# Denial of service.

Crashes, hangs and resource exhaustion, ReDoS included. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Missing release of passed file descriptors in illumos nscd allows local users to exhaust kernel memory](https://agentprime.io/advisories/CVE-2026-104112.md)
  `CVE-2026-104112` · CVE record: illumos illumos-gate and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Denial of service
- [Reachable assertion in illumos bhyve REP string instruction emulation allows guest to panic host](https://agentprime.io/advisories/CVE-2026-102916.md)
  `CVE-2026-102916` · CVE record: illumos illumos-gate and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Denial of service
- [Open5GS through 2.8.0 MME Reachable Assertion via GTPv1 SGSN Context Request](https://agentprime.io/advisories/CVE-2026-108105.md)
  `CVE-2026-108105` · CVE record: open5gs open5gs · CVSS 8.2 High · Not analysed yet · Published 9 Oct 2026 · Tags: Denial of service
- [Strawberry legacy graphql-ws retains naturally completed subscription slots](https://agentprime.io/advisories/GHSA-m952-2w3f-6r8h.md)
  `GHSA-m952-2w3f-6r8h`, `CVE-2026-107727`, `PYSEC-2026-4302` · PyPI `strawberry-graphql`: affected `>=0.312.3, <0.327.2`, fixed in `0.327.2` · CVSS 3.7 Low · Not analysed yet · Published 9 Oct 2026 · Tags: Denial of service
- [Apache CXF: Prevent unbounded XML document size in StaxUtils by adding default element and character limits](https://agentprime.io/advisories/CVE-2026-108039.md)
  `CVE-2026-108039` · CVE record: Apache Software Foundation Apache CXF · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2026 · Tags: Denial of service
- [Apache CXF: The attachment header size and count limits can be bypassed, which allows denial of service through memory exhaustion.](https://agentprime.io/advisories/CVE-2026-107937.md)
  `CVE-2026-107937` · CVE record: Apache Software Foundation Apache CXF · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2026 · Tags: Denial of service
- [Apache CXF: FIQL Query Parser Denial of Service](https://agentprime.io/advisories/CVE-2026-86463.md)
  `CVE-2026-86463` · CVE record: Apache Software Foundation Apache CXF · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2026 · Tags: Denial of service
- [Uncontrolled recursion in elixir-protobuf/protobuf JSON decoding of self-referential messages](https://agentprime.io/advisories/GHSA-m497-c2h9-rvw6.md)
  `GHSA-m497-c2h9-rvw6`, `CVE-2026-104635`, `EEF-CVE-2026-104635` · Hex `protobuf`: affected `>=0.8.0, <0.17.1`, fixed in `0.17.1` · CVSS 8.2 High · Not analysed yet · Published 9 Oct 2026 · Tags: Denial of service
- [Ops Manager Uncontrolled Resource Consumption in Monitoring Endpoints](https://agentprime.io/advisories/CVE-2026-87110.md)
  `CVE-2026-87110` · CVE record: MongoDB Ops Manager · CVSS 6.9 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Denial of service
- [Resource allocation without limits in OpenPrinting CUPS](https://agentprime.io/advisories/CVE-2026-107885.md)
  `CVE-2026-107885` · CVE record: OpenPrinting CUPS · CVSS 3.3 Low · Not analysed yet · Published 9 Oct 2026 · Tags: Denial of service
- [EIPStackGroup OpENer v2.3 / master commit 76b95cf contains a buffer overflow in the GetAttributeList() implementation for the EtherNet/IP Get_Attribute_List service.](https://agentprime.io/advisories/CVE-2026-75350.md)
  `CVE-2026-75350` · CVE record · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2026 · Tags: Denial of service
- [EIPStackGroup OpENer v2.3.0/master up to commit 76b95cf contains an out-of-bounds read vulnerability in Connection Manager request parsing.](https://agentprime.io/advisories/CVE-2026-75349.md)
