CLEANSTART-2026-DZ11715 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130)

Security vulnerability affects the sonarqube package. Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130...

CLEANSTART-2026-VQ49789 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

Security vulnerability affects the sonarqube package. Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...

CLEANSTART-2026-DB26866 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

Security vulnerability affects the sonarqube package. Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...

PT-2026-107985

ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a security policy bypass in the MAT decoder, which does not enforce configured temporary file size limits when reading highly compressed data. Attackers can supply a crafted MAT image whose decompressed data is written to temporary fil...

UBUNTU-CVE-2026-107210

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a crafted highly compressed MAT image can make the MAT decoder create temporary files larger than the configured security-policy limit, bypassing resource restrictions a...

PT-2026-107976

ImageMagick before 7.1.2-31 contains a resource leak vulnerability that allows attackers to leave file pointers open by supplying a crafted magick script. Attackers can process malicious magick scripts to leak file descriptors, potentially exhausting resources and causing denial of service...

ROS-20261008-73-0236

The vulnerability of the mctu232readintcallback function in the drivers/usb/serial/mctu232.c file of the Linux device driver for USB devices relates to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...

ROS-20261008-73-0301

The vulnerability in the kernel-lt is related to the use of an uninitialized resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261008-73-0336

The vulnerability in the kernel-lt is related to incorrect blocking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-61801: Uncontrolled Resource Consumption

The github.com/moby/sys/user package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing /etc/passwd- or /etc/group-style files, allowing an attacker who can supply a specially...

ROS-20261008-73-0132

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261008-73-0328

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261008-73-0279

The vulnerability in the kernel-lt is related to incorrect blocking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261008-73-0312

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-108236

Name of the Vulnerable Software and Affected Versions IBM Security Verify Access versions 10.0 through 10.0.9.2 IBM Verify Identity Access versions 11.0 through 11.0.3 Description An authenticated user can cause a denial of service by sending a specially crafted HTTP query. This occurs because th...

CVE-2026-97031: Asymmetric Resource Consumption (Amplification)

Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector a...

PT-2026-108288

Name of the Vulnerable Software and Affected Versions Strawberry GraphQL versions 0.312.3 through 0.327.1 Description The legacy graphql-ws subscription handler in strawberry/subscriptions/protocols/graphql ws/handlers.py fails to remove naturally completed operations from self.tasks and...

PT-2026-108119

Name of the Vulnerable Software and Affected Versions OpenStack Mistral versions prior to 23.0.1 Description Several write paths in the v2 API resolve target objects using queries that may return resources belonging to a different project. This allows an authenticated project member to rewrite an...

ROS-20261008-73-0184

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261008-73-0169

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...