# Denial of service.

Crashes, hangs and resource exhaustion, ReDoS included. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Uncontrolled Recursion in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-56148.md)
  `CVE-2026-56148` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Denial of service
- [Pipewire: pulse server alloca stack overflow](https://agentprime.io/advisories/CVE-2026-14330.md)
  `CVE-2026-14330` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Denial of service
- [Poly Voice Devices (CCX, Trio, Edge E) – Potential Denial of Service](https://agentprime.io/advisories/CVE-2026-2891.md)
  `CVE-2026-2891` · CVE record: HP Inc CCX and 2 more · CVSS 8.2 High · Not analysed yet · Published 1 Jul 2026 · Tags: Denial of service
- [FatFs Infinite Loop in GPT Partition Scan](https://agentprime.io/advisories/CVE-2026-6684.md)
  `CVE-2026-6684` · CVE record: ChaN FatFs · CVSS 4.6 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Denial of service
- [FatFs Divide-by-Zero in exFAT Sync](https://agentprime.io/advisories/CVE-2026-6683.md)
  `CVE-2026-6683` · CVE record: ChaN FatFs · CVSS 4.6 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Denial of service
- [Dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length ipv6 nd option in router advertisement handling](https://agentprime.io/advisories/CVE-2026-14258.md)
  `CVE-2026-14258` · CVE record: Red Hat Red Hat Enterprise Linux 10 · CVSS 6.5 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Denial of service
- [DVP80ES3 Improper Resource Shutdown or Release Vulnerability](https://agentprime.io/advisories/CVE-2026-12575.md)
  `CVE-2026-12575` · CVE record: deltaww DVP80ES3 · CVSS 7.5 High · Not analysed yet · Published 1 Jul 2026 · Tags: Denial of service
- [Denial-of-service via malicious LDAP address-book server](https://agentprime.io/advisories/CVE-2026-57962.md)
  `CVE-2026-57962` · CVE record: Mozilla Thunderbird · CVSS 5.3 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Denial of service
- [A division-by-zero vulnerability in the CStreamSwitcherOutputPin::DecideBufferSize function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service (DoS) via a craf…](https://agentprime.io/advisories/CVE-2026-36911.md)
  `CVE-2026-36911` · CVE record · CVSS 5.5 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Denial of service
- [OFFIS DCMTK Toolkit Missing Release of Memory after Effective Lifetime](https://agentprime.io/advisories/CVE-2026-50254.md)
  `CVE-2026-50254` · CVE record: OFFIS DICOM DCMTK Toolkit · CVSS 8.7 High · Not analysed yet · Published 30 Jun 2026 · Tags: Denial of service
- [OFFIS DCMTK Toolkit Missing Release of Memory after Effective Lifetime](https://agentprime.io/advisories/CVE-2026-35505.md)
  `CVE-2026-35505` · CVE record: OFFIS DICOM DCMTK Toolkit · CVSS 8.7 High · Not analysed yet · Published 30 Jun 2026 · Tags: Denial of service
- [Vulnerabilities found in Watson Data Intelligence](https://agentprime.io/advisories/CVE-2025-36319.md)
  `CVE-2025-36319` · CVE record: IBM watsonx.data intelligence · CVSS 4.3 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Denial of service
- [IBM WebSphere eXtremes Scale is affected by uncontrolled resource consumption when XDF is enabled](https://agentprime.io/advisories/CVE-2026-9002.md)
