Advisories · Weakness
Denial of service.
Crashes, hangs and resource exhaustion, ReDoS included. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 8.7 High
Uncontrolled recursion in the Ion reader in Amazon Ion Python
- Amazon ion-python
- Denial of service
- CVSS 7.5 High
Zod can exhaust memory while validating oversized constrained collections
- Denial of service
<4.6.6 · fixed in 4.6.6
GHSA-mrhx-c7xc-m3w5 · CVE-2023-54404 - CVSS 7.5 High
jackson-dataformats-binary: Smile parser does not enforce StreamReadConstraints.maxNameLength, enabling memory-exhaustion denial of service
- FasterXML jackson-dataformats-binary
- Denial of service
- CVSS 7.5 High
jackson-dataformats-binary: CBOR parser does not enforce StreamReadConstraints.maxNameLength, enabling memory-exhaustion denial of service
- FasterXML jackson-dataformats-binary
- Denial of service
- CVSS 4.3 Medium
Apache HTTP Server: mod_dav shared lock overflow
- Apache Software Foundation Apache HTTP Server
- Denial of service
- CVSS 7.5 High
jackson-core: UTF8DataInputJsonParser._reportInvalidToken() missing maxErrorTokenLength limit -> unbounded StringBuilder growth (DoS)
- Denial of service
>=2.19.0, <2.21.7 || >=2.22.0, <2.22.3 || >=2.8.0, <2.18.11 · fixed in 2.21.7, 2.22.3, 2.18.11
GHSA-7hhh-6rmp-j9qf · CVE-2026-89425 - CVSS 7.5 High
jackson-core: ReDoS: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber()
- Denial of service
>=2.17.0, <2.18.11 || >=2.19.0, <2.21.7 || >=2.22.0, <2.22.3 · fixed in 2.18.11, 2.21.7, 2.22.3
GHSA-p6pp-m3f8-5c89 · CVE-2026-89407 - CVSS 8.7 High
devalue: Residual sparse-array CPU amplification in uneval
- Denial of service
<5.9.3 · fixed in 5.9.3
GHSA-hx4r-w6wj-j8fg · CVE-2026-123566 - CVSS 8.7 High
devalue: Repeated primitive strings cause quadratic expansion in uneval
- Denial of service
- CWE-409
<5.9.3 · fixed in 5.9.3
GHSA-mcm9-63f2-9j32 · CVE-2026-123565 - CVSS 8.7 High
devalue: Sparse arrays emitted by uneval cause eager allocation when evaluated
- Denial of service
>=1.0.0, <5.9.3 · fixed in 5.9.3
GHSA-wf3x-273g-mvxv · CVE-2026-123564 - CVSS 8.7 High
devalue: Custom ArrayBuffer revivers can bypass typed-array allocation validation
- Denial of service
- Memory corruption
<5.9.3 · fixed in 5.9.3
GHSA-r9w8-h9r3-54w4 · CVE-2026-123563 - CVSS 8.7 High
pypdf: Possible long runtimes with large amount of embedded files
- Denial of service
<6.19.0 · fixed in 6.19.0
GHSA-v247-6f48-mgcj · CVE-2026-102999 - CVSS 8.7 High
pypdf: Possible long runtimes when generating appearance streams
- Denial of service
<6.19.0 · fixed in 6.19.0
GHSA-php9-fj8v-98fj · CVE-2026-102998 - CVSS 8.7 High
pypdf: Possible large memory usage when retrieving alphabetical page labels
- Denial of service
<6.19.0 · fixed in 6.19.0
GHSA-w23x-9jrw-r45c · CVE-2026-103000 - CVSS 8.7 High
pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up)
- Denial of service
<6.18.1 · fixed in 6.18.1
GHSA-jw7q-gvrg-4vj3 · CVE-2026-102997 - CVSS 8.7 High
pypdf: Possible large memory usage when parsing font data
- Denial of service
<6.18.1 · fixed in 6.18.1
GHSA-g9cg-prrw-2r8q · CVE-2026-102996 - CVSS 8.7 High
pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)
- Denial of service
<6.18.1 · fixed in 6.18.1
GHSA-fp3h-c4fm-7vvf · CVE-2026-102995 - CVSS 8.7 High
pypdf: Possible long runtimes/large memory usage when parsing indirect objects
- Denial of service
<6.18.0 · fixed in 6.18.0
GHSA-5jq2-8x83-x246 · CVE-2026-102994 - CVSS 8.7 High
pypdf: Possible large memory usage when retrieving Roman page labels
- Denial of service
<6.17.0 · fixed in 6.17.0
GHSA-qv6h-rv94-w285 · CVE-2026-102993 - CVSS 8.2 High
basic-ftp: Quadratic-time CPU denial of service in Client.list() Unix directory-listing parser (RE_LINE backtracking)
- Denial of service
<6.2.1 · fixed in 6.2.1
GHSA-c475-qrg2-pj4r · CVE-2026-102990 - CVSS 7.5 High
Imager versions before 1.037 for Perl exit the process reading a raw image with an out-of-range raw_datachannels value in i_readraw_wiol
- Memory corruption
- Denial of service
- CVSS 8.2 High
Apache APISIX: Batch response aggregation can exhaust worker memory
- Apache Software Foundation Apache APISIX
- Denial of service
- CVSS 6.5 Medium
Infinite loop in JetBrains YouTrack
- JetBrains YouTrack
- Denial of service
- CVSS 2.1 Low
BlueALSA bluealsad LC3plus Decoder Division-by-Zero DoS
- arkq bluez-alsa
- Denial of service
- CVSS 6.9 Medium
Tornado: Unbounded query-string argument count allows event-loop-stalling DoS
- Denial of service
<6.5.9 · fixed in 6.5.9
GHSA-3hv7-mjh2-fv65 · CVE-2026-103261 - CVSS 8.7 High
tornado: CurlAsyncHTTPClient enforces no response-size limit — decompression bomb drives unbounded memory accumulation to OOM
- Denial of service
- CWE-409
<6.5.9 · fixed in 6.5.9
GHSA-chx6-46f5-w4vp · CVE-2026-103262 - CVSS 6.2 Medium
pageant: Out-of-bounds read / oversized allocation in `pageant` MemoryMap::read via a malicious Pageant agent (Windows)
- Memory corruption
- Denial of service
<0.2.3 · fixed in 0.2.3
GHSA-g4mp-vgx3-xrvm · CVE-2026-102820 - CVSS 6.5 Medium
Russh: Unbounded memory exhaustion via CHANNEL_OPEN flood during a client-stalled rekey
- Denial of service
<0.63.2 · fixed in 0.63.2
GHSA-35g8-35p8-c8fw · CVE-2026-102821 - CVSS 8.7 High
GitPython: Denial of Service via catastrophic backtracking (ReDoS) in Actor.name_email_regex — commit author/committer field parsing
- Denial of service
<3.1.60 · fixed in 3.1.60
GHSA-g5vv-9gxw-82hx · CVE-2026-87819 - CVSS 5.3 Medium
Kiteworks Email Protection Gateway Uncontrolled Resource Consumption
- Kiteworks Email Protection Gateway
- Authentication bypass
- Denial of service
- CVSS 7.1 High
OpenClaw Windows Node before 2026.7.1 Denial of Service
- OpenClaw Windows Node
- Denial of service
- CVSS 8.7 High
restbed through 5.0.0 WebSocket Memory Exhaustion via Unbounded Frame Buffering
- Corvusoft restbed
- Denial of service
- CVSS 8.7 High
restbed through 5.0.0 Denial of Service via Unbounded Header Buffering
- Corvusoft restbed
- Denial of service
- CVSS 6.9 Medium
A flaw has been found in vllm-project vLLM up to 0.26.0. This vulnerability affects unknown code of the file rust/src/parser/src/unified/gemma4.rs of the component Gemma4UnifiedParser. Executing a ...
- Denial of service
<0.27.0 · fixed in 0.27.0
PYSEC-2026-4186 · CVE-2026-103241 - CVSS 5.5 Medium
Uncontrolled resource consumption in NVIDIA GeForce and others
- NVIDIA GeForce
- NVIDIA RTX, Quadro, NVS
- Denial of service
- CVSS 5.5 Medium
Uncontrolled resource consumption in NVIDIA GeForce and others
- NVIDIA GeForce
- NVIDIA RTX, Quadro, NVS
- Denial of service
- CVSS 5.5 Medium
Memory leak in NVIDIA GeForce and others
- NVIDIA GeForce
- NVIDIA RTX, Quadro, NVS
- Denial of service
- CVSS 5.5 Medium
Divide by zero in NVIDIA GeForce and others
- NVIDIA GeForce
- NVIDIA RTX, Quadro, NVS
- Denial of service
- CVSS 7.8 High
Improper resource shutdown in NVIDIA GeForce and others
- NVIDIA GeForce
- NVIDIA RTX, Quadro, NVS
- Denial of service
- CVSS 8.2 High
Angular Server-Side Rendering (SSR): Denial of Service via Numeric URL Matrix Parameters
- Denial of service
<=19.2.25 || >=20.0.0, <20.3.32 || >=21.0.0, <21.2.24 || >=22.0.0, <22.2.0 · fixed in 20.3.32, 21.2.24, 22.2.0
GHSA-ff3f-86qr-9cv3 · CVE-2026-101896 - CVSS 7.5 High
jackson-databind quadratic forward-reference completion
- Denial of service
>=2.19.0, <2.21.7 || >=2.5.0, <2.18.11 || >=2.22.0, <2.22.3 · fixed in 2.21.7, 2.18.11, 2.22.3
GHSA-cxp5-3px4-pw24 · CVE-2026-91777 - CVSS 7.5 High
jackson-databind retains every unknown raw type ID
- Denial of service
>=2.0.0, <2.18.11 || >=2.19.0, <2.21.7 || >=2.22.0, <2.22.3 · fixed in 2.18.11, 2.21.7, 2.22.3
GHSA-wv8q-qhhj-9h54 · CVE-2026-91776 - CVSS 8.7 High
league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scan
- Denial of service
>=2.0.0, <2.10.2 · fixed in 2.10.2
GHSA-3q6v-r5mr-hxv8 · CVE-2026-105830 - CVSS 6.5 Medium
Resource allocation without limits in JetBrains YouTrack
- JetBrains YouTrack
- Denial of service
- CVSS 5.9 Medium
Regular expression denial of service in JetBrains YouTrack
- JetBrains YouTrack
- Denial of service
- CVSS 8.2 High
Axios: ReDoS in fromDataURI data: URL parser freezes the Node event loop (DoS)
- Denial of service
>=1.16.1, <1.20.0 · fixed in 1.20.0
GHSA-c29m-xwm3-cm6r · CVE-2026-101903 - CVSS 8.2 High
Axios: ReDoS (O(N²)) in shouldBypassProxy host normalization, reachable via untrusted redirect Location
- Denial of service
>=1.15.0, <1.20.0 · fixed in 1.20.0
GHSA-mghh-pgcx-3jjj · CVE-2026-101906 - CVSS 8.2 High
Axios: Denial of Service via Unhandled 'error' Event in HTTP/2 ClientHttp2Session Initialization
- Denial of service
>=1.13.0, <1.20.0 · fixed in 1.20.0
GHSA-542g-h47m-68v8 · CVE-2026-101901 - CVSS 6.9 Medium
urllib3: Chunked Deflate streaming can enter an infinite loop
- Denial of service
>=2.6.2, <2.8.0 · fixed in 2.8.0
GHSA-gh4c-6fx4-qh6g · CVE-2026-97688 - CVSS 8.9 High
urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory
- Denial of service
>=1.10.3, <2.8.0 · fixed in 2.8.0
GHSA-vxq7-64xx-v4gw · CVE-2026-97689 - CVSS 6.5 Medium
Nest: Unbounded memory growth in the NestJS TCP microservice transport
- Denial of service
<11.2.5 || >=12.0.0, <12.0.3 · fixed in 11.2.5, 12.0.3
GHSA-96h4-vgxj-gvm2 - CVSS 8.7 High
Nodemailer addressparser: O(n^2) on comment-joined addresses enables a remote DoS (reachable via mailparser)
- Denial of service
>=9.1.0, <10.0.5 · fixed in 10.0.5
GHSA-prgh-xp8r-p3m5 · CVE-2026-90776 - CVSS 4.4 Medium
PyJWT: ReDoS vulnerability when calling the `is_pem_format` function.
- Denial of service
<2.14.0 · fixed in 2.14.0
GHSA-jwrc-g2q2-pq5p · CVE-2026-102270 - CVSS 5.3 Medium
GraphicsMagick WPG File wpg.c ExtractPostscript recursion
- GraphicsMagick
- Denial of service
- CVSS 5.3 Medium
WordPress Two Factor plugin <= 0.16.0 - Denial of Service Attack vulnerability
- WordPress.org Two Factor
- Denial of service
- CVSS 5.9 Medium
WordPress WP Store Locator plugin < 3.0.0 - Denial of Service Attack vulnerability
- Tijmen Smit WP Store Locator
- Denial of service
- CVSS 8.7 High
Uncontrolled Memory Allocation in CODESYS Gateway Client
- CODESYS Development System 3
- CODESYS Gateway
- Denial of service
- CVSS 6.5 Medium
Apache MINA SSHD: Memory exhaustion DoS via unbounded SCP command line read
- Apache Software Foundation Apache MINA SSHD
- Denial of service
- CVSS 7.5 High
Apache MINA SSHD: Memory exhaustion in SFTP client via unsolicited SFTP replies
- Apache Software Foundation Apache MINA SSHD
- Denial of service
- CVSS 6.5 Medium
Apache MINA SSHD: Memory exhaustion in SFTP v6 check-file-name/check-file-handle extension
- Apache Software Foundation Apache MINA SSHD
- Denial of service