  `CVE-2026-75349` · CVE record · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2026 · Tags: Denial of service
- [EIPStackGroup OpENer v2.3 and master up to commit 76b95cf contain an expired pointer dereference vulnerability in the EtherNet/IP Common Packet Format (CPF) handling logic.](https://agentprime.io/advisories/CVE-2026-75347.md)
  `CVE-2026-75347` · CVE record · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2026 · Tags: Denial of service
- [OpENer v2.3.0 / commit 76b95cf contains an out-of-bounds read in the unconnected explicit messaging path.](https://agentprime.io/advisories/CVE-2026-75345.md)
  `CVE-2026-75345` · CVE record · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2026 · Tags: Denial of service
- [Lack of limit on size of parsed Range headers in net/http](https://agentprime.io/advisories/GO-2026-6609.md)
  `GO-2026-6609`, `BIT-golang-2026-78667`, `CVE-2026-78667` · Go `stdlib`: affected `<1.26.9 || >=1.27.0-0, <1.27.2`, fixed in `1.26.9`, `1.27.2` · CVSS 7.5 High · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart](https://agentprime.io/advisories/GO-2026-6608.md)
  `GO-2026-6608`, `BIT-golang-2026-94440`, `CVE-2026-94440` · Go `stdlib`: affected `<1.26.9 || >=1.27.0-0, <1.27.2`, fixed in `1.26.9`, `1.27.2` · CVSS 7.5 High · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [Satel Netco Design Inefficient Regular Expression Complexity](https://agentprime.io/advisories/CVE-2026-104628.md)
  `CVE-2026-104628` · CVE record: Satel Satel Netco Design · CVSS 7.1 High · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access](https://agentprime.io/advisories/CVE-2026-19498.md)
  `CVE-2026-19498` · CVE record: IBM Security Verify Access and 3 more · CVSS 5.9 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access](https://agentprime.io/advisories/CVE-2026-78399.md)
  `CVE-2026-78399` · CVE record: IBM Security Verify Access and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [music-metadata: MP4 stsd sample-entry size==0 causes a synchronous infinite loop (DoS) — unreleased regression on master](https://agentprime.io/advisories/GHSA-f94x-6692-553q.md)
  `GHSA-f94x-6692-553q`, `CVE-2026-107391` · npm `music-metadata`: affected `<11.16.0`, fixed in `11.16.0` · CVSS 6.2 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [music-metadata: Uncontrolled memory allocation in APEv2 parser](https://agentprime.io/advisories/GHSA-53v6-4h7p-p4gj.md)
  `GHSA-53v6-4h7p-p4gj`, `CVE-2026-107387` · npm `music-metadata`: affected `<11.16.0`, fixed in `11.16.0` · CVSS 6.2 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [music-metadata: ID3v2 tag size not validated before allocation, causing memory exhaustion DoS](https://agentprime.io/advisories/GHSA-jjpr-9cvf-cq55.md)
  `GHSA-jjpr-9cvf-cq55`, `CVE-2026-107388` · npm `music-metadata`: affected `<11.16.0`, fixed in `11.16.0` · CVSS 6.2 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [music-metadata: EBML parser trusts element lengths, allowing memory exhaustion or process abort](https://agentprime.io/advisories/GHSA-5gfj-9q3v-qfp3.md)
  `GHSA-5gfj-9q3v-qfp3`, `CVE-2026-107389` · npm `music-metadata`: affected `<11.16.0`, fixed in `11.16.0` · CVSS 6.2 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends early](https://agentprime.io/advisories/GHSA-6fqq-452j-qhrp.md)
  `GHSA-6fqq-452j-qhrp`, `CVE-2026-107286`, `PYSEC-2026-4276`, `PYSEC-2026-4285` · PyPI `pydantic-ai` and 1 more: affected `>=2.10.0, <2.53.0`, fixed in `2.53.0` · CVSS 7.5 High · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [CairoSVG: Quadratic-time DoS parsing a crafted SVG \<path>](https://agentprime.io/advisories/GHSA-c3jg-qh8m-j3h2.md)
