# Denial of service. Crashes, hangs and resource exhaustion, ReDoS included. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [js-toml: Uncontrolled recursion in \`load()\` causes \`RangeError\` (stack exhaustion) on deeply nested input](https://agentprime.io/advisories/CVE-2026-63386.md) `CVE-2026-63386` · CVE record: sunnyadn js-toml · CVSS 5.3 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service - [icalendar: Denial of service via unbounded VALARM REPEAT expansion](https://agentprime.io/advisories/CVE-2026-77399.md) `CVE-2026-77399` · CVE record: collective icalendar · CVSS 6.5 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service - [Bridge | Uncontrolled Recursion (CWE-674)](https://agentprime.io/advisories/CVE-2026-75655.md) `CVE-2026-75655` · CVE record: Adobe Adobe Bridge · CVSS 7.8 High · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service - [CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)](https://agentprime.io/advisories/CVE-2026-75632.md) `CVE-2026-75632` · CVE record: Adobe Content Credentials Rust SDK and 1 more · CVSS 7.5 High · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service - [Uncontrolled recursion in Ubiquiti Inc Dream Machines and others](https://agentprime.io/advisories/CVE-2026-95861.md) `CVE-2026-95861` · CVE record: Ubiquiti Inc Dream Machines and 4 more · CVSS 7.5 High · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service - [Netdata: Streaming protocol chart slot guard off-by-one allows \~16 GiB allocation request, crashing parent agent](https://agentprime.io/advisories/CVE-2026-83600.md) `CVE-2026-83600` · CVE record: netdata netdata · CVSS 6.5 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service, CWE-193 - [Unauthenticated /enterprise/create-user mints lifetime top-tier organizations and discloses their API key](https://agentprime.io/advisories/CVE-2026-94455.md) `CVE-2026-94455` · CVE record: GitroomHQ postiz-app · CVSS 7.1 High · Not analysed yet · Published 22 Sept 2026 · Tags: Authentication bypass, Denial of service, CWE-345 - [Rpcbind: unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service](https://agentprime.io/advisories/CVE-2026-94640.md) `CVE-2026-94640` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service - [Vector: Unauthenticated denial of service in the \`logstash\` source via unbounded memory allocation.](https://agentprime.io/advisories/CVE-2026-77619.md) `CVE-2026-77619` · CVE record: vectordotdev vector · CVSS 8.7 High · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service, CWE-130 - [radare2: Infinite relocation-chain loop causes denial of service in radare2 NE parser](https://agentprime.io/advisories/CVE-2026-81885.md) `CVE-2026-81885` · CVE record: radareorg radare2 · CVSS 5.5 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service - [radare2: Uncontrolled memory allocation in radare2 dmp64 parser](https://agentprime.io/advisories/CVE-2026-81886.md) `CVE-2026-81886` · CVE record: radareorg radare2 · CVSS 5.5 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service - [radare2: Uncontrolled resource consumption in radare2 PEF loader](https://agentprime.io/advisories/CVE-2026-81880.md) `CVE-2026-81880` · CVE record: radareorg radare2 · CVSS 5.5 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service - [Sync-in Server has a ReDoS via Unsanitized Regex in Sync Diff \`pathFilters\`](https://agentprime.io/advisories/GHSA-jx63-h26r-8cph.md) `GHSA-jx63-h26r-8cph`, `CVE-2026-58270` · npm `@sync-in/server`: affected `<2.4.0`, fixed in `2.4.0` · CVSS 6.5 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service - [Uncontrolled resource consumption in NVIDIA Infrastructure Controller](https://agentprime.io/advisories/CVE-2026-65112.md) `CVE-2026-65112` · CVE record: NVIDIA Infrastructure Controller · CVSS 6.5 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service - [Uncontrolled resource consumption in NVIDIA Infrastructure Controller](https://agentprime.io/advisories/CVE-2026-65115.md) `CVE-2026-65115` · CVE record: NVIDIA Infrastructure Controller · CVSS 6.5 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service - [Unbounded post ID array in the bulk reactions endpoint allows denial of service](https://agentprime.io/advisories/CVE-2026-95666.md) `CVE-2026-95666` · CVE record: Mattermost