# Denial of service.

Crashes, hangs and resource exhaustion, ReDoS included. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via thenteraction between traj_server, poscm…](https://agentprime.io/advisories/CVE-2026-71641.md)
  `CVE-2026-71641` · CVE record · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026 · Tags: Denial of service
- [rclone: S3 multipart declared-length memory exhaustion](https://agentprime.io/advisories/GHSA-2p48-j3qc-rx9f.md)
  `GHSA-2p48-j3qc-rx9f`, `BIT-rclone-2026-88045`, `CVE-2026-88045`, `GO-2026-6456` · Go `github.com/rclone/rclone`: affected `>=1.75.0, <1.75.1`, fixed in `1.75.1` · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service
- [Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout](https://agentprime.io/advisories/GHSA-3g9q-v48f-hh9w.md)
  `GHSA-3g9q-v48f-hh9w`, `CVE-2026-87011`, `PYSEC-2026-4117` · PyPI `open-webui`: affected `>=0.9.0, <0.11.1`, fixed in `0.11.1` · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service, CWE-405
- [Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle](https://agentprime.io/advisories/GHSA-8r35-5x5r-hv74.md)
  `GHSA-8r35-5x5r-hv74`, `CVE-2026-87013`, `PYSEC-2026-4121` · PyPI `open-webui`: affected `>=0.10.0, <0.11.1`, fixed in `0.11.1` · CVSS 4.3 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service
- [mistral.rs: Unbounded Remote Media Fetch and Video Frame Expansion DoS](https://agentprime.io/advisories/GHSA-m3wp-48jr-vr4g.md)
  `GHSA-m3wp-48jr-vr4g` · crates.io `mistralrs-server-core`: affected `<0.8.18`, fixed in `0.8.18` · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service
- [ikev2: unbounded client transform storage can lead to resource exhaustion](https://agentprime.io/advisories/CVE-2026-45769.md)
  `CVE-2026-45769` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service
- [Suricata ldap: unbounded responses per transaction can lead to resource exhaustion](https://agentprime.io/advisories/CVE-2026-45768.md)
  `CVE-2026-45768` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service
- [Suricata nfs: unbounded stateful structures can lead to resource exhaustion](https://agentprime.io/advisories/CVE-2026-45766.md)
  `CVE-2026-45766` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service
- [Suricata dnp3: unbounded reassembly can lead to resource exhaustion](https://agentprime.io/advisories/CVE-2026-45765.md)
  `CVE-2026-45765` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service
- [Suricata http1: quadratic Content-Disposition processing can lead to denial of service](https://agentprime.io/advisories/CVE-2026-45759.md)
  `CVE-2026-45759` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service
- [Traefik: respondingTimeouts.readTimeout is not applied to HTTP/3, leaving slow-body uploads unbounded](https://agentprime.io/advisories/GHSA-7ghq-v6jf-g56c.md)
  `GHSA-7ghq-v6jf-g56c`, `CVE-2026-88012`, `CVE-2026-88878`, `GO-2026-6454` · Go `github.com/traefik/traefik/v2` and 1 more: affected `>=2.8.2, <2.11.56`, fixed in `2.11.56` · CVSS 6.9 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service
- [Consul vulnerable to a denial of service in the native RPC listener](https://agentprime.io/advisories/CVE-2026-87106.md)
  `CVE-2026-87106` · CVE record: HashiCorp Consul and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service
- [IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities](https://agentprime.io/advisories/CVE-2026-9338.md)
  `CVE-2026-9338` · CVE record: IBM WebSphere Application Server · CVSS 5.3 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service
- [zstd-jni 1.4.8-4 through 1.5.7-13 Denial of Service via Negative Length](https://agentprime.io/advisories/CVE-2026-89045.md)
