Advisories · Weakness
Denial of service.
Crashes, hangs and resource exhaustion, ReDoS included. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 6.5 Medium
Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service
- Elasticsearch
- Denial of service
- CVSS 7.5 High
Gitea Actions memory exhaustion through large static matrices
- Gitea
- Denial of service
- CVSS 6.5 Medium
Gitea issue reference parsing CPU exhaustion
- Gitea
- Denial of service
- CVSS 6.1 Medium
Authenticated Local Denial-of-Service Vulnerability in the OnGuard Agent of ClearPass Policy Manager
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- Denial of service
- CVSS 4.7 Medium
Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Denial of service
- CVSS 8.7 High
Payload: ReDoS in Multipart Content-Type Validation
- Denial of service
>=3.0.0, <3.90.0 || >=4.0.0-canary.0, <4.0.0-canary.34 · fixed in 3.90.0, 4.0.0-canary.34
GHSA-2g7p-5934-q4w7 · CVE-2026-105854 - CVSS 5.3 Medium
A security flaw has been discovered in vllm-project vLLM up to 0.31.0. This impacts the function get_token_bin_counts_and_mask of the file vllm/model_executor/layers/utils.py of the component Penal...
- Denial of service
<0.32.0 · fixed in 0.32.0
PYSEC-2026-4319 · CVE-2026-105922 - CVSS 6.9 Medium
Denial-of-service vulnerability in ESET PROTECT On-Prem
- ESET spol. s.r.o ESET PROTECT On-Prem
- Denial of service
- CVSS 6.5 Medium
Microsoft UFO: Authenticated task-result request can deadlock UFO server session manager
- microsoft UFO
- Denial of service
- CVSS 4.3 Medium
Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)
- Denial of service
- CWE-409
>=2.45.0, <2.131.0 · fixed in 2.131.0
GHSA-3cr3-8m4c-fpxw · CVE-2026-105747 - CVSS 6.3 Medium
pbkdf2 rehashes long passwords on every iteration, enabling denial of service
- Denial of service
<3.1.7 · fixed in 3.1.7
GHSA-477h-4r7f-fvrx · CVE-2026-102414 - CVSS 6.9 Medium
Potential denial-of-service vulnerability in HTTP header parsing
- Django
- Denial of service
- CVSS 6.9 Medium
Potential denial-of-service vulnerability in get_supported_language_variant()
- Django
- Denial of service
- CVSS 6.5 Medium
WordPress WPBase Cache plugin <= 5.5.6 - Denial of Service Attack vulnerability
- baseapp WPBase Cache
- Denial of service
- CVSS 5.5 Medium
Sssd: sssd: denial of service via unbounded negative cache growth
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Denial of service
- CVSS 5.5 Medium
Sssd: sssd: denial of service via memory exhaustion in kcm responder
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Denial of service
- CVSS 5.5 Medium
Sssd: sssd: denial of service via memory exhaustion in autofs responder
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Denial of service
- CVSS 6.5 Medium
vLLM: Mirrored multimodal IPC caches desync after a rejected request — a later request reusing the same media hash trips a receiver assertion in the engine core
- Denial of service
<0.28.0 · fixed in 0.28.0
GHSA-ph3r-5jfg-f84f · CVE-2026-105753 - CVSS 5.3 Medium
vLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling does not reach
- Denial of service
>=0.24.0, <0.30.0 · fixed in 0.30.0
GHSA-x6mc-67gf-chw4 · CVE-2026-105758 - CVSS 5.3 Medium
vLLM: GLMGA video sampling permits request-driven CPU and memory exhaustion
- Denial of service
>=0.23.0rc2, <0.30.0 · fixed in 0.30.0
GHSA-58v5-2m8f-94pr · CVE-2026-105760 - CVSS 6.5 Medium
vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features
- Denial of service
- Broken access control
<0.30.0 · fixed in 0.30.0
GHSA-ph72-cqr5-qpp7 · CVE-2026-105754 - CVSS 5.3 Medium
smol-toml: Quadratic-time parse() from parseKey rescanning to end of document on each key line
- Denial of service
<1.9.0 · fixed in 1.9.0
GHSA-r4xh-jqrq-34v2 - CVSS 5.3 Medium
Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction
- Denial of service
>=6.7.0, <6.9.1 · fixed in 6.9.1
GHSA-54p9-h82j-f925 · CVE-2026-104874 - CVSS 7.5 High
Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserialization
- Denial of service
<1.6.3 · fixed in 1.6.3
GHSA-jp82-f5mq-hwhp · CVE-2026-104845 - CVSS 7.5 High
compression vulnerable to Denial of Service via memory leak on premature response close
- Denial of service
- CWE-459
<1.8.2 · fixed in 1.8.2
GHSA-vc2v-76pw-4v95 · CVE-2026-87776 - CVSS 5.9 Medium
vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the Rust frontend's track_http_metrics middleware records the raw HTTP method token as a Prometheus label for req...
