Denial of service.

imagecodecs 2026.3.6 through 2026.10.10 Infinite Loop via ccittfax4_decode()

• cgohlke imagecodecs
• Denial of service

Apache Thrift: Java TProtocolUtil.skip() does not limit the recursion depth by default

• Apache Software Foundation Apache Thrift
• Denial of service

Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Denial of service

pypdf has possible infinite loop when hitting EOF in standard xref table during trailer search

• Denial of service

<6.21.4 · fixed in 6.21.4

pypdf has possible large memory usage when parsing page tree

• Denial of service

<6.21.4 · fixed in 6.21.4

pypdf has possible infinite loop when cloning dictionaries

• Denial of service

<6.21.4 · fixed in 6.21.4

joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service

• Denial of service

>=16.0.0, <=17.1.1 · no fixed version yet

@hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of service

• Denial of service

>=3.0.6, <=4.0.6 · no fixed version yet

Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal

• Denial of service

>=9.0.0, <14.0.2 · fixed in 14.0.2

pypdf has possible long runtimes when retrieving page labels

• Denial of service

<6.21.3 · fixed in 6.21.3

pypdf has possible large memory usage for exceptions in strict mode

• Denial of service
• CWE-405

<6.21.3 · fixed in 6.21.3

pypdf has possible long runtimes/large memory usage for encrypted PDF files

• Denial of service

<6.21.3 · fixed in 6.21.3

pypdf has possible large memory usage when parsing cross-reference streams

• Denial of service

<6.21.3 · fixed in 6.21.3

pyasn1 has quadratic CPU consumption in constructed BIT STRING decoding

• Denial of service

<0.6.5 · fixed in 0.6.5

pyasn1 has quadratic-complexity denial of service in binary REAL decoding

• Denial of service

<0.6.5 · fixed in 0.6.5

pyasn1 has quadratic-time denial of service in constructed string and indefinite-length ANY decoding

• Denial of service

<0.6.5 · fixed in 0.6.5

pyasn1 has quadratic CPU use in schemaless BER/CER/DER container decoding

• Denial of service

>=0.3.3, <0.6.5 · fixed in 0.6.5

Forge: Regular expression denial of service in PEM decoding (pem.decode)

• Denial of service

<1.4.1 · fixed in 1.4.1

Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891)

• Denial of service

<1.4.1 · fixed in 1.4.1

Forge: Denial of service in TLS record processing via call stack exhaustion

• Denial of service

<1.4.1 · fixed in 1.4.1

MariaDB Connector/J: Rogue server can drive large heap allocations from server-declared lengths in OK packets

• Denial of service
• CWE-130

>=3.0.0, <3.3.7 || >=3.4.0, <3.4.5 || >=3.5.0, <3.5.11 · fixed in 3.3.7, 3.4.5, 3.5.11

MariaDB Connector/J: XA recover() trusted server-supplied gtrid and bqual lengths

• Denial of service
• CWE-20

>=3.0.0, <3.3.7 || >=3.4.0, <3.4.5 || >=3.5.0, <3.5.11 · fixed in 3.3.7, 3.4.5, 3.5.11

pageant: unbounded frame buffering on peer-controlled 4-byte length prefix (memory-exhaustion DoS)

• Denial of service

>=0.2.0, <0.2.5 · fixed in 0.2.5

russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang)

• Denial of service

>=0.60.0, <0.65 · fixed in 0.65

russh's SSH agent server is susceptible to unbound allocations via repeated SSH_AGENT_CONSTRAIN_CONFIRM messages

• Denial of service

<0.65.0 · fixed in 0.65.0

russh's SSH client is susceptible to unbounded allocations via EXT_INFO packets

• Denial of service

<0.65 · fixed in 0.65

GraphQL-core has denial of service via memory leak in aborted validations

• Denial of service

>=3.3.0a3, <3.3.1 · fixed in 3.3.1

imgproxy has unbounded memory allocation in ICO loader that allows unauthenticated memory-exhaustion DoS via crafted data_size field

• Denial of service

>=3.3.0, <4.0.16 · fixed in 4.0.16

anacrolix torrent has unbounded recursion in the bencode decoder that causes stack-overflow crash and CPU-exhaustion DoS

• Denial of service

<1.61.1-0.20260911233437-76452a2c8a2f · fixed in 1.61.1-0.20260911233437-76452a2c8a2f

Aedes has Uncaught Exception and Uncontrolled Resource Consumption

• moscajs aedes
• Denial of service
• CWE-248

ag-psd has uncontrolled memory allocation via declared PSD dimensions (DoS)

• Agamnentzar ag-psd
• Denial of service

LibreDWG: unbounded allocation in pre-R13 DWG entity decoding

• libredwg
• Denial of service

LibreDWG: excessive class-decoding reallocation in R13-R2000 DWG parsing

• libredwg
• Denial of service

Ring's nested-params middleware has inefficient regular expression complexity

• ring
• Denial of service

Tesseract: Crafted LSTM model (`WeightMatrix` mode byte) triggers `ASSERT_HOST` abort in `WeightMatrix::DeSerializeOld` under `FAST_FLOAT` — Denial of Service

• tesseract
• Denial of service
• CWE-20

Pistache: DoS via stack exhaustion in REST router path normalization (regex_replace on long slash runs)

• pistache
• Denial of service

VoiceSentinel: Race condition in report buffer cleanup can corrupt transcript data and cause unbounded disk growth

• jackh54 VoiceSentinel
• Race condition
• Denial of service

Axigen Mail Server before 10.5.69, 10.6.40, and 10.7.2 Unauthenticated DoS via Nested Requests

• Axigen Mail Server
• Denial of service

Wekan: ReDoS via Unescaped User Input in RegExp

• wekan
• Denial of service

WPGraphQL before 2.24.1 Email Flooding via Aliased sendPasswordResetEmail Mutations

• WPGraphQL
• Denial of service

WPGraphQL Smart Cache before 2.3.3 Unbounded Persisted Query Storage DoS

• WPGraphQL Smart Cache
• Denial of service

joserfc: Compact JWS size guard allocates attacker-controlled segments before rejection

• Denial of service

<1.7.6 · fixed in 1.7.6

joserfc: Unbounded JWE General JSON `recipients` Array Leads to CPU Exhaustion (DoS) via Repeated RSA Private-Key Decryption

• Denial of service

<1.7.5 · fixed in 1.7.5

Org.infinispan/infinispan-query: infinispan: deeply nested ickle queries can trigger a stackoverflowerror

• Red Hat build of Apache Camel 4 for Quarkus 3
• Red Hat Data Grid 8
• Denial of service

CallBackery versions before 0.62.0 for Perl allow denial of service via the request path interpolated as a regular expression under CGI, FastCGI and PSGI

• Denial of service

Business::GoCardless versions before 1.01 for Perl allow memory exhaustion by flattening legacy webhook payloads before checking their signature

• Denial of service

Starlet versions from 0.20 before 0.33 for Perl allow memory exhaustion via unbounded buffering when decoding chunked request bodies

• Denial of service

Starlet versions from 0.20 before 0.33 for Perl allow CPU exhaustion via regular expression backtracking when decoding chunked request bodies

• Denial of service

Starlet versions before 0.33 for Perl allow a request declaring a large Content-Length to kill a worker by exhausting memory

• Denial of service

DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds

• Denial of service

SQLite before 3.54.0 Stack Exhaustion via countOfViewOptimization() in VALUES Clause

• SQLite
• Denial of service

SQLite before 3.54.0 Stack Exhaustion via COLLATE Operator Chain

• SQLite
• Denial of service

SQLite before 3.54.0 Stack Exhaustion via CTE Chain in selectExpander()

• SQLite
• Denial of service

Unbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixir

• elixir
• Denial of service
• CWE-1284

DoS Vulnerability in UAA Related to JWKS URI Handling

• Cloud Foundry UAA
• Cloud Foundry cf-deployment
• Denial of service

Glib-networking: unbounded tls 1.3 session ticket queue growth in glib-networking allows remote denial of service

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Examples for Developers - Less critical - Allocation of resources without limits or throttling - SA-CONTRIB-2026-215

• Drupal Examples for Developers
• Denial of service

Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.

• Denial of service

Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit

• Denial of service

An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service (DoS) via a crafted POST request to the GraphQL endpoint

• Denial of service