Allocation of Resources Without Limits or Throttling

Overview elgg/elgg is a development framework used for creating socially aware web applications. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the avatar upload process. An attacker can cause resource exhaustion by uploading an image...

CVE-2026-65650

Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload...

CVE-2026-65650

Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload...

CVE-2026-65650

CVE-2026-65650 affects Elgg before 7.0.0, where image dimension checks are missing, enabling a denial-of-service via oversized avatar uploads. Impact: possible availability degradation (CVSS 4.3). Remediation: upgrade to Elgg 7.0.0 or later where the issue is addressed, as reflected in the 7.0.0 ...

CVE-2026-65650

Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload...

CVE-2019-11016

Elgg before 1.12.18 and 2.3.x before 2.3.11 has an open redirect...

EUVD-2011-3691

Malware in sbrugna...

EUVD-2009-3132

Malware in sbrugna...

EUVD-2012-6410

Malware in sbrugna...

EUVD-2013-0267

Malware in sbrugna...

EUVD-2021-2525

Malware in sbrugna...

EUVD-2012-6409

Malware in sbrugna...

EUVD-2012-6408

Malware in sbrugna...

EUVD-2011-2904

Malware in sbrugna...

EUVD-2021-2535

Malware in sbrugna...

EUVD-2022-0429

Malicious code in bioql PyPI...

EUVD-2022-5116

Malicious code in bioql PyPI...

EUVD-2022-1783

Malicious code in bioql PyPI...

CVE-2021-3980

elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor...

CVE-2021-3964

elgg is vulnerable to Authorization Bypass Through User-Controlled Key...