Denial of service.

Junos OS Evolved: An attacker causes na-grpcd to crash when gRPC telemetry is enabled

• Juniper Networks Junos OS Evolved
• Denial of service

Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP link protection is enabled

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Denial of service

Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Denial of service

Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Denial of service

Junos OS and Junos OS Evolved: An attacker causes routing protocol daemon crash when OSPFv3 is enabled

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Denial of service

Junos OS: SRX Series: An attacker causes data-plane denial of service when chassis-cluster high availability is enabled

• Juniper Networks Junos OS
• Denial of service

Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when labeled-unicast aggregate-label is configured

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Denial of service

Junos OS and Junos OS Evolved: An crafted LDP message causes an rpd crash when LDP is enabled

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Denial of service

Junos OS and Junos OS Evolved: An eBGP peer causes an rpd crash when VPLS automatic site-ID collision resolution is used

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Denial of service

Junos OS and Junos OS Evolved: An inconsistent ICCP peer message causes an l2ald crash when MC-LAG is configured

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Denial of service

Junos OS and Junos OS Evolved: An attacker causes an rpd crash when inter-AS MVPN ingress replication is used

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Denial of service

Junos OS and Junos OS Evolved: Specific RSVP packet causes an rpd crash when associated bidirectional LSP is enabled

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Denial of service

Junos OS: SRX4000 Series, SRX5000 Series and MX Series with SPC3: With application services configured, high session churn causes memory leak which will ultimately impact traffic

• Juniper Networks Junos OS
• Denial of service

F´: SpacePacketDeframer Small Packet Assertion DoS

• nasa fprime
• Denial of service

Junos OS: A remote TWAMP peer causes rmopd service disruption when TWAMP-Control is used

• Juniper Networks Junos OS
• Denial of service

Junos OS: MX Series: An unauthenticated network attacker causes an rpd crash when HFRR link protection is used

• Juniper Networks Junos OS
• Denial of service

RabbitMQ AMQP 1.0 parser: amplification memory-exhaustion DoS via zero-width array aggregation

• rabbitmq-server
• Denial of service

Dpdk: dpdk: missing memory size validation before mmap in vhost memory region setup

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Denial of service

NGINX ngx_http_js_module vulnerability

• F5 NGINX JavaScript
• Denial of service

Gitea Maven checksum upload quota bypass and memory exhaustion

• Gitea
• Denial of service

Gitea repository initialization resource exhaustion

• Gitea
• Denial of service

Gitea Swift package manifest memory exhaustion

• Gitea
• Denial of service

Gitea Alpine package parsing memory exhaustion

• Gitea
• Denial of service

Gitea GitLab migration denial of service

• Gitea
• Denial of service

Gitea OneDev migration denial of service

• Gitea
• Denial of service

libschrift through 0.10.2 Divide by Zero via unitsPerEm in draw_line

• tomolt libschrift
• Denial of service

quirc through 1.2 Denial of Service via find_alignment_pattern Spiral Search

• dlbeer quirc
• Denial of service

BottleCRM 0.45 through 1.14.5 Memory Exhaustion via Contact and Case CSV Import

• MicroPyramid BottleCRM
• Denial of service

BottleCRM 0.43 through 1.14.5 ReDoS via Case Routing Rule Regex

• MicroPyramid BottleCRM
• Denial of service

OW2 ASM 1.4.3 before 9.11 Excessive Resource Consumption via Analyzer

• OW2 ASM
• Denial of service

OW2 ASM 3.0 before 9.11 Exponential Memory Allocation in JSRInlinerAdapter

• OW2 ASM
• Denial of service

OW2 ASM 3.0 before 9.11 Uncontrolled Recursion in SignatureReader

• OW2 ASM
• Denial of service

OW2 ASM 3.1 before 9.11 Excessive Memory Allocation in AdviceAdapter

• OW2 ASM
• Denial of service

OW2 ASM 3.0 before 9.11 Excessive CPU Consumption via ClassWriter COMPUTE_FRAMES

• OW2 ASM
• Denial of service

OW2 ASM 3.0 before 9.11 Quadratic Memory Allocation via Exception Handlers

• OW2 ASM
• Denial of service

OW2 ASM 3.0 before 9.11 Uncontrolled Recursion via ClassWriter.replaceAsmInstructions()

• OW2 ASM
• Denial of service

OW2 ASM 3.0 before 9.11 Excessive Memory Allocation via Multiple RET Instructions

• OW2 ASM
• Denial of service

OW2 ASM 5.0 before 9.11 Excessive Memory Allocation via BootstrapMethods Attribute

• OW2 ASM
• Denial of service

L-SMASH through 2.14.5 Infinite Loop in VC-1 Importer Probe

• l-smash
• Denial of service

Stack overflow dropping a long chain of recursive types

• Denial of service

Published by the maintainers · not yet reviewed by GitHub

>=42.0.0, <48.0.6 || >=49.0.0, <49.0.3 · fixed in 48.0.6, 49.0.3

Component-model handle tables are capped only per instance and charged to no limit

• Denial of service

Published by the maintainers · not yet reviewed by GitHub

>=0.0.0-0, <36.0.18 || >=37.0.0, <48.0.6 || >=49.0.0, <49.0.3 · fixed in 36.0.18, 48.0.6, 49.0.3

Panic when invoking an async-lifted function via `call`

• Denial of service

Published by the maintainers · not yet reviewed by GitHub

>=46.0.0, <48.0.6 || >=49.0.0, <49.0.3 · fixed in 48.0.6, 49.0.3

Panic when pending calls are run after a trap

• Denial of service

Published by the maintainers · not yet reviewed by GitHub

>=46.0.0, <48.0.6 || >=49.0.0, <49.0.3 · fixed in 48.0.6, 49.0.3

Brotli certificate decompression can allocate up to 1 GiB before authentication

• Denial of service

>=0.23.9, <0.23.46 · fixed in 0.23.46

Panic viewing component model stream or future as the wrong type

• Denial of service

Published by the maintainers · not yet reviewed by GitHub

>=46.0.0, <48.0.6 || >=49.0.0, <49.0.3 · fixed in 48.0.6, 49.0.3

Overlapping string transcode in a fused adapter can panic

• Denial of service

Published by the maintainers · not yet reviewed by GitHub

>=49.0.0, <49.0.3 · fixed in 49.0.3

Host panic when component `call_async` is cancelled under some conditions

• Denial of service

Published by the maintainers · not yet reviewed by GitHub

>=46.0.0, <48.0.6 || >=49.0.0, <49.0.3 · fixed in 48.0.6, 49.0.3

CVE-2026-109449: Unbounded Nesting in the Expression Parser Lets Untrusted Expressions Crash the Process

• Denial of service

>=2.4.0, <3.0.0 || >=3.0.0, <4.0.0 || >=4.0.0, <5.0.0 || >=5.0.0, <5.1.0 || >=5.1.0, <5.2.0 || >=5.2.0, <5.3.0 || >=5.3.0, <5.4.0 || >=5.4.0, <5.4.54 || >=6.0.0, <6.1.0 || >=6.1.0, <6.2.0 || >=6.2.0, <6.3.0 || >=6.3.0, <6.4.0 || >=6.4.0, <6.4.48 || >=7.0.0, <7.1.0 || >=7.1.0, <7.2.0 || >=7.2.0, <7.3.0 || >=7.3.0, <7.4.0 || >=7.4.0, <7.4.21 || >=8.0.0, <8.1.0 || >=8.1.0, <8.1.9 · fixed in 3.0.0, 4.0.0, 5.0.0, 5.1.0, 5.2.0, 5.3.0, 5.4.0, 5.4.54, 6.1.0, 6.2.0, 6.3.0, 6.4.0, 6.4.48, 7.1.0, 7.2.0, 7.3.0, 7.4.0, 7.4.21, 8.1.0, 8.1.9

containerd: daemon crash when pulling an image with a crafted Content-Length header

• Denial of service
• CWE-20

Published by the maintainers · not yet reviewed by GitHub

>=2.2.0, <2.2.10 || >=2.3.0, <2.3.7 || >=2.4.0, <2.4.2 · fixed in 2.2.10, 2.3.7, 2.4.2

containerd: host disk exhaustion when pulling an image with an unbounded layer stream

• Denial of service

Published by the maintainers · not yet reviewed by GitHub

>=2.0.0, <2.0.14 || >=2.2.0, <2.2.10 || >=2.3.0, <2.3.7 || >=2.4.0, <2.4.2 · fixed in 2.0.14, 2.2.10, 2.3.7, 2.4.2

containerd CRI plugin: mount and snapshot leak when container checkpoint restore fails

• Denial of service

Published by the maintainers · not yet reviewed by GitHub

>=2.2.0, <2.2.10 || >=2.3.0, <2.3.7 · fixed in 2.2.10, 2.3.7

Deadlock in OpenVPN ovpn-dco-win

• OpenVPN ovpn-dco-win
• Denial of service
• CWE-413

Denial of Service via sending bogus X.509 certificates

• libreswan
• Denial of service

CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)

• Adobe Content Credentials Rust SDK
• Adobe C2PA Tool
• Denial of service

CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)

• Adobe Content Credentials Rust SDK
• Adobe C2PA Tool
• Denial of service

CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)

• Adobe Content Credentials Rust SDK
• Adobe C2PA Tool
• Denial of service

CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)

• Adobe Content Credentials Rust SDK
• Adobe C2PA Tool
• Denial of service

CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)

• Adobe Content Credentials Rust SDK
• Adobe C2PA Tool
• Denial of service

Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service Vulnerability

• Denial of service

>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 · fixed in 8.0.32, 9.0.21, 10.0.13

Microsoft Security Advisory CVE-2026-96959 - .NET and Visual Studio Denial of Service Vulnerability

• Denial of service

>=8.0.0, <8.0.5 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.5, 9.0.21, 10.0.13, 11.0.0-rc.2