  `GHSA-c3jg-qh8m-j3h2`, `CVE-2026-107378`, `PYSEC-2026-4204` · PyPI `cairosvg`: affected `<2.9.1`, fixed in `2.9.1` · CVSS 8.7 High · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [svg-sanitizer: Mixed-case xlink:HrEf skips the \`\<use>\` nesting-DoS check in Resolver::processReferences](https://agentprime.io/advisories/GHSA-m9xh-6747-9r6f.md)
  `GHSA-m9xh-6747-9r6f`, `CVE-2026-107381`, `PKSA-6j95-1jtb-x6wc` · Packagist `enshrined/svg-sanitize`: affected `<1.0.0`, fixed in `1.0.0` · CVSS 6.5 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service, CWE-178
- [enshrined/svg-sanitize: Denial of Service via DTD Attribute Declaration Crash](https://agentprime.io/advisories/GHSA-v383-3rw5-q8rf.md)
  `GHSA-v383-3rw5-q8rf`, `CVE-2026-107379`, `PKSA-cbx2-m9db-bmzd` · Packagist `enshrined/svg-sanitize`: affected `<1.0.0`, fixed in `1.0.0` · CVSS 6.5 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [music-metadata: uncatchable process crash parsing a crafted \`.dsf\` (residual of GHSA-v6c2-xwv6-8xf7)](https://agentprime.io/advisories/GHSA-8j4c-6x6g-rq3j.md)
  `GHSA-8j4c-6x6g-rq3j`, `CVE-2026-107392` · npm `music-metadata`: affected `<11.15.0`, fixed in `11.15.0` · CVSS 6.2 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service, CWE-248
- [amqp091-go: Pre-negotiation frame limit is not enforced to 4KB](https://agentprime.io/advisories/GHSA-w6r9-248c-frg8.md)
  `GHSA-w6r9-248c-frg8`, `CVE-2026-107386`, `GO-2026-6700` · Go `github.com/rabbitmq/amqp091-go`: affected `<1.14.0`, fixed in `1.14.0` · CVSS 6.3 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [music-metadata: MP4 parser allows memory exhaustion via oversized extended atom length](https://agentprime.io/advisories/CVE-2026-107390.md)
  `CVE-2026-107390` · CVE record: Borewit music-metadata · CVSS 6.2 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [IBM Guardium Data Protection Denial of Service](https://agentprime.io/advisories/CVE-2026-84276.md)
  `CVE-2026-84276` · CVE record: IBM Guardium Data Protection · CVSS 7.5 High · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [Coraza: Resource exhaustion via deferred file handle accumulation in multipart body processor](https://agentprime.io/advisories/GHSA-rp9v-7xv3-r6g3.md)
  `GHSA-rp9v-7xv3-r6g3`, `CVE-2026-107834`, `GO-2026-6697` · Go `github.com/corazawaf/coraza/v3`: affected `>=3.0.0, <3.8.0`, fixed in `3.8.0` · CVSS 5.3 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [Coraza: Unbounded recursion in JSON response body processor causes CPU exhaustion](https://agentprime.io/advisories/GHSA-3c6w-j9xm-8h2h.md)
  `GHSA-3c6w-j9xm-8h2h`, `CVE-2026-107833`, `GO-2026-6690` · Go `github.com/corazawaf/coraza/v3`: affected `>=3.0.0, <3.8.0`, fixed in `3.8.0` · CVSS 5.9 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [Coraza JSON body processor: argument-limit truncation reopens an unbounded-depth gjson.Valid stack overflow (process crash)](https://agentprime.io/advisories/GHSA-6gcq-wc29-5xf2.md)
  `GHSA-6gcq-wc29-5xf2`, `CVE-2026-107826`, `GO-2026-6693` · Go `github.com/corazawaf/coraza/v3`: affected `>=3.0.0, <3.8.1`, fixed in `3.8.1` · CVSS 7.5 High · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [Pydantic AI: Excessive resource use when local web fetching converts nested HTML](https://agentprime.io/advisories/GHSA-v36g-jcw9-x7cw.md)
  `GHSA-v36g-jcw9-x7cw`, `CVE-2026-107287`, `PYSEC-2026-4281`, `PYSEC-2026-4290` · PyPI `pydantic-ai` and 1 more: affected `>=1.77.0, <1.107.7 || >=2.0.0b1, <2.52.0`, fixed in `1.107.7`, `2.52.0` · CVSS 6.5 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [msgpack5: Many buffered values can exhaust the streaming decoder stack](https://agentprime.io/advisories/GHSA-5x5g-h9x8-2fh9.md)
