Denial of service.

LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loading

• Denial of service

>=0.12.1, <0.12.3 · fixed in 0.12.3

Cockpit: cockpit: denial of service in `cockpit-ws` due to url-root handling without a trailing slash

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Denial of service

Cockpit: cockpit: denial of service via unbounded connection thread spawning

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Denial of service

NanoMQ: Infinite Loop in UNSUBSCRIBE Decoder Leading to Remote DoS

• nanomq
• Denial of service

NanoMQ: O(N²) Denial of Service in MQTT v5 Property Parsing

• nanomq
• Denial of service

libheif: `clap` + oversized `ispe` aborts on an assert in `Fraction::Fraction` (incomplete fix for CVE-2026-62289)

• strukturag libheif
• Denial of service

libheif: Derived-image indirect reference chains and tiled offsets bypass decode caching and MemoryHandle limits, causing CPU/memory amplification DoS

• strukturag libheif
• Denial of service

libheif: Sequence decode timing-table initialization allows non-terminating loops and unbounded memory, bypassing max_sequence_frames

• strukturag libheif
• Denial of service

OpenImageIO: Unbounded recursion in FITS header parser leads to stack overflow

• AcademySoftwareFoundation OpenImageIO
• Denial of service

uri-js through 4.4.1 Denial of Service via removeDotSegments

• garycourt uri-js
• Denial of service

SGLang through 0.5.19 Unbounded Memory Allocation via bootstrap_room

• sgl-project sglang
• Denial of service

Org.wildfly.security/wildfly-elytron-asn1: unbounded memory allocation in wildfly elytron asn.1 derdecoder via crafted der payload

• Red Hat JBoss Enterprise Application Platform 8.1.8.GA
• Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10
• Denial of service

Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tga_palette_read

• Denial of service
• CWE-196

ImageMagick before 7.1.2-31 Policy Bypass in UHDR encoder

• ImageMagick
• Denial of service

ImageMagick before 7.1.2-31 Division by Zero in FLIF encoder

• ImageMagick
• Denial of service

ImageMagick before 7.1.2-31 Policy Bypass via PCD decoder

• ImageMagick
• Denial of service

Caddy: rewrite placeholder re-expansion, unbounded body buffer DoS, and fileHidden case-sensitivity bypass

• Code injection
• Denial of service

<2.11.4 · fixed in 2.11.4

Io.netty/netty-codec-http: netty: denial of service via unbounded httpservercodec http/1.1 pipeline queue

• Red Hat Build of Apache Camel 3.33.3.SP2
• Red Hat Build of Debezium 3.6
• Denial of service

Io.netty/netty-codec-http: netty: denial of service via unbounded concurrent spdy streams

• Red Hat Build of Apache Camel 3.33.3.SP2
• Red Hat Build of Debezium 3.6
• Denial of service

Io.netty/netty-codec-redis: netty: redisarrayaggregator nested resp headers multiply patched preallocation limits

• Red Hat build of Apache Camel for Spring Boot 4
• Red Hat Fuse 7
• Denial of service

Really Simple Security (Free) < 9.8.3 - Unauthenticated Unbounded Option Growth via Spoofed Client IP Header

• Really Simple Security
• Denial of service

Freedesktop Poppler JBIG2Stream.cc rewind null pointer dereference

• Freedesktop Poppler
• Denial of service
• Memory corruption

O-RAN-SC SMO OAM VES Collector allocation of resources

• O-RAN-SC SMO OAM
• Denial of service

O-RAN-SC SMO OAM VES Collector allocation of resources

• O-RAN-SC SMO OAM
• Denial of service

go-openapi/swag jsonutils before 0.27.1 Uncontrolled Recursion in Ordered JSON Marshal and Unmarshal

• go-openapi swag
• Denial of service

vLLM through 0.29.0 fails to properly clean up decode-side metadata for rejected inference requests in prefill/decode disaggregated deployments. Remote attackers can submit requests with max_tokens...

• Denial of service

<0.30.0 · fixed in 0.30.0

O-RAN-SC SMO OAM VES Collector allocation of resources

• O-RAN-SC SMO OAM
• Denial of service

redis-parser through 3.0.0 Denial of Service via Unbounded Recursion

• NodeRedis redis-parser
• Denial of service

O-RAN-SC SMO OAM VES Collector memory allocation

• O-RAN-SC SMO OAM
• Denial of service

Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patterns

• Denial of service

<2.9.0 · fixed in 2.9.0

Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace/comment trimming regex `RE_WS_END` (triggers on VALID selectors)

• Denial of service

<2.9.0 · fixed in 2.9.0

react/http: A malformed HTTP chunked body can lead to a denial-of-service and peg the CPU

• Denial of service

>=0.6.0, <1.11.1 · fixed in 1.11.1

CoreDNS: Unauthenticated memory exhaustion in custom transports

• Denial of service

<1.14.7 · fixed in 1.14.7

HAPI FHIR: SHCParser DEFLATE infinite loop causes denial of service

• Denial of service
• CWE-20

<6.9.12 · fixed in 6.9.12

HAPI FHIR: SHCParser unbounded DEFLATE decompression causes denial of service

• Denial of service
• CWE-20

<6.9.12 · fixed in 6.9.12

Svelte devalue: DoS via malformed input

• Denial of service

<5.9.2 · fixed in 5.9.2

dd-trace-cpp: Improper parsing of W3C baggage headers may lead to DoS

• DataDog dd-trace-cpp
• Denial of service

Datadog PHP Tracer: Improper parsing of W3C baggage headers may lead to DoS

• DataDog dd-trace-php
• Denial of service

Valhalla: Degenerate exclude_polygons (collinear points, zero area) causes OOM in /sources_to_targets

• valhalla
• Denial of service

Apache Karaf: Improper release of ClassLoader references via static ThreadLocal caching

• Apache Software Foundation Apache Karaf
• Denial of service

Traccar: Uncontrolled Infinite Loop DoS via Group Parent Cycle

• traccar
• Denial of service

AsyncHttpClient's unbounded HTTP/1.1 response decompression enables a decompression-bomb denial of service

• Denial of service
• CWE-409

>=3.0.0, <3.0.12 || >=2.0.0, <2.16.1 · fixed in 3.0.12, 2.16.1

vLLM: Request-selected PyNvVideoCodec GPU decode bypasses static VRAM reservation

• Denial of service

<0.28.0 · fixed in 0.28.0

RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation

• Denial of service

<1.13.0 · fixed in 1.13.0

RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation

• Denial of service

<1.13.0 · fixed in 1.13.0

Assertion failure in the DNS stub resolver with a long search domain

• The GNU C Library glibc
• Denial of service

ExifReader: DoS via Crafted HEIC/AVIF iloc Box - Memory Exhaustion

• Denial of service

<4.41.1 · fixed in 4.41.1

AsyncHttpClient: Connection permit leak on TLS handshake failure causes per-host denial of service

• AsyncHttpClient async-http-client
• Denial of service

Duplicate Advisory: vm2: timeout Option Bypass via FinalizationRegistry Cleanup Callback (Unbounded Host Event-Loop Block)

• Denial of service

<=3.11.6 · no fixed version yet

vgmstream AWB parser awb.c init_vgmstream_awb_memory divide by zero

• vgmstream
• Denial of service

libp2p: Unbounded RPC decode + synchronous subscription processing in @libp2p/floodsub allows unauthenticated DoS

• js-libp2p
• @libp2p floodsub
• Denial of service

Quarkus-websockets-next: denial of service (oom) in quarkus-websockets-next via unbounded message buffering

• Red Hat build of Quarkus 3.27.5.SP2
• Red Hat build of Quarkus 3.33.3.SP2
• Denial of service

AsyncSSH: asyncio event-loop freeze via SSH maximum packet size = 0 in SSH_MSG_CHANNEL_OPEN / OPEN_CONFIRMATION

• Denial of service

<2.24.0 · fixed in 2.24.0

RabbitMQ Java client has frame-level OOM: Math.min(maxInboundMessageBodySize, 0) defeats frame size enforcement

• Denial of service

<5.34.0 · fixed in 5.34.0

Vendure: Unauthenticated ReDoS via `regex` filter on SQLite backends

• Denial of service

<3.6.5 · fixed in 3.6.5

roxmltree through 0.21.1 Denial of Service via Quadratic Parsing

• RazrFalcon roxmltree
• Denial of service

InternLM LMDeploy through 0.17.0 Memory Exhaustion via Session ID Mismatch

• InternLM lmdeploy
• Denial of service

vgmstream mus_acm.c parse_mus resource consumption

• vgmstream
• Denial of service

InternLM LMDeploy through 0.17.0 Assertion Denial of Service

• InternLM lmdeploy
• Denial of service

Uncontrolled Recursion leading to Denial of Service in protobuf-javascript (google-protobuf)

• protobuf-javascript (aka google-protobuf npm package)
• Denial of service