# Denial of service. Crashes, hangs and resource exhaustion, ReDoS included. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [Uncontrolled recursion in the Ion reader in Amazon Ion Python](https://agentprime.io/advisories/CVE-2026-104020.md) `CVE-2026-104020` · CVE record: Amazon ion-python · CVSS 8.7 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service - [Zod can exhaust memory while validating oversized constrained collections](https://agentprime.io/advisories/GHSA-mrhx-c7xc-m3w5.md) `GHSA-mrhx-c7xc-m3w5`, `CVE-2023-54404` · npm `zod`: affected `<4.6.6`, fixed in `4.6.6` · CVSS 7.5 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service - [jackson-dataformats-binary: Smile parser does not enforce StreamReadConstraints.maxNameLength, enabling memory-exhaustion denial of service](https://agentprime.io/advisories/CVE-2026-68496.md) `CVE-2026-68496` · CVE record: FasterXML jackson-dataformats-binary · CVSS 7.5 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service - [jackson-dataformats-binary: CBOR parser does not enforce StreamReadConstraints.maxNameLength, enabling memory-exhaustion denial of service](https://agentprime.io/advisories/CVE-2026-68495.md) `CVE-2026-68495` · CVE record: FasterXML jackson-dataformats-binary · CVSS 7.5 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service - [Apache HTTP Server: mod_dav shared lock overflow](https://agentprime.io/advisories/CVE-2026-42528.md) `CVE-2026-42528` · CVE record: Apache Software Foundation Apache HTTP Server · CVSS 4.3 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service - [jackson-core: UTF8DataInputJsonParser.\_reportInvalidToken() missing maxErrorTokenLength limit -> unbounded StringBuilder growth (DoS)](https://agentprime.io/advisories/GHSA-7hhh-6rmp-j9qf.md) `GHSA-7hhh-6rmp-j9qf`, `CVE-2026-89425` · Maven `com.fasterxml.jackson.core:jackson-core` and 1 more: affected `>=2.19.0, <2.21.7 || >=2.22.0, <2.22.3 || >=2.8.0, <2.18.11`, fixed in `2.21.7`, `2.22.3`, `2.18.11` · CVSS 7.5 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service - [jackson-core: ReDoS: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber()](https://agentprime.io/advisories/GHSA-p6pp-m3f8-5c89.md) `GHSA-p6pp-m3f8-5c89`, `CVE-2026-89407` · Maven `com.fasterxml.jackson.core:jackson-core` and 1 more: affected `>=2.17.0, <2.18.11 || >=2.19.0, <2.21.7 || >=2.22.0, <2.22.3`, fixed in `2.18.11`, `2.21.7`, `2.22.3` · CVSS 7.5 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service - [devalue: Residual sparse-array CPU amplification in uneval](https://agentprime.io/advisories/GHSA-hx4r-w6wj-j8fg.md) `GHSA-hx4r-w6wj-j8fg`, `CVE-2026-123566` · npm `devalue`: affected `<5.9.3`, fixed in `5.9.3` · CVSS 8.7 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service - [devalue: Repeated primitive strings cause quadratic expansion in uneval](https://agentprime.io/advisories/GHSA-mcm9-63f2-9j32.md) `GHSA-mcm9-63f2-9j32`, `CVE-2026-123565` · npm `devalue`: affected `<5.9.3`, fixed in `5.9.3` · CVSS 8.7 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service, CWE-409 - [devalue: Sparse arrays emitted by uneval cause eager allocation when evaluated](https://agentprime.io/advisories/GHSA-wf3x-273g-mvxv.md) `GHSA-wf3x-273g-mvxv`, `CVE-2026-123564` · npm `devalue`: affected `>=1.0.0, <5.9.3`, fixed in `5.9.3` · CVSS 8.7 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service - [devalue: Custom ArrayBuffer revivers can bypass typed-array allocation validation](https://agentprime.io/advisories/GHSA-r9w8-h9r3-54w4.md) `GHSA-r9w8-h9r3-54w4`, `CVE-2026-123563` · npm `devalue`: affected `<5.9.3`, fixed