Mattermost · CVSS 4.3 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service - [Superlinear CPU denial of service in Erlang/OTP ASN.1 OBJECT IDENTIFIER decoder](https://agentprime.io/advisories/CVE-2026-65634.md) `CVE-2026-65634` · CVE record: Erlang OTP · CVSS 8.2 High · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service - [SSH daemon allocates unbounded idle session channels, bypassing max_channels](https://agentprime.io/advisories/CVE-2026-68956.md) `CVE-2026-68956` · CVE record: Erlang OTP · CVSS 7.1 High · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service - [Net::IDN::Punycode versions before 2.590 for Perl hang, crash or return a wrong label via unvalidated malformed UTF-8 in encode_punycode](https://agentprime.io/advisories/CVE-2026-87082.md) `CVE-2026-87082` · CVE record · CVSS 7.5 High · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service, CWE-1286 - [Net::IDN::UTS46 versions before 2.590 for Perl allow CPU exhaustion via quadratic punycode encoding of an overlong label before the length check in to_ascii](https://agentprime.io/advisories/CVE-2026-87081.md) `CVE-2026-87081` · CVE record · CVSS 7.5 High · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service - [Net::IDN::Punycode versions before 2.590 for Perl allow CPU exhaustion via quadratic insertion cost when decoding a long label in decode_punycode](https://agentprime.io/advisories/CVE-2026-87079.md) `CVE-2026-87079` · CVE record · CVSS 7.5 High · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service - [Net::IDN::Punycode versions from 2.302 before 2.590 for Perl leak the output buffer on every rejected label in decode_punycode](https://agentprime.io/advisories/CVE-2026-87078.md) `CVE-2026-87078` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service - [Duplicate Advisory: vllm p2p never connected zmq_exhaustion](https://agentprime.io/advisories/GHSA-8qpc-6rxx-4pxf.md) `GHSA-8qpc-6rxx-4pxf` · PyPI `vllm`: affected `<0.30.0`, fixed in `0.30.0` · CVSS 7.5 High · Withdrawn · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service - [A reachable assertion vulnerability exists in YARA 4.5.8 when loading crafted .yrc compiled rule files.](https://agentprime.io/advisories/CVE-2026-88341.md) `CVE-2026-88341` · CVE record · CVSS 5.5 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service - [vLLM through 0.29.0 fails to validate the tp_size parameter in kv_transfer_params on OpenAI-compatible completion endpoints, allowing attackers to allocate unbounded memory. Attackers can supply ar...](https://agentprime.io/advisories/PYSEC-2026-4008.md) `PYSEC-2026-4008`, `CVE-2026-94626` · PyPI `vllm`: affected `<0.30.0`, fixed in `0.30.0` · CVSS 8.7 High · Not analysed yet · Published 21 Sept 2026 · Tags: Denial of service - [vLLM through 0.29.0 contains a resource exhaustion vulnerability in MooncakeConnector where rejected prefill requests create ownerless transfer placeholders that are never reclaimed. Attackers can ...](https://agentprime.io/advisories/PYSEC-2026-4007.md) `PYSEC-2026-4007`, `CVE-2026-94625` · PyPI `vllm`: affected `<0.30.0`, fixed in `0.30.0` · CVSS 6.9 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Denial of service - [vLLM through 0.29.0 contains a denial of service vulnerability in the NIXL connector's prefix caching implementation that fails to properly validate block counts across multi-prompt completion requ...](https://agentprime.io/advisories/PYSEC-2026-4005.md) `PYSEC-2026-4005`, `CVE-2026-94623` · PyPI `vllm`: affected `<0.30.0`, fixed in `0.30.0` · CVSS 8.7 High · Not analysed yet · Published 21 Sept 2026 · Tags: Denial of service - [vLLM through 0.29.0 GPU KV Cache Leak via Mooncake Transfer ID Collision](https://agentprime.io/advisories/CVE-2026-94627.md) `CVE-2026-94627` · CVE record: vllm-project vllm · CVSS 8.7 High · Not analysed yet · Published 21 Sept 2026 · Tags: Denial of service - [nginx ignition has ParseAcceptLanguage \`\_\` separator bypass that enables \~75x CPU amplification via Accept-Language header in i18nMiddleware](https://agentprime.io/advisories/GHSA-jr34-h97m-9hpx.md) `GHSA-jr34-h97m-9hpx`, `CVE-2026-61629`, `GO-2026-6539` · Go `github.com/lucasdillmann/nginx-ignition`: affected `>=0.0.0-20260126024607-cbaf0fc16ed8, <0.0.0-20260526022344-0c988fc1277c`, fixed in `0.0.0-20260526022344-0c988fc1277c` · CVSS 7.5 High · Not analysed yet · Published 21 Sept 2026 · Tags: Denial of service - [Envoy: HTTP/2 Discarded Host Header 200 GB Header-Copy OOM in Envoy](https://agentprime.io/advisories/CVE-2026-73550.md) `CVE-2026-73550` · CVE record: envoyproxy envoy · CVSS 7.5 High · Not analysed yet · Published 21 Sept 2026 · Tags: Denial of service - [Denial-of-Service in the OpenCanary Redis service](https://agentprime.io/advisories/CVE-2026-85219.md) `CVE-2026-85219` · CVE record: Thinkst Applied Research OpenCanary · CVSS 3.7 Low · Not analysed yet · Published 21 Sept 2026 · Tags: Denial of service - [Quarkus-smallrye-fault-tolerance: quarkus-smallrye-fault-tolerance: memory leak in @applyguard leads to denial of service](https://agentprime.io/advisories/CVE-2026-94449.md) `CVE-2026-94449` · CVE record: Red Hat Red Hat Build of Apache Camel 3.33.4.redhat and 4 more · CVSS 7.5 High · Not analysed yet · Published 21 Sept 2026 · Tags: Denial of service - [Denial-of-Service in the Thinkst Canary Redis service](https://agentprime.io/advisories/CVE-2026-85220.md) `CVE-2026-85220` · CVE record: Thinkst Applied Research Canary · CVSS 3.7 Low · Not analysed yet · Published 21 Sept 2026 · Tags: Denial of service - [temporalio/ringpop-go fails to enforce configured label limits on inbound membership gossip](https://agentprime.io/advisories/CVE-2026-65654.md) `CVE-2026-65654` · CVE record: Temporal Technologies, Inc. temporalio/ringpop-go · CVSS 8.7 High · Not analysed yet · Published 21 Sept 2026 · Tags: Denial of service - [temporalio/sqlparser deeply nested unary expressions can cause a fatal stack overflow during AST traversal](https://agentprime.io/advisories/CVE-2026-65651.md) `CVE-2026-65651` · CVE record: Temporal Technologies, Inc. temporalio/sqlparser and 1 more · CVSS 8.7 High · Not analysed yet · Published 21 Sept 2026 · Tags: Denial of service - [Apache Neethi: Remote policy fetch lacks a total timeout, allowing a slow server to hang the request indefinitely](https://agentprime.io/advisories/CVE-2026-91867.md) `CVE-2026-91867` · CVE record: Apache Software Foundation Apache Neethi · CVSS 4.3 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Denial of service - [Apache Neethi: Crafted policies cause unbounded work during intersection leading to denial of service](https://agentprime.io/advisories/CVE-2026-91866.md) `CVE-2026-91866` · CVE record: Apache Software Foundation Apache Neethi · CVSS 7.5 High · Not analysed yet · Published 21 Sept 2026 · Tags: Denial of service - [Apache Neethi: Crafted policy references cause exponential expansion during normalization leading to denial of service](https://agentprime.io/advisories/CVE-2026-91865.md) `CVE-2026-91865` · CVE record: Apache Software Foundation Apache Neethi · CVSS 7.5 High · Not analysed yet · Published 21 Sept 2026 · Tags: Denial of service - [Apache Neethi: Crafted WS-Policy documents bypass element/attribute limits causing memory exhaustion](https://agentprime.io/advisories/CVE-2026-91864.md) `CVE-2026-91864` · CVE record: Apache Software Foundation Apache Neethi · CVSS 7.5 High · Not analysed yet · Published 21 Sept 2026 · Tags: Denial of service - [Apache Neethi: Uncontrolled recursion while parsing crafted WS-Policy documents allows denial of service](https://agentprime.io/advisories/CVE-2026-91863.md) `CVE-2026-91863` · CVE record: Apache Software Foundation Apache Neethi · CVSS 7.5 High · Not analysed yet · Published 21 Sept 2026 · Tags: Denial of service - [Apache MINA: Unbounded Decompression Amplification DoS in Zlib.inflate](https://agentprime.io/advisories/CVE-2026-47321.md) `CVE-2026-47321` · CVE record: Apache Software Foundation Apache MINA · CVSS 7.5 High · Not analysed yet · Published 21 Sept 2026 · Tags: Denial of service, CWE-409 - [Hangzhou Shunwang Technology shzh IRP_MJ_DEVICE_CONTROL shdrv_x64.sys sub_180004AC0 denial of service](https://agentprime.io/advisories/CVE-2026-94137.md) `CVE-2026-94137` · CVE record: Hangzhou Shunwang Technology shzh · CVSS 4.8 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Denial of service - [OpenClaw Canvas Host Route server.ts createCanvasHostHandler denial of service](https://agentprime.io/advisories/CVE-2026-94094.md) `CVE-2026-94094` · CVE record: OpenClaw · CVSS 5.3 Medium · Not analysed yet · Published 20 Sept 2026 · Tags: Denial of service - [Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width](https://agentprime.io/advisories/CVE-2026-82560.md) `CVE-2026-82560` · CVE record · CVSS 7.5 High · Not analysed yet · Published 19 Sept 2026 · Tags: Denial of service - [Suricata doh2: crafted HTTP/2 DATA frames can cause quadratic CPU consumption](https://agentprime.io/advisories/CVE-2026-71418.md) `CVE-2026-71418` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service - [Suricata app-layer: passed flows can retain transactions, causing resource exhaustion](https://agentprime.io/advisories/CVE-2026-63446.md) `CVE-2026-63446` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service - [Suricata ftp: crafted FTP traffic can cause quadratic CPU consumption](https://agentprime.io/advisories/CVE-2026-63447.md) `CVE-2026-63447` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service - [Suricata smb: some SMB flows can cause resource exhaustion](https://agentprime.io/advisories/CVE-2026-63448.md) `CVE-2026-63448` · CVE record: OISF suricata · CVSS 5.9 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service - [Suricata http1: repeated brotli compression bombs can cause excessive CPU consumption](https://agentprime.io/advisories/CVE-2026-63452.md) `CVE-2026-63452` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service, CWE-409 - [Suricata mqtt: unbounded resource consumption from repeated pubrec and pubrel messages](https://agentprime.io/advisories/CVE-2026-57227.md) `CVE-2026-57227` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service - [Suricata dhcp: unbounded transactions in unidirectional traffic can lead to resource exhaustion](https://agentprime.io/advisories/CVE-2026-57224.md) `CVE-2026-57224` · CVE record: OISF suricata · CVSS 6.5 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service - [SGLang through 0.5.20 Unbounded Memory Allocation via STAGING_REQ chunk_idx](https://agentprime.io/advisories/CVE-2026-93838.md) `CVE-2026-93838` · CVE record: sgl-project sglang · CVSS 8.2 High · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service - [Reachable assertion at ranap_handle_co_dt()](https://agentprime.io/advisories/CVE-2026-75894.md) `CVE-2026-75894` · CVE record: Osmocom osmo-iuh · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service - [Withdrawn Advisory: braces vulnerable to stack-exhaustion denial of service through deeply nested patterns](https://agentprime.io/advisories/GHSA-vfj7-8cjw-p6xm.md) `GHSA-vfj7-8cjw-p6xm`, `CVE-2026-93687` · npm `braces`: affected `<=3.0.3`, no fixed version yet · CVSS 8.7 High · Withdrawn · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service - [c-ares: CPU-exhaustion denial of service via unbounded DNS name compression pointer chains](https://agentprime.io/advisories/CVE-2026-69184.md) `CVE-2026-69184` · CVE record: c-ares c-ares · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service - [c-ares: Memory-amplification denial of service via unvalidated DNS header record counts](https://agentprime.io/advisories/CVE-2026-69186.md) `CVE-2026-69186` · CVE record: c-ares c-ares · CVSS 5.3 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service - [Icinga 2: Stack overflow via deeply nested JSON objects](https://agentprime.io/advisories/CVE-2026-61551.md) `CVE-2026-61551` · CVE record: Icinga icinga2 · CVSS 8.6 High · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service - [Denial of service via unbounded regex matching in Mongoid's in-memory query matcher](https://agentprime.io/advisories/CVE-2026-93761.md) `CVE-2026-93761` · CVE record: MongoDB Inc. Mongoid · CVSS 8.7 High · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service - [adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)](https://agentprime.io/advisories/GHSA-7q85-xj36-vmfc.md) `GHSA-7q85-xj36-vmfc`, `CVE-2026-77301` · npm `adm-zip`: affected `<0.6.1`, fixed in `0.6.1` · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service - [AnyIO process-pool workers can block indefinitely on undrained stderr](https://agentprime.io/advisories/GHSA-5p39-cfhj-2xmp.md) `GHSA-5p39-cfhj-2xmp`, `CVE-2026-64847`, `PYSEC-2026-4024` · PyPI `anyio`: affected `<4.14.2`, fixed in `4.14.2` · CVSS 6.8 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .