Denial of service.

multer vulnerable to Denial of Service via orphaned disk writes on aborted uploads

• Denial of service
• CWE-459

>=2.2.0, <2.4.0 · fixed in 2.4.0

Angular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPE

• Denial of service

<=19.2.25 || >=20.0.0, <20.3.31 || >=21.0.0, <21.2.23 || >=22.0.0, <22.1.6 · fixed in 20.3.31, 21.2.23, 22.1.6

VxWorks 7 Memory allocation

• Wind River Systems Inc VxWorks 7
• Denial of service

jackson-databind: Duration XMLGregorianCalendar Unbounded Number Parse DoS

• Denial of service

>=2.14.0, <2.18.10 || >=2.19.0, <2.21.6 || >=2.22.0, <2.22.2 · fixed in 2.18.10, 2.21.6, 2.22.2

VxWorks Memory Allocation

• Wind River Inc VxWorks 7
• Denial of service

VxWorks 7 Memory Resource leak

• Wind River VxWorks 7
• Denial of service

ag-ui-protocol ag-ui HTTP JdkAgentHttpHandler.java readAllBytes resource consumption

• ag-ui
• Denial of service

Keycloak-services: keycloak-services: unbounded metric series creation via idp tag on broker login endpoint

• Red Hat build of Keycloak 26.6.8
• Red Hat Single Sign-On 7
• Denial of service

Denial of Service in mH-DEVELOPER

• F&F Filipowski mH-DEVELOPER
• Denial of service

Mint HTTP/2 client buffers oversized frames up to 16 MiB before enforcing max_frame_size

• Denial of service

>=0.1.0, <1.10.2 · fixed in 1.10.2

HPACK-indexed cookie fields in Mint HTTP/2 responses bypass max_header_list_size and exhaust client memory

• Denial of service

>=1.1.0, <1.10.2 · fixed in 1.10.2

Ricoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF HTTP Multipart Form-Data denial of service

• Ricoh SP 330DN
• Ricoh SP 221
• Denial of service

Trusted Domain Project OpenARC libopenarc arc-canon.c arc_parse_canon_t null pointer dereference

• Trusted Domain Project OpenARC
• Denial of service
• Memory corruption

Trusted Domain Project OpenDMARC SPF Parser opendmarc_spf.c opendmarc_spf_ipv6_explode null pointer dereference

• Trusted Domain Project OpenDMARC
• Denial of service
• Memory corruption

Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service

• Elasticsearch
• Denial of service

Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service

• Elasticsearch
• Denial of service

Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service

• Elasticsearch
• Denial of service

Uncontrolled Resource Consumption in Kibana Leading to denial of service

• Elastic Kibana
• Denial of service

Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service

• Elasticsearch
• Denial of service

Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service

• Elasticsearch
• Denial of service

Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service

• Elasticsearch
• Denial of service

Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service

• Elasticsearch
• Denial of service

vLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its documented media controls (the VLLM_MAX_AUDIO_CLIP_FILESIZE_MB compressed-audio size cap, default 25 M...

• Denial of service

<0.30.0 · fixed in 0.30.0

Netty HTTP/3 QPACK encoder-stream unbounded memory exhaustion DoS

• netty
• Denial of service

Netty HTTP/3 QPACK Prefixed Integer DoS via Unbounded Accumulation

• netty
• Denial of service

Netty before 4.2.18.Final QpackEncoder Unbounded Memory Retention

• netty
• Denial of service

vllm before 0.29.0 Denial of Service via Decoder Prompt Length Bypass

• vllm
• Denial of service

vLLM before 0.29.0 Resource Limit Bypass via Sampler Subclass

• vllm
• Denial of service

vllm before 0.29.0 Uncontrolled Resource Consumption via Audio Decoding

• vllm
• Denial of service

ClawHub before 8c2de6c506 Quota Exhaustion via Anonymous API

• openclaw clawhub
• Denial of service

OpenClaw before 2026.8.1 Denial of Service via Rate Limit

• OpenClaw
• Denial of service

OpenClaw before 2026.8.1 SMS Webhook Rate Limit Bypass

• OpenClaw
• Denial of service

OpenClaw before 2026.8.1 Resource Exhaustion via WebSocket Upgrade

• OpenClaw
• Denial of service

OpenClaw before 2026.8.1 Extraction Limit Bypass via tar.bz2

• OpenClaw
• Denial of service

OpenClaw before 2026.8.2 Denial of Service via Browser Relay

• OpenClaw
• Denial of service

SOAP: Unbounded Recursion in Server-Side cleanup_xml_node

• PHP
• Denial of service

Containerd has image-pull DoS via crafted OCI index graph amplification

• Denial of service

<1.7.36 · fixed in 1.7.36

Zammad: Denial of Service via OTRS Import Controller

• zammad
• Authentication bypass
• Denial of service

RabbitMQ: Consecutive topic wildcards cause combinatorial routing work

• rabbitmq-server
• Denial of service

RabbitMQ: Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service

• rabbitmq-server
• Denial of service

RabbitMQ: Atom exhaustion: to_atom on global-parameter :name

• rabbitmq-server
• Denial of service

RabbitMQ: Admin-only atom exhaustion: PUT /api/users tags list

• rabbitmq-server
• Denial of service

RabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expression

• rabbitmq-server
• Denial of service

RabbitMQ: Shovel Management Atom Exhaustion Allows Persistent Broker-Wide Denial of Service

• rabbitmq-server
• Denial of service

RabbitMQ: Atom exhaustion: OAuth2 JWT tag: scope values

• rabbitmq-server
• Denial of service

RabbitMQ: Atom table exhaustion via management API node field

• rabbitmq-server
• Denial of service

RabbitMQ: Stream-protocol frame length never validated against frame_max

• rabbitmq-server
• Denial of service

RabbitMQ: Web-STOMP unbounded pre-auth accumulation

• rabbitmq-server
• Denial of service

RabbitMQ: list_to_atom on auth_mechanism URI tokens in amqp_client

• rabbitmq-server
• Denial of service

Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication in the AMQP 0-8/0-9/0-9-1 decoder

• Apache Software Foundation Apache Qpid Broker-J
• Denial of service

Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication in the AMQP 0-10 decoder

• Apache Software Foundation Apache Qpid Broker-J
• Denial of service

Apache Qpid Broker-J: Unbounded type nesting can lead to stack overflow pre-authentication in AMQP 0-8/0-9/0-9-1 field-table processing

• Apache Software Foundation Apache Qpid Broker-J
• Denial of service

Regular Expression Denial of Service (ReDoS) in Search Query Predicates and REST Filter Endpoints in Gerrit Code Review

• Gerrit
• Denial of service

Denial of Service via Exponential Backtracking in ANTLR Search Query Parser in Gerrit Code Review

• Gerrit
• Denial of service

zbateson/mail-mime-parser has uncontrolled resource consumption (CPU/memory DoS) parsing untrusted MIME

• Denial of service

>=2.0.0, <3.0.6 || >=4.0.0, <4.0.2 · fixed in 3.0.6, 4.0.2

hpack: Unbounded variable integer decoding can cause run-away computation on malformed input

• Denial of service

<4.2.0 · fixed in 4.2.0

Docmost: Unbounded ZIP decompression (zip-bomb) in page import allows denial of service

• docmost
• Denial of service
• CWE-409

Wazuh Manager cluster header parsing allows pre-authentication memory exhaustion

• wazuh
• Denial of service

Wazuh: Unbounded Recursion in os_xml `_getattributes()` Causes analysisd Worker Thread Stack Exhaustion

• wazuh
• Denial of service

Habitica: Regex Injection / ReDoS in Member Search

• HabitRPG habitica
• Denial of service