  `CVE-2026-89045` · CVE record: luben zstd-jni · CVSS 5.1 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service
- [CP210x Denial of Service](https://agentprime.io/advisories/CVE-2026-15417.md)
  `CVE-2026-15417` · CVE record: Silicon Labs silabser.sys driver · CVSS 6.9 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service
- [n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path](https://agentprime.io/advisories/GHSA-j535-v25q-vx3q.md)
  `GHSA-j535-v25q-vx3q`, `CVE-2026-86081` · npm `n8n`: affected `<1.123.76 || >=2.0.0, <2.37.7 || >=2.38.0, <2.38.2`, fixed in `1.123.76`, `2.37.7`, `2.38.2` · CVSS 7.1 High · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service
- [n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint](https://agentprime.io/advisories/GHSA-hh89-3r9w-qj3j.md)
  `GHSA-hh89-3r9w-qj3j`, `CVE-2026-86075` · npm `n8n`: affected `<2.37.7 || >=2.38.0, <2.38.2`, fixed in `2.37.7`, `2.38.2` · CVSS 8.7 High · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service
- [Excelize: Streaming GetRows row-bound bypass causes attacker-controlled allocation](https://agentprime.io/advisories/GHSA-q5j5-6p94-4gwc.md)
  `GHSA-q5j5-6p94-4gwc`, `CVE-2026-59161`, `GO-2026-6453` · Go `github.com/xuri/excelize` and 1 more: affected `<=1.4.0`, no fixed version yet · CVSS 8.7 High · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service
- [ION-DTN < 4.2.1-a.1 Denial of Service via canonicalizePayloadBlock() Assertion](https://agentprime.io/advisories/CVE-2026-75584.md)
  `CVE-2026-75584` · CVE record: nasa-jpl ION-DTN · CVSS 8.7 High · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service
- [Suricata lua: sandbox allocation limit not enforced for new allocations](https://agentprime.io/advisories/CVE-2026-45763.md)
  `CVE-2026-45763` · CVE record: OISF suricata · CVSS 5.9 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service
- [GV-LPC2011/LPC2211 - Unauthenticated VLSVR Slowloris and Memory Resource Exhaustion](https://agentprime.io/advisories/CVE-2026-88290.md)
  `CVE-2026-88290` · CVE record: GeoVision Inc. GV-LPC2011/LPC2211 · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service
- [GV-LPC2011/LPC2211 - PTZ Connection-State Accept-Loop Denial of Service](https://agentprime.io/advisories/CVE-2026-88286.md)
  `CVE-2026-88286` · CVE record: GeoVision Inc. GV-LPC2011/LPC2211 · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service
- [Skupper-router: skupper-router: unbounded recursion in amqp field parser leads to denial of service](https://agentprime.io/advisories/CVE-2026-88763.md)
  `CVE-2026-88763` · CVE record: Red Hat Service Interconnect 2 for RHEL 8 and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service
- [Apache Artemis, Apache ActiveMQ Artemis: Message selector wildcard handling could lead to denial of service](https://agentprime.io/advisories/CVE-2026-75880.md)
  `CVE-2026-75880` · CVE record: Apache Software Foundation Apache Artemis and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service
- [An issue in EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via the checkCollisionCallback, execFSMCallback, planFrom…](https://agentprime.io/advisories/CVE-2026-71647.md)
  `CVE-2026-71647` · CVE record · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service
- [An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via the EGOReplanFSM component](https://agentprime.io/advisories/CVE-2026-71643.md)
  `CVE-2026-71643` · CVE record · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service
- [An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via the EGOReplanFSM::checkCollisionCallback…](https://agentprime.io/advisories/CVE-2026-71642.md)