  `CVE-2026-9002` · CVE record: IBM WebSphere Extreme Scale · CVSS 6.5 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Denial of service
- [Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence](https://agentprime.io/advisories/GHSA-rxpr-wq63-jr7p.md)
  `GHSA-rxpr-wq63-jr7p`, `CVE-2026-3408`, `PYSEC-2026-2791` · PyPI `openbabel`: affected `<3.2.0`, fixed in `3.2.0` · CVSS 5.3 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Denial of service, Memory corruption
- [Sigstore Timestamp Authority has OOM due to unbounded metric label cardinality](https://agentprime.io/advisories/GHSA-9c54-x2g4-v92j.md)
  `GHSA-9c54-x2g4-v92j`, `CVE-2026-49835`, `GO-2026-5851` · Go `github.com/sigstore/timestamp-authority` and 1 more: affected `<=1.2.9`, no fixed version yet · CVSS 5.9 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Denial of service
- [RabbitMQ vulnerable to Denial of Service by publishing large messages over the HTTP API](https://agentprime.io/advisories/GHSA-w6cq-9cf4-gqpg.md)
  `GHSA-w6cq-9cf4-gqpg`, `BIT-rabbitmq-2023-46118`, `CVE-2023-46118` · Hex `rabbit_common`: affected `>=3.11.0, <3.11.24 || >=3.12.0, <3.12.7`, fixed in `3.11.24`, `3.12.7` · CVSS 4.9 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Denial of service
- [Microsoft.OpenAPI: Circular schema references may terminate OpenAPI parsing](https://agentprime.io/advisories/GHSA-v5pm-xwqc-g5wc.md)
  `GHSA-v5pm-xwqc-g5wc`, `CVE-2026-49451` · NuGet `Microsoft.OpenApi`: affected `>=2.0.0-preview.11, <2.7.5 || >=3.0.0, <3.5.4`, fixed in `2.7.5`, `3.5.4` · CVSS 7.5 High · Not analysed yet · Published 30 Jun 2026 · Tags: Denial of service
- [fzf vulnerable to denial of service through quadratic HTTP request-body accumulation](https://agentprime.io/advisories/GHSA-mvmf-94v6-879g.md)
  `GHSA-mvmf-94v6-879g`, `CVE-2026-53433`, `GO-2026-6620` · Go `github.com/junegunn/fzf`: affected `<0.73.1`, fixed in `0.73.1` · CVSS 5.7 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Denial of service
- [Denial of service via malformed HTTP/2 requests](https://agentprime.io/advisories/CVE-2026-13474.md)
  `CVE-2026-13474` · CVE record: NetScaler ADC and 1 more · CVSS 8.7 High · Not analysed yet · Published 30 Jun 2026 · Tags: Denial of service
- [Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker have Memory Allocation with Excessive Size Value vulnerability](https://agentprime.io/advisories/GHSA-f77w-px59-cqf5.md)
  `GHSA-f77w-px59-cqf5`, `BIT-activemq-2026-53917`, `CVE-2026-53917` · Maven `org.apache.activemq:activemq-all` and 3 more: affected `<5.19.8 || >=6.0.0, <6.2.7`, fixed in `5.19.8`, `6.2.7` · CVSS 7.5 High · Not analysed yet · Published 30 Jun 2026 · Tags: Denial of service
- [Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have a Denial of Service via Out of Memory vulnerability](https://agentprime.io/advisories/GHSA-9qj4-v6r6-3wmx.md)
  `GHSA-9qj4-v6r6-3wmx`, `BIT-activemq-2026-50750`, `CVE-2026-50750` · Maven `org.apache.activemq:activemq-all` and 2 more: affected `>=5.19.7, <5.19.8 || >=6.2.6, <6.2.7`, fixed in `5.19.8`, `6.2.7` · CVSS 7.5 High · Not analysed yet · Published 30 Jun 2026 · Tags: Denial of service
- [Apache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ All has a Memory Allocation with Excessive Size Value vulnerability](https://agentprime.io/advisories/GHSA-7259-vf48-52q3.md)