- Denial of service
<0.30.0 · fixed in 0.30.0
GHSA-5fj9-pfhr-6j48 · CVE-2026-105759 - CVSS 6.9 Medium
hickory-resolver follows irrelevant CNAME records
- Denial of service
>=0.25.0, <0.26.2 · fixed in 0.26.2
GHSA-6f2x-v7q7-m7m5 · CVE-2026-123585 - CVSS 8.7 High
hickory-resolver: Unbounded TC-retry loop in `NameServerPool::try_send` (resource-exhaustion DoS)
- Denial of service
- CWE-406
>=0.26.0-beta.1, <0.26.2 · fixed in 0.26.2
GHSA-6w6g-hm98-mhgm · CVE-2026-123604 - CVSS 5.9 Medium
PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion
- Denial of service
<6.1.5 || >=7.0.0, <7.1.6 · fixed in 6.1.5, 7.1.6
GHSA-rj75-hqrm-r3gf · CVE-2026-104844 - CVSS 4.0, no score published
fast-copy: Stack exhaustion in fast-copy when copying deeply-nested values
- Denial of service
<2.2.0 || >=3.0.0, <3.1.0 || >=4.0.0, <4.1.0 · fixed in 2.2.0, 3.1.0, 4.1.0
GHSA-jggr-w7fw-pc2j - CVSS 6.2 Medium
stream-json: JSONC parser and verifier re-scan the whole accumulated comment on every input chunk
- Denial of service
<3.6.0 · fixed in 3.6.0
GHSA-hqr4-qq8f-hg3x · CVE-2026-104182 - CVSS 8.7 High
vm2: timeout Option Bypass via FinalizationRegistry Cleanup Callback (Unbounded Host Event-Loop Block)
- Denial of service
- CWE-841
<3.11.7 · fixed in 3.11.7
GHSA-r4fx-v8hh-22mv · CVE-2026-92942 - CVSS 5.3 Medium
Penpot: Repeated chunk index causes temporary-storage amplification
- penpot
- Denial of service
- CVSS 8.2 High
Filtering an :atom attribute with unsafe_to_atom? can exhaust the BEAM atom table in Ash
- Denial of service
>=3.5.1, <3.34.3 · fixed in 3.34.3
EEF-CVE-2026-94201 · CVE-2026-94201 - CVSS 6.5 Medium
Apache Struts: Unbounded request body read in the REST plugin
- Apache Software Foundation Apache Struts
- Denial of service
- CVSS 7.8 High
Uncontrolled resource consumption in Google Android
- Google Android
- Denial of service
- CVSS 6.8 Medium
Oversized Dockerfile or .dockerignore can exhaust buildkitd memory
- moby BuildKit
- Denial of service
- CVSS 5.4 Medium
Plane: Improper validation allows arbitrary modification of API token rate limits
- plane
- Denial of service
- CVSS 6.6 Medium
An empty <img> attribute value in styled text triggers a parser error that halts the device.
