APM Server 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-236)

Allocation of Resources Without Limits or Throttling in APM Server Leading to Denial of Service Allocation of Resources Without Limits or Throttling CWE-770 in APM Server can lead to denial of service via Oversized Serialized Data Payloads CAPEC-231. An attacker who can send OpenTelemetry OTLP da...

CLEANSTART-2026-BX48253 Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4

Security vulnerability affects the sonarqube package. Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4...

Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in Bouncy Castle for Java

Summary SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in Bouncy Castle for Java. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-97873 DESCRIPTION: In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy...

CLEANSTART-2026-PW65051 Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4

CVE-2026-102554 affects multiple packages. Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4. See references for individual vulnerability details...

cve

CVE Problem statement: Stackoverflow I'm trying to build by project in Docker, So i'm using Docker Desktop to build my project, when i build the image i get this as one of my vulnerabilities CVE-2024-26308 CWE-770 7.5 H Allocation of Resources Without Limits or Throttling vulnerability in Apache...

Security Bulletin: Multiple Vulnerabilities affect IBM License Metric Tool v9

Summary Multiple vulnerabilities have been addressed in components used by IBM License Metric Tool Vulnerability Details CVEID:CVE-2026-17508 DESCRIPTION: In Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with cost parameters taken from the...

Security Bulletin: Multiple Vulnerabilities affect VM Manager Tool and Scans Relay as part of IBM License Metric Tool v9 Software as a Service

Summary Multiple vulnerabilities have been addressed in components of VM Manager Tool and Scans Relay as part of IBM License Metric Tool v9 Software as a Service Vulnerability Details CVEID:CVE-2026-17508 DESCRIPTION: In Bouncy Castle for Java before 1.86, several password-based key derivation...

CLEANSTART-2026-SE76875 Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to Denial of Service via Excessive Allocation (CAPEC-130)

Security vulnerability affects the sonarqube package. Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to Denial of Service via Excessive Allocation CAPEC-130...

CLEANSTART-2026-EH44989 Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4

Security vulnerability affects the sonarqube package. Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4...

CLEANSTART-2026-UK97586 Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4

Security vulnerability affects the sonarqube package. Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4...

Amazon Linux 2023 : ecs-service-connect-agent (ALAS2023-2026-3355)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3355 advisory. Issue summary: A certificate with many nameRelativeToCRLIssuer CRLdistribution points causes disproportionate heap growth when OpenSSL cachesX.509 extensions. Impact summary: Receiving a crafted...

Amazon Linux 2 : ecs-service-connect-agent (ALASECS-2026-155)

The version of ecs-service-connect-agent installed on the remote host is prior to v1.39.4.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2026-155 advisory. Issue summary: A certificate with many nameRelativeToCRLIssuer CRLdistribution points causes disproportiona...

Security Bulletin: IBM Test Accelerator for Z uses zod-4.4.3.tgz which is vulnerable to CVE-2023-54404

Summary Security Bulletin: IBM Test Accelerator for Z uses zod-4.4.3.tgz which is vulnerable to CVE-2023-54404. This security bulletin provides details about the vulnerability and the corresponding remediation. Vulnerability Details CVEID:CVE-2023-54404 DESCRIPTION: Zod schema-validation library...

CLEANSTART-2026-UK62622 Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130)

Security vulnerability affects the sonarqube package. Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130...

CLEANSTART-2026-JZ62196 Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to Denial of Service via Excessive Allocation (CAPEC-130)

CVE-2026-102411 affects multiple packages. Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to Denial of Service via Excessive Allocation CAPEC-130. See references for individual vulnerability details...

SUSE SLES16 Security Update : guava (SUSE-SU-2026:24263-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:24263-1 advisory. This update for guava fixes the following issue: - CVE-2026-102554: Allocation of resources without limits or throttling CWE-770 during Jav...

PT-2026-135192

Security vulnerability affects the sonarqube package. Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130...

openSUSE 16 Security Update : guava (openSUSE-SU-2026:22143-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22143-1 advisory. This update for guava fixes the following issue: - CVE-2026-102554: Allocation of resources without limits or throttling CWE-770 during Java object...

Security Bulletin: Multiple vulnerabilties in DevOps Test Hub

Summary Multiple vulnerabilities addressed in DevOps Test Hub in version 11.0.8 Vulnerability Details CVEID:CVE-2026-94002 DESCRIPTION: Possible memory exhaustion in SFTP clients DefaultSftpClient in component sshd-sftp in Apache MINA SSHD versions 0.9.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache...

Security update for guava (important)

openSUSE security update: security update for guava ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22143-1 Rating: important References: bsc1284985 Cross-References: CVE-2026-102554 CVSS scores: CVE-2026-102554 SUSE : 7.5...