tags: CWE-248
- [Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook](https://agentprime.io/advisories/GHSA-gpx4-37g2-c8pv.md)
  `GHSA-gpx4-37g2-c8pv`, `BIT-argo-cd-2025-59538`, `CVE-2025-59538`, `GO-2025-3995` · Go `github.com/argoproj/argo-cd/v2` and 1 more: affected `>=2.9.0-rc1, <2.14.20`, fixed in `2.14.20` · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.10 · Not analysed yet · Published 30 Sept 2025 · Tags: CWE-248, CWE-703
- [A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Service (DoS).](https://agentprime.io/advisories/PYSEC-2025-207.md)
  `PYSEC-2025-207`, `BIT-pytorch-2025-55557`, `CVE-2025-55557` · PyPI `torch`: affected `<2.7.1`, fixed in `2.7.1` · CVSS 7.5 High · Not analysed yet · Published 25 Sept 2025 · Tags: CWE-248
- [A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS).](https://agentprime.io/advisories/PYSEC-2025-205.md)
  `PYSEC-2025-205`, `BIT-pytorch-2025-55553`, `CVE-2025-55553` · PyPI `torch`: affected `<2.7.1`, fixed in `2.7.1` · CVSS 7.5 High · Not analysed yet · Published 25 Sept 2025 · Tags: CWE-248
- [CISA Thorium account verification email error handling](https://agentprime.io/advisories/CVE-2025-35436.md)
  `CVE-2025-35436` · CVE record: CISA Thorium · CVSS 6.9 Medium · Not analysed yet · Published 17 Sept 2025 · Tags: CWE-248
- [TYPO3 Bookmark Toolbar vulnerable to denial of service](https://agentprime.io/advisories/GHSA-xrcq-533q-8rxw.md)
  `GHSA-xrcq-533q-8rxw`, `CVE-2025-59014`, `PKSA-957f-x856-svyv` · Packagist `typo3/cms-backend`: affected `>=11.0.0, <12.4.37 || >=12.0.0, <12.4.37 || >=13.0.0, <13.4.18`, fixed in `12.4.37`, `13.4.18` · CVSS 5.1 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: CWE-248
- [Uncaught exception issue exists in Multiple products in bizhub series.](https://agentprime.io/advisories/CVE-2025-54777.md)
  `CVE-2025-54777` · CVE record: Konica Minolta, Inc. Multiple products in bizhub series · CVSS 5.3 Medium · Not analysed yet · Published 29 Aug 2025 · Tags: CWE-248
- [Part-DB Persistent Denial of Service via Uncaught Exception from Misleading File Extension in Avatar Upload](https://agentprime.io/advisories/CVE-2025-55194.md)
  `CVE-2025-55194` · CVE record: Part-DB Part-DB-server · CVSS 5.7 Medium · Not analysed yet · Published 13 Aug 2025 · Tags: CWE-248
- [Sysax Multi-Server <= 6.10 SSHD Key Exchange DoS](https://agentprime.io/advisories/CVE-2013-10065.md)
  `CVE-2013-10065` · CVE record: Sysax Software Multi-Server · CVSS 8.7 High · Not analysed yet · Published 5 Aug 2025 · Tags: CWE-248
- [Kyverno's Improper JMESPath Variable Evaluation Lead to Denial of Service](https://agentprime.io/advisories/GHSA-r5p3-955p-5ggq.md)
  `GHSA-r5p3-955p-5ggq`, `BIT-kyverno-2025-47281`, `CVE-2025-47281`, `GO-2025-3823` · Go `github.com/kyverno/kyverno`: affected `<1.14.2`, fixed in `1.14.2` · CVSS 7.7 High · Not analysed yet · Published 22 Jul 2025 · Tags: CWE-20, CWE-248

Newest: <https://agentprime.io/advisories/tag/cwe-248.md>
Older: <https://agentprime.io/advisories/tag/cwe-248.md?cursor=WyIyMDI1LTA3LTIyVDE0OjI0OjE5LjAwMDAwMFoiLCJHSFNBLXI1cDMtOTU1cC01Z2dxIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-248&cursor=WyIyMDI2LTA1LTA2VDIxOjI0OjU2LjAwMDAwMFoiLCJHSFNBLWY1cDctOWZyNS04am1qIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-248/?cursor=WyIyMDI2LTA1LTA2VDIxOjI0OjU2LjAwMDAwMFoiLCJHSFNBLWY1cDctOWZyNS04am1qIl0>. Everything for agents: <https://agentprime.io/llms.txt>.