# Denial of service. Crashes, hangs and resource exhaustion, ReDoS included. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [Apache PLC4X, Apache PLC4X, Apache PLC4X, Apache PLC4X: ADS discovery accepts spoofed responses and derives the connection target from them](https://agentprime.io/advisories/CVE-2026-102511.md) `CVE-2026-102511` · CVE record: Apache Software Foundation Apache PLC4X · CVSS 8.5 High · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service, CWE-129, CWE-248, CWE-940 - [Apache PLC4X: Go binding: unbounded allocation and framing failures on wire-controlled lengths](https://agentprime.io/advisories/CVE-2026-102510.md) `CVE-2026-102510` · CVE record: Apache Software Foundation Apache PLC4X · CVSS 8.7 High · Not analysed yet · Published 30 Sept 2026 · Tags: Memory corruption, Denial of service, CWE-129 - [Apache PLC4X, Apache PLC4X: Pre-authentication resource exhaustion in the OPC UA driver and the Java SPI parser](https://agentprime.io/advisories/CVE-2026-102509.md) `CVE-2026-102509` · CVE record: Apache Software Foundation Apache PLC4X · CVSS 8.7 High · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [Reachable assertion in Pexip Infinity](https://agentprime.io/advisories/CVE-2026-103108.md) `CVE-2026-103108` · CVE record: Pexip Infinity · CVSS 7.5 High · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [Reachable assertion in Pexip Infinity](https://agentprime.io/advisories/CVE-2026-103104.md) `CVE-2026-103104` · CVE record: Pexip Infinity · CVSS 7.5 High · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [Resource allocation without limits in Pexip Infinity](https://agentprime.io/advisories/CVE-2026-103102.md) `CVE-2026-103102` · CVE record: Pexip Infinity · CVSS 8.6 High · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [Resource allocation without limits in Pexip Infinity](https://agentprime.io/advisories/CVE-2026-103101.md) `CVE-2026-103101` · CVE record: Pexip Infinity · CVSS 8.6 High · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [Reachable assertion in Pexip Infinity](https://agentprime.io/advisories/CVE-2026-103100.md) `CVE-2026-103100` · CVE record: Pexip Infinity · CVSS 7.5 High · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [Reachable assertion in Pexip Infinity](https://agentprime.io/advisories/CVE-2026-103099.md) `CVE-2026-103099` · CVE record: Pexip Infinity · CVSS 7.5 High · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [Uncontrolled recursion in gosub-io gosub-engine](https://agentprime.io/advisories/CVE-2026-103087.md) `CVE-2026-103087` · CVE record: gosub-io gosub-engine · CVSS 7.1 High · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [Nest: Remote process termination via a deeply nested microservice message pattern](https://agentprime.io/advisories/GHSA-m8vh-jmq9-5rjg.md) `GHSA-m8vh-jmq9-5rjg`, `CVE-2026-102281` · npm `@nestjs/microservices`: affected `<11.2.4 || >=12.0.0, <12.0.2`, fixed in `11.2.4`, `12.0.2` · CVSS 7.5 High · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service, CWE-248 - [ip-address: Address6 builds a parse diagnostic proportional to the input with no length bound, allowing a single long string to stall or crash the process](https://agentprime.io/advisories/GHSA-h3mg-xc3c-68pw.md) `GHSA-h3mg-xc3c-68pw`, `CVE-2026-101911` · npm `ip-address`: affected `<10.7.1`, fixed in `10.7.1` · CVSS 6.3 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [brace-expansion: Quadratic-time expansion of the \`{a},b}\` rewrite causes CPU denial of service](https://agentprime.io/advisories/GHSA-q2hr-2g5m-vwhr.md) `GHSA-q2hr-2g5m-vwhr`, `CVE-2026-102277` · npm `brace-expansion`: affected `<1.1.21 || >=2.0.0, <2.1.7 || >=3.0.0, <3.0.9 || >=4.0.0, <5.0.12`, fixed in `1.1.21`, `2.1.7`, `3.0.9`, `5.0.12` · CVSS 5.3 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion](https://agentprime.io/advisories/GHSA-qhr7-859c-m2p7.md) `GHSA-qhr7-859c-m2p7`, `CVE-2026-102278` · npm `brace-expansion`: affected `<1.1.20 || >=2.0.0, <2.1.6 || >=3.0.0, <3.0.8 || >=4.0.0, <5.0.11`, fixed in `1.1.20`, `2.1.6`, `3.0.8`, `5.0.11` · CVSS 7.5 High · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion](https://agentprime.io/advisories/GHSA-6j4f-fj2g-mc7p.md) `GHSA-6j4f-fj2g-mc7p`, `CVE-2026-102276` · npm `brace-expansion`: affected `<1.1.19 || >=2.0.0, <2.1.5 || >=3.0.0, <3.0.7 || >=4.0.0, <5.0.10`, fixed in `1.1.19`, `2.1.5`, `3.0.7`, `5.0.10` · CVSS 7.5 High · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [Nodemailer: Quadratic backtracking in the addressparser free-text fallback allows remote denial of service](https://agentprime.io/advisories/GHSA-v53p-9fqp-m79j.md) `GHSA-v53p-9fqp-m79j`, `CVE-2026-100700` · npm `nodemailer`: affected `<10.0.6`, fixed in `10.0.6` · CVSS 8.7 High · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token header](https://agentprime.io/advisories/GHSA-8wjv-2p76-3863.md) `GHSA-8wjv-2p76-3863`, `CVE-2026-102265`, `PYSEC-2026-4142` · PyPI `pyjwt`: affected `>=2.13.0, <2.14.0`, fixed in `2.14.0` · CVSS 5.3 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)](https://agentprime.io/advisories/GHSA-2gx3-rcp4-g85q.md) `GHSA-2gx3-rcp4-g85q`, `CVE-2026-101917`, `PYSEC-2026-4140` · PyPI `pyjwt`: affected `<2.14.0`, fixed in `2.14.0` · CVSS 5.3 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [adm-zip: getDataAsync() bypasses the maxOutputLength size guard enforced by the synchronous getData() path](https://agentprime.io/advisories/GHSA-c6fg-446q-cg94.md) `GHSA-c6fg-446q-cg94`, `CVE-2026-114103` · npm `adm-zip`: affected `<0.6.1`, fixed in `0.6.1` · CVSS 6.9 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [adm-zip: Unhandled error event in async DEFLATE decompression crashes Node.js process (DoS)](https://agentprime.io/advisories/GHSA-8238-w5pm-2374.md) `GHSA-8238-w5pm-2374`, `CVE-2026-114102` · npm `adm-zip`: affected `<0.6.1`, fixed in `0.6.1` · CVSS 8.7 High · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service, CWE-248 - [Fireware OS Resource Exhaustion in Login Process Allows Denial of Service](https://agentprime.io/advisories/CVE-2026-86104.md) `CVE-2026-86104` · CVE record: WatchGuard Fireware OS · CVSS 8.7 High · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service, CWE-409 - [Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant B](https://agentprime.io/advisories/CVE-2026-90441.md) `CVE-2026-90441` · CVE record: WatchGuard Fireware OS · CVSS 7.1 High · Not analysed yet · Published 29 Sept 2026 · Tags: Information disclosure, Denial of service, Broken access control - [Fireware OS Uncontrolled Resource Consumption in Diagnostic Tasks Allows Denial of Service](https://agentprime.io/advisories/CVE-2026-18105.md) `CVE-2026-18105` · CVE record: WatchGuard Fireware OS · CVSS 7.1 High · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [anchorme through 3.0.8 Regular Expression Denial of Service](https://agentprime.io/advisories/CVE-2026-103043.md) `CVE-2026-103043` · CVE record: alexcorvi anchorme · CVSS 8.7 High · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [LightLLM through 1.2.0 Unauthenticated Memory Exhaustion via NCCL Control Channel set_value](https://agentprime.io/advisories/CVE-2026-103042.md) `CVE-2026-103042` · CVE record: ModelTC LightLLM · CVSS 8.7 High · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS](https://agentprime.io/advisories/CVE-2026-102253.md) `CVE-2026-102253` · CVE record: esnet iperf3 · CVSS 8.7 High · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [Authenticated Denial-of-Service Vulnerability in HPE Networking Instant On API Endpoint](https://agentprime.io/advisories/CVE-2026-76733.md) `CVE-2026-76733` · CVE record: Hewlett Packard Enterprise (HPE) Instant ON · CVSS 4.9 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [Nodemailer: Nested structured recipient arrays bypass the parser depth limit and cause stack exhaustion DoS](https://agentprime.io/advisories/GHSA-8vvx-rff5-p5rq.md) `GHSA-8vvx-rff5-p5rq`, `CVE-2026-100702` · npm `nodemailer`: affected `<10.0.2`, fixed in `10.0.2` · CVSS 8.2 High · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [undici vulnerable to Denial of Service via orphaned RetryHandler response body](https://agentprime.io/advisories/GHSA-pmjh-fq2x-6v4x.md) `GHSA-pmjh-fq2x-6v4x`, `CVE-2026-18149` · npm `undici`: affected `>=7.11.0, <7.29.1 || >=8.0.0, <8.10.2`, fixed in `7.29.1`, `8.10.2` · CVSS 5.9 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [undici vulnerable to Denial of Service via unbounded decompression of compressed responses](https://agentprime.io/advisories/GHSA-3xpg-4rpp-hhhm.md) `GHSA-3xpg-4rpp-hhhm`, `CVE-2026-84890` · npm `undici`: affected `>=7.15.0, <7.29.1 || >=8.0.0, <8.10.2`, fixed in `7.29.1`, `8.10.2` · CVSS 5.9 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [joi: Quadratic regular-expression backtracking in \`Joi.string().isoDate()\`](https://agentprime.io/advisories/GHSA-6h2x-m376-mqjq.md) `GHSA-6h2x-m376-mqjq`, `CVE-2026-92599` · npm `joi`: affected `>=17.2.0, <17.13.7 || >=18.0.0, <18.2.6`, fixed in `17.13.7`, `18.2.6` · CVSS 8.7 High · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full](https://agentprime.io/advisories/GHSA-hjf4-fphr-2h65.md) `GHSA-hjf4-fphr-2h65`, `CVE-2026-81872`, `GO-2026-6615` · Go `go.opentelemetry.io/otel/sdk/log`: affected `<0.21.0`, fixed in `0.21.0` · CVSS 6.3 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncation](https://agentprime.io/advisories/GHSA-p9f8-wvj8-2fg8.md) `GHSA-p9f8-wvj8-2fg8`, `CVE-2026-81869`, `GO-2026-6616` · Go `go.opentelemetry.io/otel/sdk`: affected `>=1.10.0, <1.33.0`, fixed in `1.33.0` · CVSS 5.1 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service, CWE-176 - [markdown-it linkify: true has two quadratic paths, so a few hundred KB of markdown blocks the event loop for tens of seconds](https://agentprime.io/advisories/GHSA-253c-mchw-3w2r.md) `GHSA-253c-mchw-3w2r` · npm `markdown-it`: affected `<14.3.1 || >=15.0.0, <15.0.1`, fixed in `14.3.1`, `15.0.1` · CVSS 4.0, no score published · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources](https://agentprime.io/advisories/GHSA-r3ph-w7gj-g6xm.md) `GHSA-r3ph-w7gj-g6xm` · npm `js-yaml`: affected `>=5.0.0, <5.4.1`, fixed in `5.4.1` · CVSS 5.3 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Read](https://agentprime.io/advisories/CVE-2026-102726.md) `CVE-2026-102726` · CVE record: Eclipse Foundation Eclipse ThreadX NetX Duo · CVSS 7.1 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption, Denial of service - [NULL Pointer Dereference on MSRP Attribute Table Exhaustion](https://agentprime.io/advisories/CVE-2026-102723.md) `CVE-2026-102723` · CVE record: Eclipse Foundation Eclipse ThreadX NetX Duo · CVSS 7.1 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption, Denial of service - [A malformed Session header permanently orphans one packet-pool block per RTSP request](https://agentprime.io/advisories/CVE-2026-102716.md) `CVE-2026-102716` · CVE record: Eclipse Foundation Eclipse ThreadX NetX Duo · CVSS 8.7 High · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service, CWE-755 - [ICMPv6 option validation accepts a trailing byte residue, sending the Router Advertisement, Neighbor Solicitation, Neighbor Advertisement and Redirect option walkers past the packet or into a permane…](https://agentprime.io/advisories/CVE-2026-102714.md) `CVE-2026-102714` · CVE record: Eclipse Foundation Eclipse ThreadX NetX Duo · CVSS 7.1 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption, Denial of service, CWE-1287 - [Unbounded DATA datagram in the NetX Duo TFTP server causes an out-of-bounds read and a permanent stall](https://agentprime.io/advisories/CVE-2026-102713.md) `CVE-2026-102713` · CVE record: Eclipse Foundation Eclipse ThreadX NetX Duo · CVSS 8.3 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption, Denial of service - [Memory leak in Eclipse Foundation NetX Duo](https://agentprime.io/advisories/CVE-2026-102762.md) `CVE-2026-102762` · CVE record: Eclipse Foundation NetX Duo · CVSS 8.2 High · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [PX4 Autopilot through 1.17.0 Stack Exhaustion via tests file2 Command](https://agentprime.io/advisories/CVE-2026-102809.md) `CVE-2026-102809` · CVE record: PX4 PX4-Autopilot · CVSS 7.1 High · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [DataTransfer depends on phpspreadsheet version