  `GHSA-7259-vf48-52q3`, `BIT-activemq-2026-50734`, `CVE-2026-50734` · Maven `org.apache.activemq:activemq-all` and 2 more: affected `<5.19.8 || >=6.0.0, <6.2.7`, fixed in `5.19.8`, `6.2.7` · CVSS 7.5 High · Not analysed yet · Published 30 Jun 2026 · Tags: Denial of service
- [Net::BitTorrent versions through 2.1.0 for Perl allow remote memory exhaustion via deeply nested bencoded input](https://agentprime.io/advisories/CVE-2026-57081.md)
  `CVE-2026-57081` · CVE record: SANKO Net::BitTorrent · CVSS 7.5 High · Not analysed yet · Published 30 Jun 2026 · Tags: Denial of service
- [Net::BitTorrent versions through 2.1.0 for Perl allow remote memory exhaustion via an uncapped peer-wire message-length prefix](https://agentprime.io/advisories/CVE-2026-57080.md)
  `CVE-2026-57080` · CVE record: SANKO Net::BitTorrent · CVSS 7.5 High · Not analysed yet · Published 30 Jun 2026 · Tags: Denial of service
- [Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: Unbounded header buffer in STOMP NIO codec](https://agentprime.io/advisories/CVE-2026-53916.md)
  `CVE-2026-53916` · CVE record: Apache Software Foundation Apache ActiveMQ and 2 more · CVSS 7.5 High · Not analysed yet · Published 30 Jun 2026 · Tags: Denial of service
- [DVP-12SE Exposure of Sensitive Information Vulnerability](https://agentprime.io/advisories/CVE-2026-12818.md)
  `CVE-2026-12818` · CVE record: deltaww DVP-12SE · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jun 2026 · Tags: Denial of service
- [An issue in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_44af70 component](https://agentprime.io/advisories/CVE-2026-52197.md)
  `CVE-2026-52197` · CVE record · CVSS 7.5 High · Not analysed yet · Published 30 Jun 2026 · Tags: Denial of service
- [Deadlock denial of service in USB CDC-NCM device class on TX enqueue failure](https://agentprime.io/advisories/CVE-2026-10647.md)
  `CVE-2026-10647` · CVE record: zephyrproject zephyr · CVSS 5.3 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Denial of service
- [JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call to minify(), allowing unbounded memory growth](https://agentprime.io/advisories/CVE-2026-56018.md)
  `CVE-2026-56018` · CVE record: GTERMARS JavaScript::Minifier::XS · CVSS 7.5 High · Not analysed yet · Published 29 Jun 2026 · Tags: Denial of service
- [CSS::Minifier::XS versions before 0.14 for Perl have a memory leak when the entire document is minified away](https://agentprime.io/advisories/CVE-2026-13593.md)
  `CVE-2026-13593` · CVE record: GTERMARS CSS::Minifier::XS · CVSS 6.5 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Denial of service
- [Atom-table exhaustion denial-of-service via JSON parse_document in MDEx](https://agentprime.io/advisories/GHSA-923r-7vf4-5vw8.md)
  `GHSA-923r-7vf4-5vw8`, `CVE-2026-53426`, `EEF-CVE-2026-53426` · Hex `mdex`: affected `>=0.4.3, <0.13.2`, fixed in `0.13.2` · CVSS 8.2 High · Not analysed yet · Published 29 Jun 2026 · Tags: Denial of service
- [Uncontrolled recursion over deeply nested Markdown crashes the BEAM in mdex](https://agentprime.io/advisories/GHSA-3w4f-53g2-f66p.md)
  `GHSA-3w4f-53g2-f66p`, `CVE-2026-54888`, `EEF-CVE-2026-54888` · Hex `mdex` and 1 more: affected `>=0.3.0, <0.12.3`, fixed in `0.12.3` · CVSS 6.9 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Denial of service
- [Unbounded native memory leak in mdex escaped-tag rendering enables unauthenticated denial of service](https://agentprime.io/advisories/GHSA-cmvp-gp9f-23xw.md)
  `GHSA-cmvp-gp9f-23xw`, `CVE-2026-53429`, `EEF-CVE-2026-53429` · Hex `mdex` and 1 more: affected `>=0.11.0, <0.12.3`, fixed in `0.12.3` · CVSS 6.9 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Denial of service
- [Unbounded memory allocation in highlight_lines range expansion in mdex](https://agentprime.io/advisories/GHSA-j93q-9cvj-rxfm.md)
  `GHSA-j93q-9cvj-rxfm`, `CVE-2026-53428`, `EEF-CVE-2026-53428` · Hex `mdex` and 1 more: affected `>=0.11.0, <0.12.3`, fixed in `0.12.3` · CVSS 6.9 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Denial of service
- [P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing](https://agentprime.io/advisories/CVE-2026-13757.md)
  `CVE-2026-13757` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Denial of service
- [GPAC ISOBMFF base_encoding.c data amplification](https://agentprime.io/advisories/CVE-2026-13523.md)
  `CVE-2026-13523` · CVE record: GPAC · CVSS 4.8 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Denial of service, CWE-409
- [78 xiaozhi-esp32 MQTT Goodbye mqtt_protocol.cc GetInstance denial of service](https://agentprime.io/advisories/CVE-2026-13491.md)
  `CVE-2026-13491` · CVE record: 78 xiaozhi-esp32 · CVSS 6.3 Medium · Not analysed yet · Published 28 Jun 2026 · Tags: Denial of service
- [ImageMagick: Memory Leak in wand option parser when providing invalid arguments](https://agentprime.io/advisories/GHSA-j989-f892-2335.md)
  `GHSA-j989-f892-2335`, `CVE-2026-53464` · NuGet `Magick.NET-Q16-AnyCPU` and 16 more: affected `<14.14.0`, fixed in `14.14.0` · CVSS 4.0 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Denial of service
- [Nezha Monitoring: Unbounded WebSocket Streams — Resource Exhaustion DoS](https://agentprime.io/advisories/GHSA-jg62-j5h6-8mpq.md)
  `GHSA-jg62-j5h6-8mpq`, `CVE-2026-53522`, `GO-2026-5831` · Go `github.com/nezhahq/nezha`: affected `>=1.0.0, <2.2.0`, fixed in `2.2.0` · CVSS 6.5 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Denial of service
- [js-toml vulnerable to CPU exhaustion via O(n^2) BigInt construction on radix-prefixed integer literals](https://agentprime.io/advisories/GHSA-wp3c-266w-4qfq.md)
  `GHSA-wp3c-266w-4qfq`, `CVE-2026-49293` · npm `js-toml`: affected `<1.1.2`, fixed in `1.1.2` · CVSS 7.5 High · Not analysed yet · Published 26 Jun 2026 · Tags: Denial of service
- [@cardano402/mcp-server missing spending limits, LAN-exposed HTTP transport, and SSRF via catalog.server.url](https://agentprime.io/advisories/GHSA-rp72-5v5q-2446.md)
  `GHSA-rp72-5v5q-2446` · npm `@cardano402/mcp-server`: affected `<0.1.2`, fixed in `0.1.2` · CVSS 0.0 None · Not analysed yet · Published 26 Jun 2026 · Tags: Path traversal, Denial of service, Broken access control, Server-side request forgery (SSRF)
- [Scriban: ExpressionDepthLimit guard is non-enforcing — parser-recursion DoS in 6.6.0–7.2.0 (incomplete fix for GHSA-wgh7-7m3c-fx25 / GHSA-p6q4-fgr8-vx4p)](https://agentprime.io/advisories/GHSA-6q7j-xr26-3h2c.md)
