EUVD-2026-74297

MCP Kotlin SDK is the Kotlin Multiplatform software development kit for the Model Context Protocol. In versions 0.7.0 through 0.12.0, ReadBuffer.append in kotlin-sdk-core/src/commonMain/kotlin/io/modelcontextprotocol/kotlin/sdk/shared/ReadBuffer.kt writes every chunk of bytes received from the...

CVE-2026-32941

Una vulnerabilidad en todo el framework de Sliver C2 permite una Denegación de Servicio remota no autenticada al provocar Asignación de Memoria No Controlada CWE-789 / CWE-400, lo que lleva a un fallo de Agotamiento de Memoria OOM en todo el proceso. Referencias: Tenable Pasos de reproducción: 1...

xmldom: Quadratic-memory consumption

Summary When an element declares a namespace prefix, xmldom copies the entire in-scope namespace map into a fresh object and keeps that copy on the element while it is open on the parse stack. A crafted document that nests N elements, each declaring one unique prefix, therefore drives the parser ...

BIT-GRAFANA-2026-19475 SQL Data Source Plugin: OOM DoS via $__timeGroup macro

An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause, which Grafana's regex-based macro parsing does not reject. Evaluating the injected macro causes uncontrolled memory consumption that can...

gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation

...

spring-ai-sibling-loop-poc

Spring AI PDF Reader — sibling self-loop PoC incomplete fix of CVE-2026-47851 Minimal reproduction for an infinite loop / OOM in org.springframework.ai.reader.pdf.config.ParagraphManager of org.springframework.ai:spring-ai-pdf-document-reader. Reported as a private GitHub Security Advisory to...

cve-2026-24514-Kubernetes-Dos

CVE-2026-24514 – Critical Memory Exhaustion in ingress-nginx Validating Admission Webhook Unauthenticated / low-privileged remote denial-of-service vulnerability allowing attackers to crash ingress-nginx controller pods via oversized AdmissionReview requests. Overview & Business Impact The...

CVE-2026-84382 HTTPX2: Streaming response decompression does not bound peak memory (decompression amplification)

HTTPX2 is a next generation HTTP client for Python. Prior to 2.12.0, the HTTPX2 content decoders in src/httpx2/httpx2/decoders.py fully inflate each gzip, deflate, br, or zstd network chunk before iterbytes or aiterbytes yields bounded pieces to the application. A 64 KiB compressed chunk can expa...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the HTTP/2 DATA frame receive buffer handling, where each received fragment incurs per-fragment tracking and queue allocation overhead even while staying within the configured...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the HTTP/2 DATA frame receive buffer handling, where each received fragment incurs per-fragment tracking and queue allocation overhead even while staying within the configured...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the HTTP/2 DATA frame receive buffer handling, where each received fragment incurs per-fragment tracking and queue allocation overhead even while staying within the configured...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the HTTP/2 DATA frame receive buffer handling, where each received fragment incurs per-fragment tracking and queue allocation overhead even while staying within the configured...

AZL-99288 CVE-2026-84304 affecting package moby-engine 25.0.3-19

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connectio...

AZL-99396 CVE-2026-84304 affecting package vitess 19.0.4-12

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connectio...

CVE-2026-84304 gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connectio...

CVE-2026-84304

CVE-2026-84304 affects gRPC-Go , the Go implementation of gRPC, prior to version 1.83.1 . The root cause resides in internal/transport/transport.go, where each fragmented HTTP/2 DATA frame is stored as a separate recvMsg in the receive buffer. An unauthenticated remote attacker can exploit this b...

GHSA-C83G-RGW3-J3CX Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM

Vulnerability Details File: index.js Location: cache browserslist's result cache, line 402 and parseCache parseQueries's AST cache Root Cause js var cache = var parseCache = function browserslistqueries, opts ... var cacheKey = JSON.stringifyqueries, context if cachecacheKey return cachecacheKey...

CVE-2026-80719

A flaw was found in the Linux kernel's Multi-Generational Least Recently Used MGLRU page table walker. When memory cgroup memcg reparenting occurs concurrently with page table walks, stale batch updates can lead to an underestimation of the number of pages. This can prevent the kernel from...

KubeVela Terraform remote loader DoS via unbounded file read

Summary KubeVela's Terraform remote configuration loader can be abused to make vela-core read an unbounded byte stream into memory, causing an out-of-memory kill and a control-plane denial of service. The issue is reachable when a user with permission to create or update a core.oam.dev/v1beta1...

GHSA-FMGP-Q6JX-GG3X KubeVela Terraform remote loader DoS via unbounded file read

Summary KubeVela's Terraform remote configuration loader can be abused to make vela-core read an unbounded byte stream into memory, causing an out-of-memory kill and a control-plane denial of service. The issue is reachable when a user with permission to create or update a core.oam.dev/v1beta1...