Linux Distros Unpatched Vulnerability : CVE-2026-55951

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Erlang/OTP httpc HTTP client does not enforce a limit on the total size of response headers received from a server. The maxheadersize option defaults to...

PT-2026-85299

Name of the Vulnerable Software and Affected Versions MOOS core-moos versions prior to 10.4.1 Description The MOOSDB HTTP server is subject to a denial of service issue where it creates unbounded connections and threads without limits. An attacker can exhaust server threads and memory by opening...

CVE-2026-85447: Allocation of Resources Without Limits or Throttling

MOOS-IvP pRealm through version 24.8.1 accepts unbounded REALMCASTREQ subscriptions without validating duration or variable list limits. Attackers can register long-lived pipeways with many variables to cause pRealm to generate excessive output indefinitely, exhausting system resources...

CVE-2026-85442: Memory Allocation with Excessive Size Value

MOOS core-moos through 10.4.0 fails to validate packet length declarations in CMOOSCommPkt::OnBytesWritten, allowing unauthenticated attackers to trigger unbounded buffer allocation by sending crafted wire packets. Attackers can send packets with large declared lengths to exhaust server memory an...

CVE-2026-85448: Allocation of Resources Without Limits or Throttling

MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the number of claimed communities stored in parallel vectors within ShoreBroker::handleMailNodePing. A single publisher can supply unbounded distinct community names to grow retained state and per-pass work without limit, causing memory...

PT-2026-85294

Name of the Vulnerable Software and Affected Versions MOOS-IvP versions prior to 24.8.2 Description A denial of service issue exists in the Demuxer::addMuxPacket function. The system trusts the packet count declared in mux headers without proper validation, allowing attackers to specify arbitrari...

PT-2026-85296

Name of the Vulnerable Software and Affected Versions MOOS-IvP pRealm versions prior to 24.8.2 Description The pRealm component accepts unbounded REALMCAST REQ subscriptions without validating the duration or the limits of the variable list. This allows an attacker to register long-lived pipeways...

PT-2026-85297

Name of the Vulnerable Software and Affected Versions MOOS-IvP uFldShoreBroker versions prior to 24.8.2 Description The software fails to limit the number of claimed communities stored in parallel vectors within the handleMailNodePing function. A single publisher can provide an unlimited number o...

CVE-2026-85450: Allocation of Resources Without Limits or Throttling

MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the MOOSDB HTTP server that creates unbounded connections and threads without limits. Attackers can open many connections and send endless header data to exhaust server threads and memory, causing service unavailability...

CVE-2026-85445: Memory Allocation with Excessive Size Value

MOOS-IvP through 24.8.1 contains a denial of service vulnerability in the Demuxer::addMuxPacket function that trusts the packet count declared in mux headers without validation. Attackers can declare arbitrarily large packet counts to trigger unbounded memory allocation, exhausting system resourc...

Mailpit: SMTP command parser buffers unbounded command lines before syntax rejection

Summary Mailpit's SMTP server reads each command line with an unbounded bufio.Reader.ReadString'\n' before parsing the command or enforcing any protocol length limit. A remote SMTP client can send an oversized single command line and force Mailpit to allocate attacker-controlled memory before the...

GHSA-W878-PJ84-3J5V Mailpit: SMTP command parser buffers unbounded command lines before syntax rejection

Summary Mailpit's SMTP server reads each command line with an unbounded bufio.Reader.ReadString'\n' before parsing the command or enforcing any protocol length limit. A remote SMTP client can send an oversized single command line and force Mailpit to allocate attacker-controlled memory before the...

Allocation of Resources Without Limits or Throttling

Overview golang.org/x/crypto/ssh is a SSH client and server Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the connection multiplexer's channel handling the mux chanList, reached through Dial, NewClientConn, NewControlClientConn, and...

GO-2026-6317 ORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Recursion and Resource Consumption in oras.land/oras

ORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Recursion and Resource Consumption in oras.land/oras...

GO-2026-6312 KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela

KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela...

GO-2026-6310 Klever: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token) in github.com/klever-io/klever-go

Klever: Integer overflow in split-royalty validation enables unbounded minting of KLV native token in github.com/klever-io/klever-go...

DoS (Denial of Service) browserslist Dependency in Jira Software Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Software Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

CVE-2026-84382 HTTPX2: Streaming response decompression does not bound peak memory (decompression amplification)

HTTPX2 is a next generation HTTP client for Python. Prior to 2.12.0, the HTTPX2 content decoders in src/httpx2/httpx2/decoders.py fully inflate each gzip, deflate, br, or zstd network chunk before iterbytes or aiterbytes yields bounded pieces to the application. A 64 KiB compressed chunk can expa...

CVE-2026-77121

Sonatype Nexus Repository 3 is affected by a denial of service vulnerability caused by unbounded Maven POM metadata fields. A user with permission to deploy artifacts to a hosted Maven repository can upload a POM file containing an oversized metadata field , which causes future attempts to list o...

MGASA-2026-0368 Updated perl-XML-Bare packages fix security vulnerabilities

XML::Bare versions through 0.53 for Perl have an unbounded character lookahead. XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes...