# Denial of service.

Crashes, hangs and resource exhaustion, ReDoS included. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-102404.md)
  `CVE-2026-102404` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service
- [Gitea Actions memory exhaustion through large static matrices](https://agentprime.io/advisories/CVE-2026-96580.md)
  `CVE-2026-96580` · CVE record: Gitea Gitea · CVSS 7.5 High · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service
- [Gitea issue reference parsing CPU exhaustion](https://agentprime.io/advisories/CVE-2026-95112.md)
  `CVE-2026-95112` · CVE record: Gitea Gitea · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service
- [Authenticated Local Denial-of-Service Vulnerability in the OnGuard Agent of ClearPass Policy Manager](https://agentprime.io/advisories/CVE-2026-79812.md)
  `CVE-2026-79812` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 6.1 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service
- [Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion](https://agentprime.io/advisories/CVE-2026-88252.md)
  `CVE-2026-88252` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service
- [Payload: ReDoS in Multipart Content-Type Validation](https://agentprime.io/advisories/GHSA-2g7p-5934-q4w7.md)
  `GHSA-2g7p-5934-q4w7`, `CVE-2026-105854` · npm `payload`: affected `>=3.0.0, <3.90.0 || >=4.0.0-canary.0, <4.0.0-canary.34`, fixed in `3.90.0`, `4.0.0-canary.34` · CVSS 8.7 High · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service
- [A security flaw has been discovered in vllm-project vLLM up to 0.31.0. This impacts the function get_token_bin_counts_and_mask of the file vllm/model_executor/layers/utils.py of the component Penal...](https://agentprime.io/advisories/PYSEC-2026-4319.md)
  `PYSEC-2026-4319`, `CVE-2026-105922` · PyPI `vllm`: affected `<0.32.0`, fixed in `0.32.0` · CVSS 5.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service
- [Denial-of-service vulnerability in ESET PROTECT On-Prem](https://agentprime.io/advisories/CVE-2025-8352.md)
  `CVE-2025-8352` · CVE record: ESET spol. s.r.o ESET PROTECT On-Prem · CVSS 6.9 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service
- [Microsoft UFO: Authenticated task-result request can deadlock UFO server session manager](https://agentprime.io/advisories/CVE-2026-105792.md)
  `CVE-2026-105792` · CVE record: microsoft UFO · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service
- [Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)](https://agentprime.io/advisories/GHSA-3cr3-8m4c-fpxw.md)
  `GHSA-3cr3-8m4c-fpxw`, `CVE-2026-105747`, `PYSEC-2026-4194`, `PYSEC-2026-4209` · PyPI `docling` and 1 more: affected `>=2.45.0, <2.131.0`, fixed in `2.131.0` · CVSS 4.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service, CWE-409
- [pbkdf2 rehashes long passwords on every iteration, enabling denial of service](https://agentprime.io/advisories/GHSA-477h-4r7f-fvrx.md)
  `GHSA-477h-4r7f-fvrx`, `CVE-2026-102414` · npm `pbkdf2`: affected `<3.1.7`, fixed in `3.1.7` · CVSS 6.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service
- [Potential denial-of-service vulnerability in HTTP header parsing](https://agentprime.io/advisories/CVE-2026-84429.md)
  `CVE-2026-84429` · CVE record: djangoproject Django · CVSS 6.9 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service
- [Potential denial-of-service vulnerability in get_supported_language_variant()](https://agentprime.io/advisories/CVE-2026-77050.md)
  `CVE-2026-77050` · CVE record: djangoproject Django · CVSS 6.9 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service
- [WordPress WPBase Cache plugin <= 5.5.6 - Denial of Service Attack vulnerability](https://agentprime.io/advisories/CVE-2026-39767.md)
  `CVE-2026-39767` · CVE record: baseapp WPBase Cache · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service
- [Sssd: sssd: denial of service via unbounded negative cache growth](https://agentprime.io/advisories/CVE-2026-104041.md)
  `CVE-2026-104041` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service
- [Sssd: sssd: denial of service via memory exhaustion in kcm responder](https://agentprime.io/advisories/CVE-2026-104035.md)
  `CVE-2026-104035` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service
- [Sssd: sssd: denial of service via memory exhaustion in autofs responder](https://agentprime.io/advisories/CVE-2026-104031.md)
  `CVE-2026-104031` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service
- [vLLM: Mirrored multimodal IPC caches desync after a rejected request — a later request reusing the same media hash trips a receiver assertion in the engine core](https://agentprime.io/advisories/GHSA-ph3r-5jfg-f84f.md)
  `GHSA-ph3r-5jfg-f84f`, `CVE-2026-105753`, `PYSEC-2026-4197` · PyPI `vllm`: affected `<0.28.0`, fixed in `0.28.0` · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service
- [vLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling does not reach](https://agentprime.io/advisories/GHSA-x6mc-67gf-chw4.md)
  `GHSA-x6mc-67gf-chw4`, `CVE-2026-105758`, `PYSEC-2026-4310` · PyPI `vllm`: affected `>=0.24.0, <0.30.0`, fixed in `0.30.0` · CVSS 5.3 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service
- [vLLM: GLMGA video sampling permits request-driven CPU and memory exhaustion](https://agentprime.io/advisories/GHSA-58v5-2m8f-94pr.md)
  `GHSA-58v5-2m8f-94pr`, `CVE-2026-105760`, `PYSEC-2026-4307` · PyPI `vllm`: affected `>=0.23.0rc2, <0.30.0`, fixed in `0.30.0` · CVSS 5.3 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service
- [vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features](https://agentprime.io/advisories/GHSA-ph72-cqr5-qpp7.md)
  `GHSA-ph72-cqr5-qpp7`, `CVE-2026-105754`, `PYSEC-2026-4309` · PyPI `vllm`: affected `<0.30.0`, fixed in `0.30.0` · CVSS 6.5 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service, Broken access control, Information disclosure, CWE-20
- [smol-toml: Quadratic-time parse() from parseKey rescanning to end of document on each key line](https://agentprime.io/advisories/GHSA-r4xh-jqrq-34v2.md)
  `GHSA-r4xh-jqrq-34v2` · npm `smol-toml`: affected `<1.9.0`, fixed in `1.9.0` · CVSS 5.3 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service
- [Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction](https://agentprime.io/advisories/GHSA-54p9-h82j-f925.md)
  `GHSA-54p9-h82j-f925`, `CVE-2026-104874`, `PYSEC-2026-4244` · PyPI `multidict`: affected `>=6.7.0, <6.9.1`, fixed in `6.9.1` · CVSS 5.3 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service
- [Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserialization](https://agentprime.io/advisories/GHSA-jp82-f5mq-hwhp.md)
  `GHSA-jp82-f5mq-hwhp`, `CVE-2026-104845` · npm `seroval`: affected `<1.6.3`, fixed in `1.6.3` · CVSS 7.5 High · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service
- [compression vulnerable to Denial of Service via memory leak on premature response close](https://agentprime.io/advisories/GHSA-vc2v-76pw-4v95.md)
  `GHSA-vc2v-76pw-4v95`, `CVE-2026-87776` · npm `compression`: affected `<1.8.2`, fixed in `1.8.2` · CVSS 7.5 High · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service, CWE-459
- [vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the Rust frontend's track_http_metrics middleware records the raw HTTP method token as a Prometheus label for req...](https://agentprime.io/advisories/GHSA-5fj9-pfhr-6j48.md)
  `GHSA-5fj9-pfhr-6j48`, `CVE-2026-105759`, `PYSEC-2026-4325` · PyPI `vllm`: affected `<0.30.0`, fixed in `0.30.0` · CVSS 5.9 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service
- [hickory-resolver follows irrelevant CNAME records](https://agentprime.io/advisories/GHSA-6f2x-v7q7-m7m5.md)
  `GHSA-6f2x-v7q7-m7m5`, `CVE-2026-123585` · crates.io `hickory-resolver`: affected `>=0.25.0, <0.26.2`, fixed in `0.26.2` · CVSS 6.9 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service
- [hickory-resolver: Unbounded TC-retry loop in \`NameServerPool::try_send\` (resource-exhaustion DoS)](https://agentprime.io/advisories/GHSA-6w6g-hm98-mhgm.md)
  `GHSA-6w6g-hm98-mhgm`, `CVE-2026-123604`, `RUSTSEC-2026-0513` · crates.io `hickory-resolver`: affected `>=0.26.0-beta.1, <0.26.2`, fixed in `0.26.2` · CVSS 8.7 High · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service, CWE-406
- [PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion](https://agentprime.io/advisories/GHSA-rj75-hqrm-r3gf.md)
  `GHSA-rj75-hqrm-r3gf`, `CVE-2026-104844` · npm `postcss-selector-parser`: affected `<6.1.5 || >=7.0.0, <7.1.6`, fixed in `6.1.5`, `7.1.6` · CVSS 5.9 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service
- [fast-copy: Stack exhaustion in fast-copy when copying deeply-nested values](https://agentprime.io/advisories/GHSA-jggr-w7fw-pc2j.md)
  `GHSA-jggr-w7fw-pc2j` · npm `fast-copy`: affected `<2.2.0 || >=3.0.0, <3.1.0 || >=4.0.0, <4.1.0`, fixed in `2.2.0`, `3.1.0`, `4.1.0` · CVSS 4.0, no score published · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service
- [stream-json: JSONC parser and verifier re-scan the whole accumulated comment on every input chunk](https://agentprime.io/advisories/GHSA-hqr4-qq8f-hg3x.md)
  `GHSA-hqr4-qq8f-hg3x`, `CVE-2026-104182` · npm `stream-json`: affected `<3.6.0`, fixed in `3.6.0` · CVSS 6.2 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service
- [vm2: timeout Option Bypass via FinalizationRegistry Cleanup Callback (Unbounded Host Event-Loop Block)](https://agentprime.io/advisories/GHSA-r4fx-v8hh-22mv.md)
  `GHSA-r4fx-v8hh-22mv`, `CVE-2026-92942` · npm `vm2`: affected `<3.11.7`, fixed in `3.11.7` · CVSS 8.7 High · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service, CWE-841
- [Penpot: Repeated chunk index causes temporary-storage amplification](https://agentprime.io/advisories/CVE-2026-105686.md)
  `CVE-2026-105686` · CVE record: penpot penpot · CVSS 5.3 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service
- [Filtering an :atom attribute with unsafe_to_atom? can exhaust the BEAM atom table in Ash](https://agentprime.io/advisories/EEF-CVE-2026-94201.md)
  `EEF-CVE-2026-94201`, `CVE-2026-94201` · Hex `ash`: affected `>=3.5.1, <3.34.3`, fixed in `3.34.3` · CVSS 8.2 High · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service
- [Apache Struts: Unbounded request body read in the REST plugin](https://agentprime.io/advisories/CVE-2026-104713.md)
  `CVE-2026-104713` · CVE record: Apache Software Foundation Apache Struts · CVSS 6.5 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service
- [Uncontrolled resource consumption in Google Android](https://agentprime.io/advisories/CVE-2026-55266.md)
  `CVE-2026-55266` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service
- [Oversized Dockerfile or .dockerignore can exhaust buildkitd memory](https://agentprime.io/advisories/CVE-2026-93323.md)
  `CVE-2026-93323` · CVE record: moby BuildKit · CVSS 6.8 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service
- [Plane: Improper validation allows arbitrary modification of API token rate limits](https://agentprime.io/advisories/CVE-2026-104893.md)
  `CVE-2026-104893` · CVE record: makeplane plane · CVSS 5.4 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service
- [An empty \<img> attribute value in styled text triggers a parser error that halts the device.](https://agentprime.io/advisories/CVE-2026-19395.md)
  `CVE-2026-19395` · CVE record: qt Qt for MCUs · CVSS 6.6 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service, CWE-230
- [vgmstream Microsoft IMA Decoder ima_decoder.c decode_ms_ima divide by zero](https://agentprime.io/advisories/CVE-2026-105250.md)
  `CVE-2026-105250` · CVE record: vgmstream · CVSS 5.3 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service
- [Reachable assertion in MediaTek, Inc. MediaTek chipset](https://agentprime.io/advisories/CVE-2026-20525.md)
  `CVE-2026-20525` · CVE record: MediaTek, Inc. MediaTek chipset · CVSS 5.3 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service
- [An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded 512-bit RSA Private Key](https://agentprime.io/advisories/CVE-2026-78861.md)
  `CVE-2026-78861` · CVE record · CVSS 7.7 High · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service
- [Mammoth.js 1.3.0 before 1.12.3 ReDoS via Style Map Tokeniser](https://agentprime.io/advisories/CVE-2026-105219.md)
  `CVE-2026-105219` · CVE record: mwilliamson mammoth.js · CVSS 8.7 High · Not analysed yet · Published 4 Oct 2026 · Tags: Denial of service
- [LaraDashboard 1.4.2 before 1.4.8 Resource Exhaustion via Password Recovery Endpoints](https://agentprime.io/advisories/CVE-2026-105127.md)
  `CVE-2026-105127` · CVE record: laradashboard laradashboard · CVSS 6.9 Medium · Not analysed yet · Published 3 Oct 2026 · Tags: Denial of service
- [Legacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA provider](https://agentprime.io/advisories/CVE-2026-97873.md)
  `CVE-2026-97873` · CVE record: Legion of the Bouncy Castle Inc. BC-JAVA and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 3 Oct 2026 · Tags: Denial of service
- [WP Ultimate Review < 2.4.4 - Unauthenticated DoS via Unset Display Settings in wp-reviews Shortcode](https://agentprime.io/advisories/CVE-2026-101161.md)
  `CVE-2026-101161` · CVE record: Unknown WP Ultimate Review · CVSS 7.5 High · Not analysed yet · Published 3 Oct 2026 · Tags: Denial of service