- Qt for MCUs
- Denial of service
- CWE-230
- CVSS 5.3 Medium
vgmstream Microsoft IMA Decoder ima_decoder.c decode_ms_ima divide by zero
- vgmstream
- Denial of service
- CVSS 5.3 Medium
Reachable assertion in MediaTek, Inc. MediaTek chipset
- MediaTek, Inc. MediaTek chipset
- Denial of service
- CVSS 7.7 High
An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded 512-bit RSA Private Key
- Denial of service
- CVSS 8.7 High
Mammoth.js 1.3.0 before 1.12.3 ReDoS via Style Map Tokeniser
- mwilliamson mammoth.js
- Denial of service
- CVSS 6.9 Medium
LaraDashboard 1.4.2 before 1.4.8 Resource Exhaustion via Password Recovery Endpoints
- laradashboard
- Denial of service
- CVSS 5.3 Medium
Legacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA provider
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Denial of service
- CVSS 7.5 High
WP Ultimate Review < 2.4.4 - Unauthenticated DoS via Unset Display Settings in wp-reviews Shortcode
- WP Ultimate Review
- Denial of service
- CVSS 7.5 High
WP Ultimate Review < 2.4.4 - Unauthenticated DoS via Non-Numeric Review Rating
- WP Ultimate Review
- Denial of service
- CVSS 7.5 High
probe-image-size: Quadratic-time Denial of Service in the SVG Parser
- Denial of service
<7.4.0 · fixed in 7.4.0
GHSA-gjj5-9665-rwrc · CVE-2026-104861 - CVSS 7.5 High
@fastify/busboy vulnerable to Denial of Service via oversized multipart boundary
- Denial of service
- CWE-1322
>=3.1.0, <3.2.1 · fixed in 3.2.1
GHSA-xjh9-v7x6-24jw · CVE-2026-19484 - CVSS 8.7 High
aws-smithy-json: Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated servers
- Denial of service
<0.62.7 · fixed in 0.62.7
GHSA-8ffr-xgwf-xj56 · CVE-2026-18140 - CVSS 8.2 High
figlet is vulnerable to denial of service via unbounded loop when whitespaceBreak is used with a small width
- Denial of service
<1.11.3 · fixed in 1.11.3
GHSA-62ch-8vmq-8xm7 · CVE-2026-96780 - CVSS 4.0 Medium
geopy: Regular Expression Denial of Service (ReDoS) in geopy.Point
- Denial of service
<2.5.0 · fixed in 2.5.0
GHSA-mhvh-fq92-pfmr · CVE-2026-77387 - CVSS 7.1 High
Dulwich: Infinite Loop Denial of Service (DoS) in Packfile Object Resolution
- Denial of service
<1.2.9 · fixed in 1.2.9
GHSA-35mr-4567-66vg · CVE-2026-114095 - CVSS 6.9 Medium
Apache Thrift: C++ THeaderTransport does not enforce configured maxFrameSize
- Apache Software Foundation Apache Thrift
- Denial of service
- CWE-409
- CVSS 7.1 High
Apache Thrift: Java TSaslTransport post-auth data-frame missing size limit
- Apache Software Foundation Apache Thrift
- Denial of service
- CVSS 8.7 High
Apache Thrift: Unauthenticated single-packet crash of Go Thrift servers via the THeader transform count
- Apache Software Foundation Apache Thrift
- Denial of service
- CVSS 8.2 High
Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TJSONProtocol accepts a single JSON string/number exceeding the configured size limit (multi-language)
- Apache Software Foundation Apache Thrift
- Denial of service
- CVSS 6.9 Medium
Apache Thrift: Buffered transport reads are not accounted against MaxMessageSize
- Apache Software Foundation Apache Thrift
- Denial of service
- CVSS 8.7 High
Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: skip() does not apply the recursion limit (Python accelerator, PHP, Perl, Lua, Smalltalk, OCaml)
- Apache Software Foundation Apache Thrift
- Denial of service
- CVSS 9.2 CriticalCritical · CVSS 9+
Apache Thrift: C++ THttpTransport grows its line buffer without bound
- Apache Software Foundation Apache Thrift
- Memory corruption
- Denial of service