Denial of service.

MariaDB Connector/J: Rogue server can crash the client during caching_sha2_password authentication

• mariadb-corporation mariadb-connector-j
• Denial of service
• CWE-129

Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDer

• digitalbazaar forge
• Denial of service

decode-uri-component vulnerable to denial of service via quadratic replacement of percent-encoded runs

• Denial of service

<0.5.1 · fixed in 0.5.1

Twisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset

• Denial of service

<26.10.0rc1 · fixed in 26.10.0rc1

zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed size

• Denial of service

>=5.1.0, <9.0.0 · fixed in 9.0.0

zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extraction

• Denial of service

>=1.3.0, <9.0.0 · fixed in 9.0.0

Crass: Non-ASCII characters cause superlinear CPU consumption

• Denial of service

<1.0.7 · fixed in 1.0.7

Crass: A large number of adjacent CSS comments can trigger a SystemStackError

• Denial of service

<1.0.7 · fixed in 1.0.7

Crass: Deeply nested CSS blocks and functions can trigger a SystemStackError or excessive memory usage

• Denial of service

<1.0.7 · fixed in 1.0.7

Daptin: ParseAcceptLanguage `_` separator bypass enables >250x CPU amplification via Accept-Language header in LanguageMiddleware

• Denial of service

<=0.12.15 · no fixed version yet

ImageMagick before 7.1.2-34 Stack Overflow in TIFF Decoder

• ImageMagick
• Denial of service

Crawl4AI before 0.9.5 Denial of Service via Unbounded CrawlerRunConfig Delay Fields

• unclecode crawl4ai
• Denial of service

Unauthenticated Ad Hoc Transfer Resource Exhaustion in Progress WS_FTP Server

• Progress Software WS_FTP Server
• Denial of service

Resource exhaustion from RPC sessions kept for requests to unknown interface

• RT-Labs P-Net
• Denial of service

Resource exhaustion from unreleased AR and RPC session on RPC requests with incorrect endianness

• RT-Labs P-Net
• Denial of service

Infinite loop when reading PDPortDataCheck record of subslot 0

• RT-Labs P-Net
• Denial of service

Langflow OSS is affected by multiple vulnerabilities

• IBM Langflow OSS
• Denial of service

flat through 6.0.1 Denial of Service via unflatten() Numeric Array Index Keys

• hughsk flat
• Denial of service

Python-Markdown 3.0 through 3.11.2 Denial of Service via Link Bracket Parsing

• Markdown
• Denial of service

Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation

• Red Hat Ceph Storage 9
• Red Hat Enterprise Linux 10
• Denial of service

Apache Qpid Proton C: Unbounded recursion in parsing AMQP message bodies can lead to crash

• Apache Software Foundation Apache Qpid Proton C
• Denial of service

nipy nibabel Header volumeutils.py array_from_file memory allocation

• nipy nibabel
• Denial of service

nschloe meshio VTK Reader _vtk_42.py memory allocation

• nschloe meshio
• Denial of service

Tornado: Event loop blocking and excess memory use from chunked bodies with many small chunks

• Denial of service

<6.6 · fixed in 6.6

Tornado: Quadratic CPU usage when parsing HTTP headers with line folding

• Denial of service

<6.6 · fixed in 6.6

knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion

• Denial of service

<0.0.0-20260531000007-52dbd5ece63f · fixed in 0.0.0-20260531000007-52dbd5ece63f

Seroval: fromJSON deserializer trusts node-supplied array length and sequence doneAt (unauthenticated event-loop DoS)

• Denial of service
• CWE-1284

<1.6.8 · fixed in 1.6.8

Seroval `fromJSON`/`fromCrossJSON` denial of service via unvalidated array node length

• Denial of service

>=1.4.1, <1.6.8 · fixed in 1.6.8

ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs

• Denial of service

<1.22.0 · fixed in 1.22.0

vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM engine

• Denial of service

<0.32.0 · fixed in 0.32.0

vLLM DeepSeek-OCR image processing vulnerable to denial of service

• Denial of service

>=0.11.1, <0.32.0 · fixed in 0.32.0

vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs

• Denial of service

>=0.16.0, <0.32.0 · fixed in 0.32.0

vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread pool

• Denial of service

>=0.19.0, <0.32.0 · fixed in 0.32.0

Go JOSE: Panics in JSON parsing

• Denial of service

<=3.0.5 · no fixed version yet

graphql-scalars PhoneNumber scalar is vulnerable to regular expression denial of service

• Denial of service

>=1.24.1, <2.0.1 · fixed in 2.0.1

python-markdown2 through 2.5.5 Denial of Service via Unclosed Inline Link Destinations

• trentm python-markdown2
• Denial of service

OvenMediaEngine through 0.21.0 OVT Relay DoS via Oversized payload_length

• OvenMediaLabs OvenMediaEngine
• Denial of service

Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566)

• Denial of service
• CWE-409

>=26.7.1, <26.10.1 · fixed in 26.10.1

RE2JS: Quadratic-time denial of service in re2js lookbehind matching

• Denial of service

>=2.2.0, <2.8.7 · fixed in 2.8.7

filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeout

• Denial of service

>=3.20.4, <4.2.1 · fixed in 4.2.1

opentelemetry-java: Quadratic CPU consumption in W3C tracestate parsing

• Denial of service

<1.67.0 · fixed in 1.67.0

EspoCRM before 9.3.11 and 10.0.8 Unauthenticated Denial of Service via Password-Redaction Regex

• espocrm
• Denial of service

n8n before 1.123.85, 2.43.5, and 2.44.1 ReDoS via Read/Write Files Node

• n8n
• Denial of service

MIME::Parser versions before 5.521 for Perl set no limit on the number of message parts by default, allowing memory exhaustion

• Denial of service
• CWE-1188

MIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated "=?" sequences in decode_mimewords

• Denial of service

MIME::Field::ParamVal versions before 5.521 for Perl allow CPU exhaustion via unclosed comments in header parameters

• Denial of service

MIME::Parser versions before 5.521 for Perl allow memory exhaustion via indented error messages from a truncated, deeply nested message

• Denial of service

PostgreSQL Anonymizer: Unbounded image-decode memory allocation (DoS) in anon.image_blur()

• DALIBO PostgreSQL Anonymizer
• Denial of service

PostgreSQL Anonymizer: Unbounded memory allocation (DoS) in range-based dummy functions

• DALIBO PostgreSQL Anonymizer
• Denial of service

HTTP::Body versions before 1.24_01 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies

• Denial of service

HTTP::Body versions before 1.24_01 for Perl allow CPU exhaustion via regex backtracking on the filename of a multipart upload

• Denial of service

HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies

• Denial of service

HTTP::Body versions before 1.23_01 for Perl allow memory exhaustion via an unbounded multipart part header block

• Denial of service

HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic rescanning of a multipart body with a missing or malformed boundary

• Denial of service

HTTP::Body versions before 1.23_01 for Perl allow memory and temporary file exhaustion via an unlimited number of form fields and multipart parts

• Denial of service

Server-side expression parser denial of service

• Grafana OSS
• Grafana Enterprise
• Denial of service
• CWE-20

Apache Kafka: Denial of service via unbounded memory allocation when decoding compressed record batches

• Apache Software Foundation Apache Kafka
• Denial of service
• CWE-1284

Apache Kafka: Denial of service in Kafka Streams and client deserializers via unbounded memory allocation

• Apache Software Foundation Apache Kafka
• Denial of service
• CWE-20

Apache Kafka: Kafka Streams StreamThread hang from integer overflow in stream-time punctuation

• Apache Software Foundation Apache Kafka
• Memory corruption
• Denial of service

Apache Kafka: Broker OutOfMemoryError via array allocation amplification in code-generated protocol readers

• Apache Software Foundation Apache Kafka
• Denial of service