  `GHSA-6q7j-xr26-3h2c`, `CVE-2026-74783` · NuGet `Scriban` and 1 more: affected `>=6.6.0, <7.2.1`, fixed in `7.2.1` · CVSS 8.7 High · Not analysed yet · Published 26 Jun 2026 · Tags: Denial of service
- [Scriban: array \* int (ScriptArray\<T>.TryEvaluate) bypasses LoopLimit — incomplete fix for GHSA-c875-h985-hvrc, missed sibling of GHSA-24c8-4792-22hx](https://agentprime.io/advisories/GHSA-q6rr-fm2g-g5x8.md)
  `GHSA-q6rr-fm2g-g5x8`, `CVE-2026-73062` · NuGet `Scriban` and 1 more: affected `>=3.0.0, <7.2.1`, fixed in `7.2.1` · CVSS 8.7 High · Not analysed yet · Published 26 Jun 2026 · Tags: Denial of service
- [joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserialization](https://agentprime.io/advisories/GHSA-wphv-vfrh-23q5.md)
  `GHSA-wphv-vfrh-23q5`, `CVE-2026-48990`, `PYSEC-2026-2530` · PyPI `joserfc`: affected `>=1.3.4, <1.6.7`, fixed in `1.6.7` · CVSS 5.3 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Denial of service
- [python-socketio: Binary attachment accumulation can cause denial of service](https://agentprime.io/advisories/GHSA-5w7q-77mv-v69f.md)
  `GHSA-5w7q-77mv-v69f`, `CVE-2026-48804`, `PYSEC-2026-3042` · PyPI `python-socketio`: affected `<5.16.2`, fixed in `5.16.2` · CVSS 7.5 High · Not analysed yet · Published 26 Jun 2026 · Tags: Denial of service
- [python-engineio has unbound thread allocation that can cause denial of service](https://agentprime.io/advisories/GHSA-cgwc-pv48-fhj5.md)
  `GHSA-cgwc-pv48-fhj5`, `CVE-2026-48802`, `PYSEC-2026-3032` · PyPI `python-engineio`: affected `<4.13.2`, fixed in `4.13.2` · CVSS 7.5 High · Not analysed yet · Published 26 Jun 2026 · Tags: Denial of service
- [python-engineio has possible denial of service due to maximum payload size sometimes not being enforced](https://agentprime.io/advisories/GHSA-m9gh-vj53-gvh9.md)
  `GHSA-m9gh-vj53-gvh9`, `CVE-2026-48809`, `PYSEC-2026-3033` · PyPI `python-engineio`: affected `<4.13.2`, fixed in `4.13.2` · CVSS 7.5 High · Not analysed yet · Published 26 Jun 2026 · Tags: Denial of service
- [LinkifyIt#match scan loop has quadratic algorithmic complexity](https://agentprime.io/advisories/GHSA-22p9-wv53-3rq4.md)
  `GHSA-22p9-wv53-3rq4`, `CVE-2026-48801` · npm `linkify-it`: affected `<5.0.1`, fixed in `5.0.1` · CVSS 8.7 High · Not analysed yet · Published 26 Jun 2026 · Tags: Denial of service
- [Hysteria: http large header with sniff cause server DoS](https://agentprime.io/advisories/GHSA-jqc5-2p7q-fqfc.md)
  `GHSA-jqc5-2p7q-fqfc`, `GO-2026-5813` · Go `github.com/apernet/hysteria`: affected `<2.9.2`, fixed in `2.9.2` · CVSS 7.5 High · Not analysed yet · Published 26 Jun 2026 · Tags: Denial of service
- [Hysteria vulnerable to server crash when max_datagram_frame_size very small](https://agentprime.io/advisories/GHSA-qh5x-rfwf-rvfv.md)
  `GHSA-qh5x-rfwf-rvfv`, `GO-2026-5807` · Go `github.com/apernet/hysteria`: affected `<2.9.2`, fixed in `2.9.2` · CVSS 7.5 High · Not analysed yet · Published 26 Jun 2026 · Tags: Denial of service
- [fluent-plugin-opentelemetry Has Denial of Service (DoS) via Large Payloads and Decompression Bombs in \`in_opentelemetry\`](https://agentprime.io/advisories/GHSA-2jc5-xhx8-qj6h.md)
  `GHSA-2jc5-xhx8-qj6h`, `CVE-2026-44163` · RubyGems `fluent-plugin-opentelemetry`: affected `<0.5.3`, fixed in `0.5.3` · CVSS 5.3 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Denial of service, CWE-409