  `CVE-2026-71642` · CVE record · CVSS 4.0 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service
- [Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree](https://agentprime.io/advisories/GHSA-3cgp-3cqx-j8w2.md)
  `GHSA-3cgp-3cqx-j8w2`, `CVE-2026-88000`, `PYSEC-2026-3877` · PyPI `open-webui`: affected `>=0.10.0, <0.11.1`, fixed in `0.11.1` · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Denial of service
- [Open WebUI: Any authenticated user can hang the server via a cyclic chat message history](https://agentprime.io/advisories/GHSA-jqhh-cjmq-vmv6.md)
  `GHSA-jqhh-cjmq-vmv6`, `CVE-2026-88002`, `PYSEC-2026-3879` · PyPI `open-webui`: affected `>=0.5.0, <0.11.1`, fixed in `0.11.1` · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Denial of service
- [Unauthenticated Network-Based Denial of Service in CPPM systems](https://agentprime.io/advisories/CVE-2026-73786.md)
  `CVE-2026-73786` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 7.5 High · Not analysed yet · Published 9 Sept 2026 · Tags: Denial of service
- [smol-toml: Denial of Service via malformed TOML documents](https://agentprime.io/advisories/GHSA-7w5x-hrqm-74c2.md)
  `GHSA-7w5x-hrqm-74c2`, `CVE-2026-85730` · npm `smol-toml`: affected `<1.7.1`, fixed in `1.7.1` · CVSS 8.2 High · Not analysed yet · Published 9 Sept 2026 · Tags: Denial of service, CWE-606
- [containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service](https://agentprime.io/advisories/GHSA-7jxh-36q5-gcqv.md)
  `GHSA-7jxh-36q5-gcqv`, `CVE-2026-53495`, `GO-2026-6444` · Go `github.com/containerd/containerd` and 1 more: affected `<1.7.35`, fixed in `1.7.35` · CVSS 6.8 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Denial of service
- [Fast DDS DDSSQLFilter Recursive Parser Stack Exhaustion (Remote DoS)](https://agentprime.io/advisories/CVE-2026-22591.md)
  `CVE-2026-22591` · CVE record: eProsima Fast-DDS · CVSS 7.5 High · Not analysed yet · Published 9 Sept 2026 · Tags: Denial of service
- [Uncontrolled Memory Allocation in cel-go](https://agentprime.io/advisories/CVE-2026-83530.md)
  `CVE-2026-83530` · CVE record: Google cel-go · CVSS 6.9 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Denial of service
- [t-digest 3.1 through 3.3 Denial of Service via NaN Centroid Means in MergingDigest.fromBytes](https://agentprime.io/advisories/CVE-2026-87822.md)
  `CVE-2026-87822` · CVE record: tdunning t-digest · CVSS 8.7 High · Not analysed yet · Published 9 Sept 2026 · Tags: Denial of service
- [Duplicate Advisory: Denial of Service via catastrophic backtracking (ReDoS) in Actor.name_email_regex — commit author/committer field parsing](https://agentprime.io/advisories/GHSA-qpf5-3wfw-fh7q.md)
  `GHSA-qpf5-3wfw-fh7q` · PyPI `gitpython`: affected `<=3.1.59`, no fixed version yet · CVSS 7.5 High · Withdrawn · Not analysed yet · Published 9 Sept 2026 · Tags: Denial of service
- [Apache Nutch: Unauthenticated forced shutdown and job interruption in Nutch Server (Nutch REST API)](https://agentprime.io/advisories/CVE-2026-41869.md)
  `CVE-2026-41869` · CVE record: Apache Software Foundation Apache Nutch · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Denial of service, Broken access control
- [KeePass 2.35 through 2.61.1 Memory Exhaustion via KDBX Header Field Size](https://agentprime.io/advisories/CVE-2026-86776.md)
  `CVE-2026-86776` · CVE record: KeePass KeePass · CVSS 4.6 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Denial of service
- [A divide-by-zero vulnerability in the gf_dash_get_timeline_duration function (src/media_tools/dash_client.c) of GPAC v26.07.0 allows attackers to cause a Denial of Service (DoS) via a crafted MPD Seg…](https://agentprime.io/advisories/CVE-2026-79513.md)