vulnerable to CVE-2026-59933 (XLS/OLE memory exhaustion)](https://agentprime.io/advisories/CVE-2026-100242.md) `CVE-2026-100242` · CVE record: Wikimedia Foundation Mediawiki - DataTransfer Extension · CVSS 7.5 High · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service, CWE-1395 - [QUIC: Unbounded RETIRE_CONNECTION_ID Backlog](https://agentprime.io/advisories/CVE-2026-84784.md) `CVE-2026-84784` · CVE record: OpenSSL OpenSSL · CVSS 7.5 High · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [QUIC Connection-Level Flow Control is Not Enforced for Streams](https://agentprime.io/advisories/CVE-2026-75804.md) `CVE-2026-75804` · CVE record: OpenSSL OpenSSL · CVSS 5.3 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [QUIC STREAM Fragment Metadata DoS](https://agentprime.io/advisories/CVE-2026-54873.md) `CVE-2026-54873` · CVE record: OpenSSL OpenSSL · CVSS 7.5 High · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC](https://agentprime.io/advisories/CVE-2026-42772.md) `CVE-2026-42772` · CVE record: OpenSSL OpenSSL · CVSS 5.3 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [Excessive Memory Allocation in Relative CRLDP Processing](https://agentprime.io/advisories/CVE-2026-35189.md) `CVE-2026-35189` · CVE record: OpenSSL OpenSSL · CVSS 5.3 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [Denial-of-service in the Storage: StorageManager component](https://agentprime.io/advisories/CVE-2026-100826.md) `CVE-2026-100826` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [Denial-of-service in the Graphics component](https://agentprime.io/advisories/CVE-2026-100812.md) `CVE-2026-100812` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [Denial-of-service in the Networking component](https://agentprime.io/advisories/CVE-2026-100795.md) `CVE-2026-100795` · CVE record: Mozilla Thunderbird and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [Apache XMLSchema: Denial of service through cyclic schema definitions in the schema walker](https://agentprime.io/advisories/CVE-2026-102497.md) `CVE-2026-102497` · CVE record: Apache Software Foundation Apache XMLSchema · CVSS 7.5 High · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [Apache XMLSchema: Denial of service through deeply nested schema structures](https://agentprime.io/advisories/CVE-2026-102496.md) `CVE-2026-102496` · CVE record: Apache Software Foundation Apache XMLSchema · CVSS 7.5 High · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [Apache XMLSchema: Denial of service through unbounded recursion when resolving schema imports and includes](https://agentprime.io/advisories/CVE-2026-102495.md) `CVE-2026-102495` · CVE record: Apache Software Foundation Apache XMLSchema · CVSS 7.5 High · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark](https://agentprime.io/advisories/CVE-2026-95386.md) `CVE-2026-95386` · CVE record: Wireshark Foundation Wireshark · CVSS 5.5 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [Missing Release of Memory after Effective Lifetime in Wireshark](https://agentprime.io/advisories/CVE-2026-95395.md) `CVE-2026-95395` · CVE record: Wireshark Foundation Wireshark · CVSS 5.5 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [Reachable Assertion in Wireshark](https://agentprime.io/advisories/CVE-2026-96422.md) `CVE-2026-96422` · CVE record: Wireshark Foundation Wireshark · CVSS 5.5 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark](https://agentprime.io/advisories/CVE-2026-96418.md) `CVE-2026-96418` · CVE record: Wireshark Foundation Wireshark · CVSS 5.5 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [Dash: dash: super-polynomial backtracking in pmatch when libc fnmatch is disabled](https://agentprime.io/advisories/CVE-2026-102473.md) `CVE-2026-102473` · CVE record: Red Hat Red Hat Enterprise Linux 6 · CVSS 5.5 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains polynomial-time regular expression denial-of-service conditions in think-tag response parsing on Ruby 3.1.x.](https://agentprime.io/advisories/CVE-2026-67987.md) `CVE-2026-67987` · CVE record · CVSS 7.5 High · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .