Uncontrolled Resource Consumption

jackson-databind is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to the deserialization of arbitrarily long numeric components in XML datatype strings without length validation, which allows an unauthenticated attacker to submit specially crafted JSON values that caus...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

EUVD-2026-88048

A vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the function Storage::download of the file packages/Webkul/Admin/src/Config/acl.php of the component attachment-download Endpoint. The manipulation of the argument ID leads to improper control of resource...

MinIO DoS

The vulnerability of the MinIO object storage server is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

pyasn1 Uncontrolled Resource Consumption DoS

The vulnerability of the pyasn1 library in the Python programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

ruby security update

3.3.12-15 - Fix memory exhaustion via unknown DNS resource types in resolv. CVE-2026-80212 Resolves: RHEL-252031...

ROS-20260928-73-0025

The vulnerability of the bpfredirectneigh function in the Linux operating system is related to the unlimited distribution of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260928-73-0036

The vulnerabilities of the dqput and dquotinit functions in the Linux operating system are related to resource management errors. Exploiting these vulnerabilities can allow an attacker to cause service failures...

ROS-20260928-73-0077

The vulnerability of the tcfconnmarkdump function in the net/sched/actconnmark.c module of the net/sched/actconnmark subsystem of the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to access protected information or...

ROS-20260928-73-0125

The vulnerability of the udptunnelnicnetdeviceevent function in the net/ipv4/udptunnelnic.c module of the Linux kernel’s IPv4 protocol implementation is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow an attacker to...

ROS-20260928-73-0030

The vulnerability of the bpfredirectneigh function in the Linux operating system is related to the unlimited distribution of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260928-73-0080

The vulnerability of the recvpkt function in the net/bluetooth/6lowpan.c module of the Linux Bluetooth subsystem is related to the improper disabling or release of resources. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

ROS-20260928-73-0114

The vulnerability of the hfsplusiget function in the fs/hfsplus/super.c module, which supports the Apple HFS extended file system, is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260928-73-0120

The vulnerability of the fpuclearuserstates function in the arch/x86/kernel/fpu/core.c module of the Linux operating system’s x86 kernel support module is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260928-73-0129

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260928-73-0105

The vulnerability of the nfsd4read function in the fs/nfsd/nfs4proc.c module, which supports the Network File System in Linux kernels, is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

ROS-20260928-73-0099

The vulnerability of the drivers/base/regmap/regmap-slimbus.c component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2026-101098: Uncontrolled Resource Consumption

A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affected by this issue is the function readAllBytes of the file JdkAgentHttpHandler.java of the component HTTP Handler. Such manipulation leads to resource consumption. The attack can be launched remotely. The pu...

PT-2026-99788

Name of the Vulnerable Software and Affected Versions Apache Roller version 6.1.5 Description An authorization bypass exists that allows an authenticated user with authoring rights on one weblog to read, modify, or delete resources belonging to another weblog. This occurs through unscoped...