in `5.9.3` · CVSS 8.7 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service, Memory corruption - [pypdf: Possible long runtimes with large amount of embedded files](https://agentprime.io/advisories/GHSA-v247-6f48-mgcj.md) `GHSA-v247-6f48-mgcj`, `CVE-2026-102999`, `PYSEC-2026-4159` · PyPI `pypdf`: affected `<6.19.0`, fixed in `6.19.0` · CVSS 8.7 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service - [pypdf: Possible long runtimes when generating appearance streams](https://agentprime.io/advisories/GHSA-php9-fj8v-98fj.md) `GHSA-php9-fj8v-98fj`, `CVE-2026-102998`, `PYSEC-2026-4157` · PyPI `pypdf`: affected `<6.19.0`, fixed in `6.19.0` · CVSS 8.7 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service - [pypdf: Possible large memory usage when retrieving alphabetical page labels](https://agentprime.io/advisories/GHSA-w23x-9jrw-r45c.md) `GHSA-w23x-9jrw-r45c`, `CVE-2026-103000`, `PYSEC-2026-4160` · PyPI `pypdf`: affected `<6.19.0`, fixed in `6.19.0` · CVSS 8.7 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service - [pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up)](https://agentprime.io/advisories/GHSA-jw7q-gvrg-4vj3.md) `GHSA-jw7q-gvrg-4vj3`, `CVE-2026-102997`, `PYSEC-2026-4156` · PyPI `pypdf`: affected `<6.18.1`, fixed in `6.18.1` · CVSS 8.7 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service - [pypdf: Possible large memory usage when parsing font data](https://agentprime.io/advisories/GHSA-g9cg-prrw-2r8q.md) `GHSA-g9cg-prrw-2r8q`, `CVE-2026-102996`, `PYSEC-2026-4155` · PyPI `pypdf`: affected `<6.18.1`, fixed in `6.18.1` · CVSS 8.7 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service - [pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)](https://agentprime.io/advisories/GHSA-fp3h-c4fm-7vvf.md) `GHSA-fp3h-c4fm-7vvf`, `CVE-2026-102995`, `PYSEC-2026-4154` · PyPI `pypdf`: affected `<6.18.1`, fixed in `6.18.1` · CVSS 8.7 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service - [pypdf: Possible long runtimes/large memory usage when parsing indirect objects](https://agentprime.io/advisories/GHSA-5jq2-8x83-x246.md) `GHSA-5jq2-8x83-x246`, `CVE-2026-102994`, `PYSEC-2026-4153` · PyPI `pypdf`: affected `<6.18.0`, fixed in `6.18.0` · CVSS 8.7 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service - [pypdf: Possible large memory usage when retrieving Roman page labels](https://agentprime.io/advisories/GHSA-qv6h-rv94-w285.md) `GHSA-qv6h-rv94-w285`, `CVE-2026-102993`, `PYSEC-2026-4158` · PyPI `pypdf`: affected `<6.17.0`, fixed in `6.17.0` · CVSS 8.7 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service - [basic-ftp: Quadratic-time CPU denial of service in Client.list() Unix directory-listing parser (RE_LINE backtracking)](https://agentprime.io/advisories/GHSA-c475-qrg2-pj4r.md) `GHSA-c475-qrg2-pj4r`, `CVE-2026-102990` · npm `basic-ftp`: affected `<6.2.1`, fixed in `6.2.1` · CVSS 8.2 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service - [Imager versions before 1.037 for Perl exit the process reading a raw image with an out-of-range raw_datachannels value in i_readraw_wiol](https://agentprime.io/advisories/CVE-2026-102504.md) `CVE-2026-102504` · CVE record · CVSS 7.5 High · Not analysed yet · Published 1 Oct 2026 · Tags: Memory corruption, Denial of service - [Apache APISIX: Batch response aggregation can exhaust worker memory](https://agentprime.io/advisories/CVE-2026-94250.md) `CVE-2026-94250` · CVE record: Apache Software Foundation Apache APISIX · CVSS 8.2 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service - [Infinite loop in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2026-103492.md) `CVE-2026-103492` · CVE