  `CVE-2026-79513` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Denial of service
- [An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to cause a denial of service via the function gf_route_media_complete_object().](https://agentprime.io/advisories/CVE-2026-71616.md)
  `CVE-2026-71616` · CVE record · CVSS 6.2 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Denial of service
- [Denial of Service via Unbounded Recursion in go-attestation Windows SIPA Parser](https://agentprime.io/advisories/CVE-2026-19201.md)
  `CVE-2026-19201` · CVE record: Google go-attestation · CVSS 6.6 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service
- [MCP Kotlin SDK's unbounded line buffer in StdioServerTransport/StdioClientTransport leads to memory exhaustion (DoS)](https://agentprime.io/advisories/CVE-2026-53937.md)
  `CVE-2026-53937` · CVE record: modelcontextprotocol io.modelcontextprotocol:kotlin-sdk and 3 more · CVSS 6.2 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service
- [Nodemailer: Quadratic (O(n²)) time complexity in addressparser allows remote denial of service via a crafted address list](https://agentprime.io/advisories/GHSA-2x7j-588g-ccc2.md)
  `GHSA-2x7j-588g-ccc2`, `CVE-2026-92596` · npm `nodemailer`: affected `<9.1.0`, fixed in `9.1.0` · CVSS 8.7 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service
- [multer vulnerable to Denial of Service via file descriptor leak on aborted uploads](https://agentprime.io/advisories/GHSA-qfvm-cv95-jqjf.md)
  `GHSA-qfvm-cv95-jqjf`, `CVE-2026-77037` · npm `multer`: affected `>=2.2.0, <2.3.0`, fixed in `2.3.0` · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service, CWE-459
- [multer vulnerable to Denial of Service via oversized array index in field names](https://agentprime.io/advisories/GHSA-535w-7cp7-47q4.md)
  `GHSA-535w-7cp7-47q4`, `CVE-2026-82333` · npm `multer`: affected `<2.3.0`, fixed in `2.3.0` · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service
- [js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources](https://agentprime.io/advisories/GHSA-2883-xcg3-v3hh.md)
  `GHSA-2883-xcg3-v3hh`, `CVE-2026-84375` · npm `js-yaml`: affected `>=3.0.0, <3.15.2 || >=4.0.0, <4.3.2`, fixed in `3.15.2`, `4.3.2` · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service
- [Tiptap: Quadratic ReDoS in block and inline Markdown attribute parsing](https://agentprime.io/advisories/GHSA-j95f-988m-3j2f.md)
  `GHSA-j95f-988m-3j2f` · npm `@tiptap/core`: affected `>=3.7.0, <3.30.5`, fixed in `3.30.5` · CVSS 4.0, no score published · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service
- [Hono: Unbounded dot-notation nesting in \`parseBody()\` can cause memory exhaustion](https://agentprime.io/advisories/GHSA-g6gw-c38x-mqfc.md)
  `GHSA-g6gw-c38x-mqfc`, `CVE-2026-84364` · npm `hono`: affected `<4.13.5`, fixed in `4.13.5` · CVSS 5.3 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service
- [xmldom: Quadratic-time attribute deduplication](https://agentprime.io/advisories/GHSA-8344-3jmq-59r6.md)
  `GHSA-8344-3jmq-59r6`, `CVE-2026-83613` · npm `xmldom` and 1 more: affected `<=0.6.0`, no fixed version yet · CVSS 8.7 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service
- [xmldom: End-tag Whitespace-Trim Regex ReDoS — quadratic backtracking in the 0.8.x end-tag parser](https://agentprime.io/advisories/GHSA-x4fp-j954-r2f4.md)
  `GHSA-x4fp-j954-r2f4`, `CVE-2026-83619` · npm `@xmldom/xmldom`: affected `>=0.7.0, <0.8.15`, fixed in `0.8.15` · CVSS 8.7 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service