- [fluent-plugin-s3 Vulnerable to Denial of Service (DoS) via Decompression Bomb in \`in_s3\`](https://agentprime.io/advisories/GHSA-xv9w-7v6q-hpjh.md)
  `GHSA-xv9w-7v6q-hpjh`, `CVE-2026-44162` · RubyGems `fluent-plugin-s3`: affected `>=0.7.0, <1.8.5`, fixed in `1.8.5` · CVSS 2.7 Low · Not analysed yet · Published 26 Jun 2026 · Tags: Denial of service, CWE-409
- [AutoGPT: There is a DoS vulnerability in AITextSummarizerBlock](https://agentprime.io/advisories/CVE-2025-32394.md)
  `CVE-2025-32394` · CVE record: Significant-Gravitas AutoGPT · CVSS 5.3 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Denial of service, CWE-405
- [AutoGPT: There is a DoS vulnerability in ExtractTextInformationBlock](https://agentprime.io/advisories/CVE-2025-32423.md)
  `CVE-2025-32423` · CVE record: Significant-Gravitas AutoGPT · CVSS 5.3 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Denial of service
- [Apache Kerby vulnerable to denial of service](https://agentprime.io/advisories/GHSA-x6vc-x4v4-hjhr.md)
  `GHSA-x6vc-x4v4-hjhr`, `CVE-2026-57914` · Maven `org.apache.kerby:kerby-asn1`: affected `<2.1.2`, fixed in `2.1.2` · CVSS 6.5 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Denial of service
- [Integer overflow in node](https://agentprime.io/advisories/CVE-2026-48933.md)
  `CVE-2026-48933` · CVE record: nodejs node · CVSS 7.5 High · Not analysed yet · Published 26 Jun 2026 · Tags: Memory corruption, Denial of service
- [Uncontrolled resource consumption in node](https://agentprime.io/advisories/CVE-2026-48619.md)
  `CVE-2026-48619` · CVE record: nodejs node · CVSS 5.3 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Denial of service
- [Apicurio Registry is vulnerable to denial of service through XML entity expansion](https://agentprime.io/advisories/GHSA-748j-wm96-4wh5.md)
  `GHSA-748j-wm96-4wh5`, `CVE-2026-12993` · Maven `io.apicurio:apicurio-registry-schema-util-xml`: affected `>=3.3.0, <3.3.1 || <3.2.6`, fixed in `3.3.1`, `3.2.6` · CVSS 6.5 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Denial of service
- [KubeVirt downward metrics virtio-serial server vulnerable to unbounded memory consumption](https://agentprime.io/advisories/GHSA-6f2p-2qg2-qqch.md)
  `GHSA-6f2p-2qg2-qqch`, `CVE-2026-13322`, `GO-2026-6912` · Go `github.com/kubevirt/kubevirt`: affected `>=1.1.0-alpha.0, <=1.10.0-rc.0`, no fixed version yet · CVSS 3.8 Low · Not analysed yet · Published 26 Jun 2026 · Tags: Denial of service
- [An issue in the DSO::mmap_and_copy function of relibc commit 61f42d allows attackers to cause a Denial of Service (DoS) via loading a crafted shared library.](https://agentprime.io/advisories/CVE-2026-38641.md)
  `CVE-2026-38641` · CVE record · CVSS 7.5 High · Not analysed yet · Published 26 Jun 2026 · Tags: Denial of service

Newest: <https://agentprime.io/advisories/tag/dos.md>
Older: <https://agentprime.io/advisories/tag/dos.md?cursor=WyIyMDI2LTA2LTI2VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyNi0zODY0MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=dos&cursor=WyIyMDI2LTA3LTAxVDE2OjIxOjI0LjQzNzAwMFoiLCJDVkUtMjAyNi01NjE0OSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/dos/?cursor=WyIyMDI2LTA3LTAxVDE2OjIxOjI0LjQzNzAwMFoiLCJDVkUtMjAyNi01NjE0OSJd>. Everything for agents: <https://agentprime.io/llms.txt>.