  `GHSA-5x5g-h9x8-2fh9`, `CVE-2026-107300` · npm `msgpack5`: affected `<6.1.0`, fixed in `6.1.0` · CVSS 7.5 High · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [msgpack5: Deeply nested input can exhaust the decoder stack](https://agentprime.io/advisories/GHSA-24ch-f2g6-9hhh.md)
  `GHSA-24ch-f2g6-9hhh`, `CVE-2026-107298` · npm `msgpack5`: affected `<6.1.0`, fixed in `6.1.0` · CVSS 5.3 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [msgpack5: Quadratic parsing in the streaming decoder](https://agentprime.io/advisories/GHSA-gcx5-hxj7-gpqq.md)
  `GHSA-gcx5-hxj7-gpqq`, `CVE-2026-107297` · npm `msgpack5`: affected `<6.1.0`, fixed in `6.1.0` · CVSS 5.9 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [FFmpeg through 9.0.2 Infinite Loop via RTSP Redirect Handling in rtsp.c](https://agentprime.io/advisories/CVE-2026-107696.md)
  `CVE-2026-107696` · CVE record: FFmpeg FFmpeg · CVSS 7.1 High · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [FFmpeg before 8.1.3 HLS Demuxer Infinite Loop via Self-Referencing Playlist](https://agentprime.io/advisories/CVE-2026-107695.md)
  `CVE-2026-107695` · CVE record: FFmpeg FFmpeg · CVSS 7.1 High · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrl](https://agentprime.io/advisories/GHSA-v2xh-2vp8-57h8.md)
  `GHSA-v2xh-2vp8-57h8`, `CVE-2026-107294`, `PYSEC-2026-4280`, `PYSEC-2026-4289` · PyPI `pydantic-ai` and 1 more: affected `>=1.77.0, <1.107.2 || >=2.0.0b1, <2.24.0`, fixed in `1.107.2`, `2.24.0` · CVSS 6.5 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days](https://agentprime.io/advisories/GHSA-jw42-f3rr-4cc3.md)
  `GHSA-jw42-f3rr-4cc3`, `CVE-2026-107212`, `GO-2026-6685` · Go `github.com/xuri/excelize/v2`: affected `>=2.1.0, <2.11.1-0.20260930021559-01a9ff32fb3c`, fixed in `2.11.1-0.20260930021559-01a9ff32fb3c` · CVSS 7.5 High · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [AsyncHttpClient: Unbounded WebSocket permessage-deflate decompression enables a decompression-bomb denial of service when compression is enabled](https://agentprime.io/advisories/GHSA-x8v2-478q-2hvg.md)
  `GHSA-x8v2-478q-2hvg`, `CVE-2026-107227` · Maven `org.asynchttpclient:async-http-client`: affected `>=3.0.0, <3.0.14 || >=2.2.0, <=2.16.1`, fixed in `3.0.14` · CVSS 7.5 High · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service, CWE-409
- [Pydantic AI: Event loop blocked by quadratic title extraction in \`web_fetch\`](https://agentprime.io/advisories/GHSA-fpf4-vwcp-v4hp.md)
  `GHSA-fpf4-vwcp-v4hp`, `CVE-2026-107290`, `PYSEC-2026-4277`, `PYSEC-2026-4286` · PyPI `pydantic-ai` and 1 more: affected `>=1.77.0, <1.107.6 || >=2.0.0b1, <2.44.0`, fixed in `1.107.6`, `2.44.0` · CVSS 6.5 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [Excelize: extractPart allocates attacker-controlled, unbounded and negative-sized buffers from CFB directory entries: remote panic / OOM DoS](https://agentprime.io/advisories/GHSA-x2q3-8cjh-766f.md)
  `GHSA-x2q3-8cjh-766f`, `CVE-2026-107215`, `GO-2026-6689` · Go `github.com/xuri/excelize/v2`: affected `>=2.3.1, <2.11.1-0.20260912113515-5f636f9dcde5`, fixed in `2.11.1-0.20260912113515-5f636f9dcde5` · CVSS 7.5 High · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow](https://agentprime.io/advisories/GHSA-wp2g-vpjj-g53r.md)
  `GHSA-wp2g-vpjj-g53r`, `CVE-2026-107216`, `GO-2026-6688` · Go `github.com/xuri/excelize/v2`: affected `>=2.8.1, <2.11.1-0.20260911060113-ea12859e43c6`, fixed in `2.11.1-0.20260911060113-ea12859e43c6` · CVSS 7.5 High · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files](https://agentprime.io/advisories/GHSA-mjcv-p78q-w5fw.md)
  `GHSA-mjcv-p78q-w5fw`, `CVE-2026-61801`, `GO-2026-6686` · Go `github.com/moby/sys/user`: affected `<0.4.1`, fixed in `0.4.1` · CVSS 5.5 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [FFmpeg through 9.0.2 Stack Exhaustion via Recursive Free of pssh Boxes](https://agentprime.io/advisories/CVE-2026-107678.md)
  `CVE-2026-107678` · CVE record: FFmpeg FFmpeg · CVSS 5.7 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [FFmpeg through 9.0.2 DASH Demuxer Infinite Loop via Empty SegmentTemplate Media](https://agentprime.io/advisories/CVE-2026-107677.md)
  `CVE-2026-107677` · CVE record: FFmpeg FFmpeg · CVSS 5.7 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [Allocation of Resources Without Limits or Throttling in hMailServer](https://agentprime.io/advisories/CVE-2026-107586.md)
  `CVE-2026-107586` · CVE record: Progressive Robot Ltd hMailServer · CVSS 4.3 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [Allocation of Resources Without Limits or Throttling in hMailServer](https://agentprime.io/advisories/CVE-2026-107585.md)
  `CVE-2026-107585` · CVE record: Progressive Robot Ltd hMailServer · CVSS 5.3 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [IBM DataPower Gateway Denial of Service](https://agentprime.io/advisories/CVE-2026-14509.md)
  `CVE-2026-14509` · CVE record: IBM DataPower Gateway 10.6CD and 3 more · CVSS 5.9 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [IBM DataPower Gateway Denial of Service](https://agentprime.io/advisories/CVE-2026-16169.md)
  `CVE-2026-16169` · CVE record: IBM DataPower Gateway 11.0.0 · CVSS 7.5 High · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [IBM DataPower Gateway Denial of Service](https://agentprime.io/advisories/CVE-2026-16176.md)
  `CVE-2026-16176` · CVE record: IBM DataPower Gateway 10.6CD and 3 more · CVSS 7.5 High · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [Uncontrolled recursion in DCMTK JSON reader allows denial of service](https://agentprime.io/advisories/CVE-2026-44037.md)
  `CVE-2026-44037` · CVE record: OFFIS DCMTK · CVSS 6.8 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [Uncontrolled recursion in DCMTK xml2dcm allows denial of service](https://agentprime.io/advisories/CVE-2026-44036.md)
  `CVE-2026-44036` · CVE record: OFFIS DCMTK · CVSS 6.8 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [Uncontrolled recursion in DCMTK DICOMDIR parsing allows denial of service](https://agentprime.io/advisories/CVE-2026-44035.md)
  `CVE-2026-44035` · CVE record: OFFIS DCMTK · CVSS 6.8 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [Uncontrolled recursion in the DCMTK bundled XML parser allows denial of service](https://agentprime.io/advisories/CVE-2026-44033.md)
  `CVE-2026-44033` · CVE record: OFFIS DCMTK · CVSS 6.8 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [Uncontrolled recursion in the DCMTK DICOM dataset parser allows unauthenticated remote denial of service](https://agentprime.io/advisories/CVE-2026-44031.md)
  `CVE-2026-44031` · CVE record: OFFIS DCMTK · CVSS 8.7 High · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [Inefficient Algorithmic Complexity in hMailServer](https://agentprime.io/advisories/CVE-2026-107583.md)
  `CVE-2026-107583` · CVE record: Progressive Robot Ltd hMailServer · CVSS 6.5 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service

Newest: <https://agentprime.io/advisories/tag/dos.md>
Older: <https://agentprime.io/advisories/tag/dos.md?cursor=WyIyMDI2LTEwLTA4VDExOjQ5OjA2LjA4MTAwMFoiLCJDVkUtMjAyNi0xMDc1ODMiXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=dos&cursor=WyIyMDI2LTEwLTA5VDE0OjQyOjE4Ljk5ODAwMFoiLCJDVkUtMjAyNi0zOTQ1MyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/dos/?cursor=WyIyMDI2LTEwLTA5VDE0OjQyOjE4Ljk5ODAwMFoiLCJDVkUtMjAyNi0zOTQ1MyJd>. Everything for agents: <https://agentprime.io/llms.txt>.