record: JetBrains YouTrack · CVSS 6.5 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service - [BlueALSA bluealsad LC3plus Decoder Division-by-Zero DoS](https://agentprime.io/advisories/CVE-2026-101887.md) `CVE-2026-101887` · CVE record: arkq bluez-alsa · CVSS 2.1 Low · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service - [Tornado: Unbounded query-string argument count allows event-loop-stalling DoS](https://agentprime.io/advisories/GHSA-3hv7-mjh2-fv65.md) `GHSA-3hv7-mjh2-fv65`, `CVE-2026-103261` · PyPI `tornado`: affected `<6.5.9`, fixed in `6.5.9` · CVSS 6.9 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [tornado: CurlAsyncHTTPClient enforces no response-size limit — decompression bomb drives unbounded memory accumulation to OOM](https://agentprime.io/advisories/GHSA-chx6-46f5-w4vp.md) `GHSA-chx6-46f5-w4vp`, `CVE-2026-103262` · PyPI `tornado`: affected `<6.5.9`, fixed in `6.5.9` · CVSS 8.7 High · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service, CWE-409 - [pageant: Out-of-bounds read / oversized allocation in \`pageant\` MemoryMap::read via a malicious Pageant agent (Windows)](https://agentprime.io/advisories/GHSA-g4mp-vgx3-xrvm.md) `GHSA-g4mp-vgx3-xrvm`, `CVE-2026-102820` · crates.io `pageant`: affected `<0.2.3`, fixed in `0.2.3` · CVSS 6.2 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Memory corruption, Denial of service - [Russh: Unbounded memory exhaustion via CHANNEL_OPEN flood during a client-stalled rekey](https://agentprime.io/advisories/GHSA-35g8-35p8-c8fw.md) `GHSA-35g8-35p8-c8fw`, `CVE-2026-102821` · crates.io `russh`: affected `<0.63.2`, fixed in `0.63.2` · CVSS 6.5 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [GitPython: Denial of Service via catastrophic backtracking (ReDoS) in Actor.name_email_regex — commit author/committer field parsing](https://agentprime.io/advisories/GHSA-g5vv-9gxw-82hx.md) `GHSA-g5vv-9gxw-82hx`, `CVE-2026-87819`, `PYSEC-2026-3984` · PyPI `gitpython`: affected `<3.1.60`, fixed in `3.1.60` · CVSS 8.7 High · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [Kiteworks Email Protection Gateway Uncontrolled Resource Consumption](https://agentprime.io/advisories/CVE-2026-102144.md) `CVE-2026-102144` · CVE record: Kiteworks Email Protection Gateway · CVSS 5.3 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass, Denial of service - [OpenClaw Windows Node before 2026.7.1 Denial of Service](https://agentprime.io/advisories/CVE-2026-101881.md) `CVE-2026-101881` · CVE record: OpenClaw OpenClaw Windows Node · CVSS 7.1 High · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [restbed through 5.0.0 WebSocket Memory Exhaustion via Unbounded Frame Buffering](https://agentprime.io/advisories/CVE-2026-103472.md) `CVE-2026-103472` · CVE record: Corvusoft restbed · CVSS 8.7 High · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [restbed through 5.0.0 Denial of Service via Unbounded Header Buffering](https://agentprime.io/advisories/CVE-2026-103471.md) `CVE-2026-103471` · CVE record: Corvusoft restbed · CVSS 8.7 High · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [A flaw has been found in vllm-project vLLM up to 0.26.0. This vulnerability affects unknown code of the file rust/src/parser/src/unified/gemma4.rs of the component Gemma4UnifiedParser. Executing a ...](https://agentprime.io/advisories/PYSEC-2026-4186.md) `PYSEC-2026-4186`, `CVE-2026-103241` · PyPI `vllm`: affected `<0.27.0`, fixed in `0.27.0` · CVSS 6.9 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [Uncontrolled resource consumption in NVIDIA GeForce and