- [xmldom: Quadratic-memory consumption](https://agentprime.io/advisories/GHSA-965w-775f-mr7g.md)
  `GHSA-965w-775f-mr7g`, `CVE-2026-83615` · npm `xmldom` and 1 more: affected `>=0.1.5, <=0.6.0`, no fixed version yet · CVSS 8.7 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service
- [xmldom: Quadratic-time parsing via the malformed-input recovery path — \`parseElementStartPart\` re-scan and \`normalize()\` adjacent-text merge](https://agentprime.io/advisories/GHSA-93r5-fhx6-vmg9.md)
  `GHSA-93r5-fhx6-vmg9`, `CVE-2026-83614` · npm `xmldom` and 1 more: affected `>=0.3.0, <=0.6.0`, no fixed version yet · CVSS 8.7 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service
- [xmldom: HTML raw-text closing-tag case mismatch causes output amplification](https://agentprime.io/advisories/GHSA-6mj3-qw4j-hgrw.md)
  `GHSA-6mj3-qw4j-hgrw`, `CVE-2026-83612` · npm `@xmldom/xmldom`: affected `>=0.9.0-beta.1, <0.9.12`, fixed in `0.9.12` · CVSS 8.7 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service, CWE-178
- [Colord: Slow rejection of oversized malformed color strings](https://agentprime.io/advisories/GHSA-2wm5-q62r-hmrv.md)
  `GHSA-2wm5-q62r-hmrv`, `CVE-2026-85062` · npm `colord`: affected `<2.9.4`, fixed in `2.9.4` · CVSS 6.9 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service
- [HTTPX2: Quadratic SSE line buffering can cause CPU denial of service](https://agentprime.io/advisories/GHSA-f2fp-rgf2-35cp.md)
  `GHSA-f2fp-rgf2-35cp`, `CVE-2026-84378`, `PYSEC-2026-3847` · PyPI `httpx2`: affected `>=2.5.0, <2.10.0`, fixed in `2.10.0` · CVSS 5.9 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service
- [xmldom PI grammar regex ReDoS: quadratic backtracking on unterminated processing instructions](https://agentprime.io/advisories/GHSA-g53g-w8rj-fmg7.md)
  `GHSA-g53g-w8rj-fmg7`, `CVE-2026-83606` · npm `@xmldom/xmldom`: affected `>=0.9.0-beta.9, <0.9.11`, fixed in `0.9.11` · CVSS 8.7 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service
- [Acrobat Reader | Uncontrolled Resource Consumption (CWE-400)](https://agentprime.io/advisories/CVE-2026-82001.md)
  `CVE-2026-82001` · CVE record: Adobe Adobe Acrobat and 2 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service
- [NLTK: Pl196xCorpusReader has quadratic ReDoS on malformed TEI blocks](https://agentprime.io/advisories/GHSA-8mpw-7fpc-4gqj.md)
  `GHSA-8mpw-7fpc-4gqj`, `CVE-2026-81725`, `PYSEC-2026-3752` · PyPI `nltk`: affected `<3.10.3`, fixed in `3.10.3` · CVSS 6.3 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service
- [NLTK: ReDoS in nltk.tgrep via unvalidated user-supplied regular expressions](https://agentprime.io/advisories/GHSA-w3v8-gmh9-3wv7.md)
  `GHSA-w3v8-gmh9-3wv7`, `CVE-2026-80206`, `PYSEC-2026-3751` · PyPI `nltk`: affected `<3.10.3`, fixed in `3.10.3` · CVSS 8.2 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service
- [NLTK: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressions](https://agentprime.io/advisories/GHSA-rrv8-h7p8-rx55.md)
  `GHSA-rrv8-h7p8-rx55`, `CVE-2026-80205`, `PYSEC-2026-3750` · PyPI `nltk`: affected `<3.10.0`, fixed in `3.10.0` · CVSS 8.7 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service

Newest: <https://agentprime.io/advisories/tag/dos.md>
Older: <https://agentprime.io/advisories/tag/dos.md?cursor=WyIyMDI2LTA5LTA4VDIwOjI4OjEzLjAwMDAwMFoiLCJHSFNBLXJydjgtaDdwOC1yeDU1Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=dos&cursor=WyIyMDI2LTA5LTExVDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyNi03MTY0NiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/dos/?cursor=WyIyMDI2LTA5LTExVDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyNi03MTY0NiJd>. Everything for agents: <https://agentprime.io/llms.txt>.