BIT-DOTNET-2026-69304 ASP.NET Core Denial of Service Vulnerability

Improper handling of highly compressed data data amplification in ASP.NET Core allows an unauthorized attacker to deny service over a network...

BIT-ELASTICSEARCH-2026-82294 Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130...

Resource Allocation

com.github.java-json-tools, jackson-coreutils is vulnerable to resource allocation. The vulnerability is due to improper resource allocation in the TreePointer.tokensFromInput function of the JSON Pointer parser, which allows a remote attacker to exploit the parser and cause excessive resource...

BIT-AUTHENTIK-2026-94613 authentik: Denial of Service via Document Type Declarations in SAML Messages

authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, an unauthenticated attacker can submit a malformed SAML message to an authentik deployment using SAML in either the identity-provider or SAML source role. The message can stop the worker handling...

EUVD-2026-90583

In JetBrains YouTrack before 2026.2.19422 doS attack was possible via crafted PSD attachments...

CVE-2026-103492

In JetBrains YouTrack before 2026.2.19422 doS attack was possible via crafted PSD attachments...

CVE-2026-103492

In JetBrains YouTrack before 2026.2.19422 doS attack was possible via crafted PSD attachments...

CVE-2026-103492

JetBrains YouTrack versions prior to 2026.2.19422 are vulnerable to a Denial of Service (DoS) attack. The root cause is the processing of crafted PSD attachments , which can lead to high availability impact. Remediation is available in version 2026.2.19422 or later. No specific exploit details or...

Uncontrolled Recursion

org.apache.neethi, neethi is vulnerable to uncontrolled recursion. The vulnerability is due to uncontrolled recursive policy parsing, which allows an attacker to provide a maliciously crafted deeply nested or ID-less policy that causes excessive runtime memory consumption and potentially crashes...

CLEANSTART-2024-XA88475 Double free in ICU in Google Chrome prior to 91

Security vulnerability affects the chromium package. Double free in ICU in Google Chrome prior to 91...

CLEANSTART-2024-OK94542 Use after free in protocol handling in Google Chrome prior to 92

Security vulnerability affects the chromium package. Use after free in protocol handling in Google Chrome prior to 92...

CLEANSTART-2024-DZ24887 Use after free in DevTools in Google Chrome prior to 92

Security vulnerability affects the chromium package. Use after free in DevTools in Google Chrome prior to 92...

CLEANSTART-2024-MH90303 FFmpeg before commit bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 contains an out of array access vulnerability in MXF format demuxer that can result in DoS

Security vulnerability affects the ffmpeg4 package. FFmpeg before commit bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 contains an out of array access vulnerability in MXF format demuxer that can result in DoS...

CLEANSTART-2024-RR96243 Use after free in Browser Switcher in Google Chrome prior to 101

Security vulnerability affects the chromium package. Use after free in Browser Switcher in Google Chrome prior to 101...

CLEANSTART-2024-BO23814 Use after free in Vulkan in Google Chrome prior to 101

Security vulnerability affects the chromium package. Use after free in Vulkan in Google Chrome prior to 101...

CLEANSTART-2024-AF00964 Use after free in Permission Prompts in Google Chrome prior to 101

Security vulnerability affects the chromium package. Use after free in Permission Prompts in Google Chrome prior to 101...

CLEANSTART-2024-UA33710 Use after free in App Service in Google Chrome prior to 102

Security vulnerability affects the chromium package. Use after free in App Service in Google Chrome prior to 102...

CLEANSTART-2024-YK43595 Use after free in Performance Manager in Google Chrome prior to 102

Security vulnerability affects the chromium package. Use after free in Performance Manager in Google Chrome prior to 102...

CLEANSTART-2024-OD40934 Use after free in ANGLE in Google Chrome prior to 102

Security vulnerability affects the chromium package. Use after free in ANGLE in Google Chrome prior to 102...

Denial Of Service

Apache Neethi is vulnerable to Denial of Service. The vulnerability is due to remote policy references being manually retrieved via the API without size limits, where the library reads data from remote policy references without imposing a maximum size and an attacker can supply a huge policy...