others](https://agentprime.io/advisories/CVE-2026-47568.md) `CVE-2026-47568` · CVE record: NVIDIA GeForce and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [Uncontrolled resource consumption in NVIDIA GeForce and others](https://agentprime.io/advisories/CVE-2026-47567.md) `CVE-2026-47567` · CVE record: NVIDIA GeForce and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [Memory leak in NVIDIA GeForce and others](https://agentprime.io/advisories/CVE-2026-47566.md) `CVE-2026-47566` · CVE record: NVIDIA GeForce and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [Divide by zero in NVIDIA GeForce and others](https://agentprime.io/advisories/CVE-2026-47534.md) `CVE-2026-47534` · CVE record: NVIDIA GeForce and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [Improper resource shutdown in NVIDIA GeForce and others](https://agentprime.io/advisories/CVE-2026-47491.md) `CVE-2026-47491` · CVE record: NVIDIA GeForce and 3 more · CVSS 7.8 High · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [Angular Server-Side Rendering (SSR): Denial of Service via Numeric URL Matrix Parameters](https://agentprime.io/advisories/GHSA-ff3f-86qr-9cv3.md) `GHSA-ff3f-86qr-9cv3`, `CVE-2026-101896` · npm `@angular/router`: affected `<=19.2.25 || >=20.0.0, <20.3.32 || >=21.0.0, <21.2.24 || >=22.0.0, <22.2.0`, fixed in `20.3.32`, `21.2.24`, `22.2.0` · CVSS 8.2 High · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [jackson-databind quadratic forward-reference completion](https://agentprime.io/advisories/GHSA-cxp5-3px4-pw24.md) `GHSA-cxp5-3px4-pw24`, `CVE-2026-91777` · Maven `com.fasterxml.jackson.core:jackson-databind` and 1 more: affected `>=2.19.0, <2.21.7 || >=2.5.0, <2.18.11 || >=2.22.0, <2.22.3`, fixed in `2.21.7`, `2.18.11`, `2.22.3` · CVSS 7.5 High · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [jackson-databind retains every unknown raw type ID](https://agentprime.io/advisories/GHSA-wv8q-qhhj-9h54.md) `GHSA-wv8q-qhhj-9h54`, `CVE-2026-91776` · Maven `com.fasterxml.jackson.core:jackson-databind` and 1 more: affected `>=2.0.0, <2.18.11 || >=2.19.0, <2.21.7 || >=2.22.0, <2.22.3`, fixed in `2.18.11`, `2.21.7`, `2.22.3` · CVSS 7.5 High · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scan](https://agentprime.io/advisories/GHSA-3q6v-r5mr-hxv8.md) `GHSA-3q6v-r5mr-hxv8`, `CVE-2026-105830`, `PKSA-m4t9-vsgq-8khn` · Packagist `league/commonmark`: affected `>=2.0.0, <2.10.2`, fixed in `2.10.2` · CVSS 8.7 High · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [Resource allocation without limits in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2026-100274.md) `CVE-2026-100274` · CVE record: JetBrains YouTrack · CVSS 6.5 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [Regular expression denial of service in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2026-100267.md) `CVE-2026-100267` · CVE record: JetBrains YouTrack · CVSS 5.9 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [Axios: ReDoS in fromDataURI data: URL parser freezes the Node event loop (DoS)](https://agentprime.io/advisories/GHSA-c29m-xwm3-cm6r.md) `GHSA-c29m-xwm3-cm6r`, `CVE-2026-101903` · npm `axios`: affected `>=1.16.1, <1.20.0`, fixed in `1.20.0` · CVSS 8.2 High · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [Axios: ReDoS (O(N²)) in shouldBypassProxy host normalization, reachable via untrusted redirect Location](https://agentprime.io/advisories/GHSA-mghh-pgcx-3jjj.md) `GHSA-mghh-pgcx-3jjj`, `CVE-2026-101906` · npm `axios`: affected `>=1.15.0, <1.20.0`, fixed in `1.20.0` · CVSS 8.2 High · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [Axios: Denial of Service via Unhandled 'error' Event in HTTP/2 ClientHttp2Session Initialization](https://agentprime.io/advisories/GHSA-542g-h47m-68v8.md) `GHSA-542g-h47m-68v8`, `CVE-2026-101901` · npm `axios`: affected `>=1.13.0, <1.20.0`, fixed in `1.20.0` · CVSS 8.2 High · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [urllib3: Chunked Deflate streaming can enter an infinite loop](https://agentprime.io/advisories/GHSA-gh4c-6fx4-qh6g.md) `GHSA-gh4c-6fx4-qh6g`, `CVE-2026-97688`, `PYSEC-2026-4176` · PyPI `urllib3`: affected `>=2.6.2, <2.8.0`, fixed in `2.8.0` · CVSS 6.9 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory](https://agentprime.io/advisories/GHSA-vxq7-64xx-v4gw.md) `GHSA-vxq7-64xx-v4gw`, `CVE-2026-97689`, `PYSEC-2026-4177` · PyPI `urllib3`: affected `>=1.10.3, <2.8.0`, fixed in `2.8.0` · CVSS 8.9 High · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [Nest: Unbounded memory growth in the NestJS TCP microservice transport](https://agentprime.io/advisories/GHSA-96h4-vgxj-gvm2.md) `GHSA-96h4-vgxj-gvm2` · npm `@nestjs/microservices`: affected `<11.2.5 || >=12.0.0, <12.0.3`, fixed in `11.2.5`, `12.0.3` · CVSS 6.5 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [Nodemailer addressparser: O(n^2) on comment-joined addresses enables a remote DoS (reachable via mailparser)](https://agentprime.io/advisories/GHSA-prgh-xp8r-p3m5.md) `GHSA-prgh-xp8r-p3m5`, `CVE-2026-90776` · npm `nodemailer`: affected `>=9.1.0, <10.0.5`, fixed in `10.0.5` · CVSS 8.7 High · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [PyJWT: ReDoS vulnerability when calling the \`is_pem_format\` function.](https://agentprime.io/advisories/GHSA-jwrc-g2q2-pq5p.md) `GHSA-jwrc-g2q2-pq5p`, `CVE-2026-102270`, `PYSEC-2026-4148` · PyPI `pyjwt`: affected `<2.14.0`, fixed in `2.14.0` · CVSS 4.4 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [GraphicsMagick WPG File wpg.c ExtractPostscript recursion](https://agentprime.io/advisories/CVE-2026-103118.md) `CVE-2026-103118` · CVE record: GraphicsMagick · CVSS 5.3 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [WordPress Two Factor plugin <= 0.16.0 - Denial of Service Attack vulnerability](https://agentprime.io/advisories/CVE-2026-100508.md) `CVE-2026-100508` · CVE record: WordPress.org Two Factor · CVSS 5.3 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [WordPress WP Store Locator plugin < 3.0.0 - Denial of Service Attack vulnerability](https://agentprime.io/advisories/CVE-2026-94681.md) `CVE-2026-94681` · CVE record: Tijmen Smit WP Store Locator · CVSS 5.9 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [Uncontrolled Memory Allocation in CODESYS Gateway Client](https://agentprime.io/advisories/CVE-2026-76992.md) `CVE-2026-76992` · CVE record: CODESYS Development System 3 and 4 more · CVSS 8.7 High · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [Apache MINA SSHD: Memory exhaustion DoS via unbounded SCP command line read](https://agentprime.io/advisories/CVE-2026-93996.md) `CVE-2026-93996` · CVE record: Apache Software Foundation Apache MINA SSHD · CVSS 6.5 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [Apache MINA SSHD: Memory exhaustion in SFTP client via unsolicited SFTP replies](https://agentprime.io/advisories/CVE-2026-94002.md) `CVE-2026-94002` · CVE record: Apache Software Foundation Apache MINA SSHD · CVSS 7.5 High · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service - [Apache MINA SSHD: Memory exhaustion in SFTP v6 check-file-name/check-file-handle extension](https://agentprime.io/advisories/CVE-2026-94029.md) `CVE-2026-94029` · CVE record: Apache Software Foundation Apache MINA SSHD · CVSS 6.5 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .