Denial of service.

adm-zip: Crafted ZIP file triggers 4GB memory allocation

• Denial of service

<0.6.0 · fixed in 0.6.0

NanaZip: Unbounded memory allocation (DoS) in NanaZip UFS parser via unvalidated fs_bsize/fs_fsize superblock fields

• M2Team NanaZip
• Denial of service

NanaZip: Uncaught exception / unbounded allocation in NanaZip .NET single-file Extract() via unvalidated entry Size

• M2Team NanaZip
• Denial of service
• CWE-248

NanaZip: Unbounded memory allocation (DoS) in NanaZip WebAssembly parser via attacker-controlled section/name length fields

• M2Team NanaZip
• Denial of service

libp2p: CPU DoS via oversized IHAVE and IWANT control message arrays

• Denial of service
• CWE-20

<16.0.0 · fixed in 16.0.0

Duplicate Advisory: Authenticated Users Can Exhaust Temporary Disk Storage via Data-Table File Uploads

• Denial of service

* · no fixed version yet

Pre-authentication denial of service via the OAuth login route

• Grafana OSS
• Denial of service

Denial of service via unbounded request body size

• Grafana OSS
• Denial of service

Capgo - Plan Bypass via Unrestricted Attachment Upload Endpoint

• Capgo
• Denial of service

Plug: multipart :length limit is not charged for part headers, enabling unbounded temp-file creation (denial of service)

• Denial of service

Published by the maintainers · not yet reviewed by GitHub

>=1.4.0-rc.0, <1.16.6 || >=1.17.0, <1.17.4 || >=1.18.0, <1.18.5 || >=1.19.1, <1.19.5 || >=1.20.0, <1.20.3 · fixed in 1.16.6, 1.17.4, 1.18.5, 1.19.5, 1.20.3

Apache IoTDB: Unauthenticated unbounded recursion in IoTDB AirGap receiver's E-language prefix parser causes per-connection StackOverflowError

• Apache Software Foundation Apache IoTDB
• Denial of service

Apache IoTDB: Unauthenticated heap-exhaustion DoS via unbounded allocation in IoTDB AirGap pipe receiver

• Apache Software Foundation Apache IoTDB
• Authentication bypass
• Denial of service

Mistune: Potential DoS via quadratic-time parsing in parse_link_text

• Denial of service

<3.3.0 · fixed in 3.3.0

pdeljanov Symphonia Metadata denial of service

• pdeljanov Symphonia
• Denial of service

lo48576 fbxcel Node Header parser.rs denial of service

• lo48576 fbxcel
• Denial of service

pypdf: Possible infinite loop when processing threads/articles in writer

• Denial of service

<6.13.1 · fixed in 6.13.1

Junos OS: EX4100 Series, EX4400: With sFlow configured in a VC scenario multicast traffic leads to an FPC crash

• Juniper Networks Junos OS
• Denial of service

YesWiki has Unsafe eval() in its Formula Calculato, Leading to Remote Code Execution & Denial of Service

• Code injection
• Denial of service

<4.6.6 · fixed in 4.6.6

Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations

• Python Software Foundation CPython
• Denial of service

Zeek < 8.0.9 Uncontrolled Memory Consumption DoS via FTP Analyzer

• zeek
• Denial of service

org.hl7.fhir.core: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint

• Denial of service

>=6.9.5, <6.9.9 || <6.9.4.2 · fixed in 6.9.9, 6.9.4.2

Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser

• Denial of service

<2.8.4 · fixed in 2.8.4

Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists

• Denial of service

<2.8.4 · fixed in 2.8.4

Phantom: Arbitrary file write and decode-bomb DoS via unconfined MCP tool paths

• Path traversal
• Denial of service

<1.3.1 · fixed in 1.3.1

pyLoad: Unbounded Memory Growth Leading to DoS and Potential DDoS in EventManager

• Denial of service

<=0.5.0b3.dev100 · no fixed version yet

GNU LibreDWG DWG File dwg.c dwg_next_entity null pointer dereference

• GNU LibreDWG
• Denial of service
• Memory corruption

Out-of-bounds read in Samsung Open Source Escargot

• Samsung Open Source Escargot
• Memory corruption
• Denial of service

Loop with Unreachable Exit Condition in GNU patch

• GNU patch
• Denial of service

DoS through oversized audit log entries in Guardian/CMC before 26.2.0

• Nozomi Networks Guardian
• Nozomi Networks CMC
• Denial of service

Tenda CP3 V3.0 firmware V31.1.9.91 does not validate the Content-Length header field in RTSP requests (including DESCRIBE, SETUP, and PLAY methods).

• Denial of service
• CWE-703

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

• Wireshark
• Denial of service

Trapster Community: Unauthenticated malformed DNS compression pointers crash per-packet honeypot handler

• Denial of service

<1.2.2 · fixed in 1.2.2

NATS Server: MQTT partial CONNECT packets can exhaust pre-auth memory

• nats-io nats-server
• Denial of service

Guardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector_params.regex

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI 3.3
• Denial of service

Denial of service via crafted push/pull gossip message in memberlist

• HashiCorp Shared library
• Denial of service

App::Ack versions before 3.10.0 for Perl allow memory exhaustion via an unbounded context value in a project .ackrc

• PETDANCE App::Ack
• Denial of service

Memory leak in SFTP service can result in a denial of service in MOVEit Transfer

• Progress MOVEit Transfer
• Denial of service

Tanium addressed a denial of service vulnerability in Tanium Server.

• Tanium Server
• Denial of service

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed

• TONYC Imager
• Denial of service
• CWE-196

Resource allocation without limits in OpenBSD OpenSSH

• OpenBSD OpenSSH
• Denial of service

Resource allocation without limits in OpenBSD OpenSSH

• OpenBSD OpenSSH
• Denial of service

In OpENer 2.3.0 (commit 76b95cf), a resource exhaustion (Denial of Service) vulnerability exists in its network processing loop.

• Denial of service

ratex-parser has unbounded parser recursion that leads to stack overflow (process abort)

• Denial of service

<0.1.11 · fixed in 0.1.11

ratex-parser panics on `\verb` with a multibyte delimiter (UTF-8 byte-boundary slice)

• Denial of service
• CWE-248

<0.1.11 · fixed in 0.1.11

String::Util versions before 1.36 for Perl are susceptible to a regular expression denial of service

• BAKERSCOT String::Util
• Denial of service

netfoil has a resource leak in LRU cache

• Denial of service

<0.3.0 · fixed in 0.3.0

Phoenix transports do not limit channel joins per connection, enabling process-exhaustion denial of service

• Denial of service

Published by the maintainers · not yet reviewed by GitHub

>=0.11.0, <1.5.15 || >=1.6.0-rc.0, <1.6.17 || >=1.7.0-rc.0, <1.7.24 || >=1.8.0-rc.0, <1.8.9 · fixed in 1.5.15, 1.6.17, 1.7.24, 1.8.9

Open WebUI denial of service through endpoint for converting markdown

• Denial of service

<0.5.13 · fixed in 0.5.13

pymatgen is vulnerable to Regular Expression Denial of Service (ReDoS)

• Denial of service

<2025.10.7 · fixed in 2025.10.7

Coolify: File Upload Without Type or Size Validation in Database Backup Restore

• coollabsio coolify
• Unrestricted file upload
• Denial of service

Coolify unauthenticated feedback endpoint allows Discord webhook abuse

• coollabsio coolify
• Authentication bypass
• Denial of service

Coder vulnerable to denial of service via unbounded request body in AI Bridge provider endpoints

• Denial of service

>=2.33.0, <2.33.8 || >=2.34.0, <2.34.2 · fixed in 2.33.8, 2.34.2

Coder: Zip upload decompression lacks aggregate size limit, enabling denial of service

• Denial of service
• CWE-409

>=2.17.0, <2.29.17 || >=2.30.0, <2.32.7 || >=2.33.0, <2.33.8 || >=2.34.0, <2.34.2 · fixed in 2.29.17, 2.32.7, 2.33.8, 2.34.2

Coder's unbounded memory allocation in provisioner file upload allows authenticated denial of service

• Denial of service

>=2.24.0, <2.29.17 || >=2.30.0, <2.32.7 || >=2.33.0, <2.33.8 || >=2.34.0, <2.34.2 · fixed in 2.29.17, 2.32.7, 2.33.8, 2.34.2

mv: symlinks expanded during cross-device move (resource exhaustion / data duplication)

• Path traversal
• Denial of service

<0.7.0 · fixed in 0.7.0

cp: -R reads device nodes as streams, destroying device semantics

• Denial of service
• CWE-706

<0.7.0 · fixed in 0.7.0

OP-TEE has missing OPTEE_MSG_ATTR_TYPE_MASK in cleanup_shm_refs() leaks mobj references

• OP-TEE optee_os
• Denial of service

High-Severity Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access

• BeyondTrust Remote Support
• BeyondTrust Privileged Remote Access
• Denial of service

Reachable assertion in OpenVPN

• OpenVPN
• Denial of service

Memory leak in OpenVPN

• OpenVPN
• Denial of service