Denial of service.

Apache PLC4X, Apache PLC4X, Apache PLC4X, Apache PLC4X: ADS discovery accepts spoofed responses and derives the connection target from them

• Apache Software Foundation Apache PLC4X
• Denial of service
• CWE-129

Apache PLC4X: Go binding: unbounded allocation and framing failures on wire-controlled lengths

• Apache Software Foundation Apache PLC4X
• Memory corruption
• Denial of service

Apache PLC4X, Apache PLC4X: Pre-authentication resource exhaustion in the OPC UA driver and the Java SPI parser

• Apache Software Foundation Apache PLC4X
• Denial of service

Reachable assertion in Pexip Infinity

• Pexip Infinity
• Denial of service

Reachable assertion in Pexip Infinity

• Pexip Infinity
• Denial of service

Resource allocation without limits in Pexip Infinity

• Pexip Infinity
• Denial of service

Resource allocation without limits in Pexip Infinity

• Pexip Infinity
• Denial of service

Reachable assertion in Pexip Infinity

• Pexip Infinity
• Denial of service

Reachable assertion in Pexip Infinity

• Pexip Infinity
• Denial of service

Uncontrolled recursion in gosub-io gosub-engine

• gosub-io gosub-engine
• Denial of service

Nest: Remote process termination via a deeply nested microservice message pattern

• Denial of service
• CWE-248

<11.2.4 || >=12.0.0, <12.0.2 · fixed in 11.2.4, 12.0.2

ip-address: Address6 builds a parse diagnostic proportional to the input with no length bound, allowing a single long string to stall or crash the process

• Denial of service

<10.7.1 · fixed in 10.7.1

brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service

• Denial of service

<1.1.21 || >=2.0.0, <2.1.7 || >=3.0.0, <3.0.9 || >=4.0.0, <5.0.12 · fixed in 1.1.21, 2.1.7, 3.0.9, 5.0.12

brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion

• Denial of service

<1.1.20 || >=2.0.0, <2.1.6 || >=3.0.0, <3.0.8 || >=4.0.0, <5.0.11 · fixed in 1.1.20, 2.1.6, 3.0.8, 5.0.11

brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion

• Denial of service

<1.1.19 || >=2.0.0, <2.1.5 || >=3.0.0, <3.0.7 || >=4.0.0, <5.0.10 · fixed in 1.1.19, 2.1.5, 3.0.7, 5.0.10

Nodemailer: Quadratic backtracking in the addressparser free-text fallback allows remote denial of service

• Denial of service

<10.0.6 · fixed in 10.0.6

PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token header

• Denial of service

>=2.13.0, <2.14.0 · fixed in 2.14.0

PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)

• Denial of service

<2.14.0 · fixed in 2.14.0

adm-zip: getDataAsync() bypasses the maxOutputLength size guard enforced by the synchronous getData() path

• Denial of service

<0.6.1 · fixed in 0.6.1

adm-zip: Unhandled error event in async DEFLATE decompression crashes Node.js process (DoS)

• Denial of service
• CWE-248

<0.6.1 · fixed in 0.6.1

Fireware OS Resource Exhaustion in Login Process Allows Denial of Service

• WatchGuard Fireware OS
• Denial of service
• CWE-409

Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant B

• WatchGuard Fireware OS
• Information disclosure
• Denial of service

Fireware OS Uncontrolled Resource Consumption in Diagnostic Tasks Allows Denial of Service

• WatchGuard Fireware OS
• Denial of service

anchorme through 3.0.8 Regular Expression Denial of Service

• alexcorvi anchorme
• Denial of service

LightLLM through 1.2.0 Unauthenticated Memory Exhaustion via NCCL Control Channel set_value

• ModelTC LightLLM
• Denial of service

iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS

• esnet iperf3
• Denial of service

Authenticated Denial-of-Service Vulnerability in HPE Networking Instant On API Endpoint

• Hewlett Packard Enterprise (HPE) Instant ON
• Denial of service

Nodemailer: Nested structured recipient arrays bypass the parser depth limit and cause stack exhaustion DoS

• Denial of service

<10.0.2 · fixed in 10.0.2

undici vulnerable to Denial of Service via orphaned RetryHandler response body

• Denial of service

>=7.11.0, <7.29.1 || >=8.0.0, <8.10.2 · fixed in 7.29.1, 8.10.2

undici vulnerable to Denial of Service via unbounded decompression of compressed responses

