CVE-2026-114644

The MongoDB C Driver's BSON library contains an uncontrolled resource consumption weakness in its deserialization handling of one BSON value type. An application that deserializes untrusted content with the library retains data derived from that content for the lifetime of the process, with no...

EUVD-2026-108305

The MongoDB C Driver's BSON library contains an uncontrolled resource consumption weakness in its deserialization handling of one BSON value type. An application that deserializes untrusted content with the library retains data derived from that content for the lifetime of the process, with no...

CVE-2026-78058

Uncontrolled resource consumption in the HTTP/2 h2 receive path of Apache bRPC version 1.18.0 on all platforms allows a remote unauthenticated attacker to crash the server or grow its memory without bound by sending crafted HTTP/2 frames. Root Cause: The h2 parser, enabled by default on every bRP...

EUVD-2026-107184

Uncontrolled resource consumption in the HTTP/2 h2 receive path of Apache bRPC version 1.18.0 on all platforms allows a remote unauthenticated attacker to crash the server or grow its memory without bound by sending crafted HTTP/2 frames. Root Cause: The h2 parser, enabled by default on every bRP...

PT-2026-120542

Uncontrolled resource consumption in the HTTP/2 h2 receive path of Apache bRPC version 1.18.0 on all platforms allows a remote unauthenticated attacker to crash the server or grow its memory without bound by sending crafted HTTP/2 frames. Root Cause: The h2 parser, enabled by default on every bRP...

resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses

A flaw was found in the resolv gem. An attacker controlling DNS responses e.g., a spoofed response or a malicious upstream DNS server can exploit this by sending crafted DNS responses containing many distinct unknown DNS resource record pairs or SvcParamKeys. This leads to uncontrolled memory...

Important: Red Hat Security Advisory: ruby:3.3 security update

An update for the ruby:3.3 module is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via repeated string concatenation in the seek function of src/PIL/GifImagePlugin.py when parsing GIF comment extension blocks. An attacker can supply a GIF file containing many comment blocks, causing...

EUVD-2026-103204

A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service DoS by sending repeated state notification requests to an exposed rpc.statd service. The service fails to properly release memory allocated during callback processing, leading to continuous memory...

Linux Distros Unpatched Vulnerability : CVE-2026-89096

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service DoS by sending repeated state notification requests to an...

DEBIAN-CVE-2026-89096

A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service DoS by sending repeated state notification requests to an exposed rpc.statd service. The service fails to properly release memory allocated during callback processing, leading to continuous memory...

CVE-2026-89096

A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service DoS by sending repeated state notification requests to an exposed rpc.statd service. The service fails to properly release memory allocated during callback processing, leading to continuous memory...

CVE-2026-89096

A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service DoS by sending repeated state notification requests to an exposed rpc.statd service. The service fails to properly release memory allocated during callback processing, leading to continuous memory...

CVE-2026-89096

A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service DoS by sending repeated state notification requests to an exposed rpc.statd service. The service fails to properly release memory allocated during callback processing, leading to continuous memory...

CVE-2026-95859

libp2p-rust is the official Rust language implementation of the libp2p networking stack. Prior to 0.49.5, Gossipsub GRAFT control-message handling unconditionally adds attacker-supplied topic hashes to connectedpeer.topics without confirming that the peer previously subscribed to those topics. A...

CVE-2026-95859 libp2p-rust: Gossipsub GRAFT topics unbounded growth

libp2p-rust is the official Rust language implementation of the libp2p networking stack. Prior to 0.49.5, Gossipsub GRAFT control-message handling unconditionally adds attacker-supplied topic hashes to connectedpeer.topics without confirming that the peer previously subscribed to those topics. A...

CVE-2026-89096: Missing Release of Resource after Effective Lifetime

A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service DoS by sending repeated state notification requests to an exposed rpc.statd service. The service fails to properly release memory allocated during callback processing, leading to continuous memory...

PT-2026-115630

Name of the Vulnerable Software and Affected Versions libp2p-rust versions prior to 0.49.5 Description In the official Rust implementation of the libp2p networking stack, the handling of Gossipsub GRAFT control messages allows the addition of attacker-supplied topic hashes to connected peer.topic...

PT-2026-116179

Name of the Vulnerable Software and Affected Versions nfs-utils affected versions not specified Red Hat Enterprise Linux affected versions not specified OpenShift Container Platform affected versions not specified Description An unauthenticated remote attacker can cause a Denial of Service DoS by...

Astra Linux – Vulnerability in libsoup2.4

GNOME libsoup before version 3.6.1 has an infinite loop and consumes a large amount of memory during the reading of certain patterns of WebSocket data from clients...