- [WP Ultimate Review < 2.4.4 - Unauthenticated DoS via Non-Numeric Review Rating](https://agentprime.io/advisories/CVE-2026-101160.md)
  `CVE-2026-101160` · CVE record: Unknown WP Ultimate Review · CVSS 7.5 High · Not analysed yet · Published 3 Oct 2026 · Tags: Denial of service
- [probe-image-size: Quadratic-time Denial of Service in the SVG Parser](https://agentprime.io/advisories/GHSA-gjj5-9665-rwrc.md)
  `GHSA-gjj5-9665-rwrc`, `CVE-2026-104861` · npm `probe-image-size`: affected `<7.4.0`, fixed in `7.4.0` · CVSS 7.5 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [@fastify/busboy vulnerable to Denial of Service via oversized multipart boundary](https://agentprime.io/advisories/GHSA-xjh9-v7x6-24jw.md)
  `GHSA-xjh9-v7x6-24jw`, `CVE-2026-19484` · npm `@fastify/busboy`: affected `>=3.1.0, <3.2.1`, fixed in `3.2.1` · CVSS 7.5 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service, CWE-1322
- [aws-smithy-json: Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated servers](https://agentprime.io/advisories/GHSA-8ffr-xgwf-xj56.md)
  `GHSA-8ffr-xgwf-xj56`, `CVE-2026-18140` · crates.io `aws-smithy-json`: affected `<0.62.7`, fixed in `0.62.7` · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [figlet is vulnerable to denial of service via unbounded loop when whitespaceBreak is used with a small width](https://agentprime.io/advisories/GHSA-62ch-8vmq-8xm7.md)
  `GHSA-62ch-8vmq-8xm7`, `CVE-2026-96780` · npm `figlet`: affected `<1.11.3`, fixed in `1.11.3` · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [geopy: Regular Expression Denial of Service (ReDoS) in geopy.Point](https://agentprime.io/advisories/GHSA-mhvh-fq92-pfmr.md)
  `GHSA-mhvh-fq92-pfmr`, `CVE-2026-77387`, `PYSEC-2026-4218` · PyPI `geopy`: affected `<2.5.0`, fixed in `2.5.0` · CVSS 4.0 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Dulwich: Infinite Loop Denial of Service (DoS) in Packfile Object Resolution](https://agentprime.io/advisories/GHSA-35mr-4567-66vg.md)
  `GHSA-35mr-4567-66vg`, `CVE-2026-114095` · PyPI `dulwich`: affected `<1.2.9`, fixed in `1.2.9` · CVSS 7.1 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Apache Thrift: C++ THeaderTransport does not enforce configured maxFrameSize](https://agentprime.io/advisories/CVE-2026-66054.md)
  `CVE-2026-66054` · CVE record: Apache Software Foundation Apache Thrift · CVSS 6.9 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service, CWE-409
- [Apache Thrift: Java TSaslTransport post-auth data-frame missing size limit](https://agentprime.io/advisories/CVE-2026-61374.md)
  `CVE-2026-61374` · CVE record: Apache Software Foundation Apache Thrift · CVSS 7.1 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Apache Thrift: Unauthenticated single-packet crash of Go Thrift servers via the THeader transform count](https://agentprime.io/advisories/CVE-2026-63772.md)
  `CVE-2026-63772` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TJSONProtocol accepts a single JSON string/number exceeding the configured size limit (multi-language)](https://agentprime.io/advisories/CVE-2026-66055.md)
  `CVE-2026-66055` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Apache Thrift: Buffered transport reads are not accounted against MaxMessageSize](https://agentprime.io/advisories/CVE-2026-66331.md)
  `CVE-2026-66331` · CVE record: Apache Software Foundation Apache Thrift · CVSS 6.9 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: skip() does not apply the recursion limit (Python accelerator, PHP, Perl, Lua, Smalltalk, OCaml)](https://agentprime.io/advisories/CVE-2026-66858.md)
  `CVE-2026-66858` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Apache Thrift: C++ THttpTransport grows its line buffer without bound](https://agentprime.io/advisories/CVE-2026-83632.md)
  `CVE-2026-83632` · CVE record: Apache Software Foundation Apache Thrift · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Oct 2026 · Tags: Memory corruption, Denial of service

Newest: <https://agentprime.io/advisories/tag/dos.md>
Older: <https://agentprime.io/advisories/tag/dos.md?cursor=WyIyMDI2LTEwLTAyVDEyOjIyOjIzLjYxNzAwMFoiLCJDVkUtMjAyNi04MzYzMiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=dos&cursor=WyIyMDI2LTEwLTA2VDE5OjMxOjM5LjE5NjAwMFoiLCJDVkUtMjAyNi0xMDI0MDgiXQ>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/dos/?cursor=WyIyMDI2LTEwLTA2VDE5OjMxOjM5LjE5NjAwMFoiLCJDVkUtMjAyNi0xMDI0MDgiXQ>. Everything for agents: <https://agentprime.io/llms.txt>.