• Denial of service

>=7.15.0, <7.29.1 || >=8.0.0, <8.10.2 · fixed in 7.29.1, 8.10.2

joi: Quadratic regular-expression backtracking in `Joi.string().isoDate()`

• Denial of service

>=17.2.0, <17.13.7 || >=18.0.0, <18.2.6 · fixed in 17.13.7, 18.2.6

OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full

• Denial of service

<0.21.0 · fixed in 0.21.0

OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncation

• Denial of service
• CWE-176

>=1.10.0, <1.33.0 · fixed in 1.33.0

markdown-it linkify: true has two quadratic paths, so a few hundred KB of markdown blocks the event loop for tens of seconds

• Denial of service

<14.3.1 || >=15.0.0, <15.0.1 · fixed in 14.3.1, 15.0.1

js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources

• Denial of service

>=5.0.0, <5.4.1 · fixed in 5.4.1

Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Read

• Eclipse Foundation Eclipse ThreadX NetX Duo
• Memory corruption
• Denial of service

NULL Pointer Dereference on MSRP Attribute Table Exhaustion

• Eclipse Foundation Eclipse ThreadX NetX Duo
• Memory corruption
• Denial of service

A malformed Session header permanently orphans one packet-pool block per RTSP request

• Eclipse Foundation Eclipse ThreadX NetX Duo
• Denial of service
• CWE-755

ICMPv6 option validation accepts a trailing byte residue, sending the Router Advertisement, Neighbor Solicitation, Neighbor Advertisement and Redirect option walkers past the packet or into a permane…

• Eclipse Foundation Eclipse ThreadX NetX Duo
• Memory corruption
• Denial of service

Unbounded DATA datagram in the NetX Duo TFTP server causes an out-of-bounds read and a permanent stall

• Eclipse Foundation Eclipse ThreadX NetX Duo
• Memory corruption
• Denial of service

Memory leak in Eclipse Foundation NetX Duo

• Eclipse Foundation NetX Duo
• Denial of service

PX4 Autopilot through 1.17.0 Stack Exhaustion via tests file2 Command

• PX4-Autopilot
• Denial of service

DataTransfer depends on phpspreadsheet version vulnerable to CVE-2026-59933 (XLS/OLE memory exhaustion)

• Wikimedia Foundation Mediawiki - DataTransfer Extension
• Denial of service
• CWE-1395

QUIC: Unbounded RETIRE_CONNECTION_ID Backlog

• OpenSSL
• Denial of service

QUIC Connection-Level Flow Control is Not Enforced for Streams

• OpenSSL
• Denial of service

QUIC STREAM Fragment Metadata DoS

• OpenSSL
• Denial of service

Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC

• OpenSSL
• Denial of service

Excessive Memory Allocation in Relative CRLDP Processing

• OpenSSL
• Denial of service

Denial-of-service in the Storage: StorageManager component

• Mozilla Firefox
• Mozilla Thunderbird
• Denial of service

Denial-of-service in the Graphics component

• Mozilla Firefox
• Mozilla Thunderbird
• Denial of service

Denial-of-service in the Networking component

• Mozilla Thunderbird
• Mozilla Firefox
• Denial of service

Apache XMLSchema: Denial of service through cyclic schema definitions in the schema walker

• Apache Software Foundation Apache XMLSchema
• Denial of service

Apache XMLSchema: Denial of service through deeply nested schema structures

• Apache Software Foundation Apache XMLSchema
• Denial of service

Apache XMLSchema: Denial of service through unbounded recursion when resolving schema imports and includes

• Apache Software Foundation Apache XMLSchema
• Denial of service

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

• Wireshark
• Denial of service

Missing Release of Memory after Effective Lifetime in Wireshark

• Wireshark
• Denial of service

Reachable Assertion in Wireshark

• Wireshark
• Denial of service

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

• Wireshark
• Denial of service

Dash: dash: super-polynomial backtracking in pmatch when libc fnmatch is disabled

• Red Hat Enterprise Linux 6
• Denial of service

crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains polynomial-time regular expression denial-of-service conditions in think-tag response parsing on Ruby 3.1.x.

• Denial of service