EUVD-2026-117406

Allocation of Resources Without Limits or Throttling vulnerability in Apache Juneau. The MessagePack parser, which the REST server enables by default, sizes buffers from length values in the input. An unauthenticated client can send a few bytes that force a multi-gigabyte allocation and an...

CVE-2026-73095

Apache Juneau versions through 9.2.0 are vulnerable to an Allocation of Resources Without Limits or Throttling vulnerability. The MessagePack parser , enabled by default in the REST server, sizes buffers based on length values provided in the input. An unauthenticated client can send a small amou...

GHSA-GJCC-JVGW-WVWJ Litestar allows unbounded resource consumption (DoS vulnerability)

Summary Litestar offers multiple methods to return a parsed representation of the request body, as well as extractors that rely on those parsers to map request content to structured data types. Multiple of those parsers do not have size limits when reading the request body into memory, which allo...