11824 matches found
CVE-2026-104020
Uncontrolled recursion in the Ion reader in Amazon Ion Python before 0.15.0 might allow a remote unauthenticated actor to crash the application using the library, resulting in a denial of service, via a crafted, deeply nested Ion value. To remediate this issue, users should upgrade to version...
CVE-2026-104020 Uncontrolled recursion in the Ion reader in Amazon Ion Python
Uncontrolled recursion in the Ion reader in Amazon Ion Python before 0.15.0 might allow a remote unauthenticated actor to crash the application using the library, resulting in a denial of service, via a crafted, deeply nested Ion value. To remediate this issue, users should upgrade to version...
CVE-2026-104020 Uncontrolled recursion in the Ion reader in Amazon Ion Python
Uncontrolled recursion in the Ion reader in Amazon Ion Python before 0.15.0 might allow a remote unauthenticated actor to crash the application using the library, resulting in a denial of service, via a crafted, deeply nested Ion value. To remediate this issue, users should upgrade to version...
EUVD-2026-91059
Uncontrolled recursion in the Ion reader in Amazon Ion Python before 0.15.0 might allow a remote unauthenticated actor to crash the application using the library, resulting in a denial of service, via a crafted, deeply nested Ion value. To remediate this issue, users should upgrade to version...
CVE-2026-104020 Uncontrolled recursion in the Ion reader in Amazon Ion Python
Uncontrolled recursion in the Ion reader in Amazon Ion Python before 0.15.0 might allow a remote unauthenticated actor to crash the application using the library, resulting in a denial of service, via a crafted, deeply nested Ion value. To remediate this issue, users should upgrade to version...
CVE-2026-104020
The Amazon Ion Python library (versions prior to 0.15.0 ) is vulnerable to a denial of service due to uncontrolled recursion in the Ion reader . A remote, unauthenticated actor can crash the application by providing a crafted, deeply nested Ion value. To remediate this issue, users should upgrade...
qtbase: qt5-qtbase: qt6-qtbase: qtbase: Denial of Service via uncontrolled recursion in XML serialization
A flaw was found in qtbase. Uncontrolled recursion in Qt's QDomDocument serialization QtXml allows a remote attacker to provide deeply nested untrusted XML, leading to stack exhaustion. This can cause the application to crash, resulting in a Denial of Service DoS...
CVE-2023-54404 Zod 4.6.5 Uncontrolled Resource Consumption via Array Validation
Zod schema-validation library through 4.6.5, fixed in commit e06a510, contains an uncontrolled resource consumption vulnerability that allows attackers to exhaust memory by submitting a large array to an application using an array schema without a length constraint. Attackers can exploit the...
Uncontrolled Resource Consumption
Apache Qpid ProtonJ2 is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to the lack of a limit on the number of transfer frames per incoming delivery, which allows an authenticated attacker to cause excessive resource consumption and potentially trigger a denial-of-servi...
Uncontrolled Resource Consumption
Apache Qpid Broker-J is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to improper enforcement of the session flow control incoming window, which allows an authenticated attacker to exceed the permitted window and cause resource exhaustion, potentially resulting in a...
Uncontrolled Resource Consumption
Apache Qpid Broker-J is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to inefficient handling of large or invalid ranges in disposition frames, which allows an authenticated attacker to cause excessive CPU consumption and trigger a denial-of-service condition...
BIT-ELASTICSEARCH-2026-82300 Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service
Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130...
Uncontrolled Recursion
org.apache.neethi, neethi is vulnerable to uncontrolled recursion. The vulnerability is due to uncontrolled recursive policy parsing, which allows an attacker to provide a maliciously crafted deeply nested or ID-less policy that causes excessive runtime memory consumption and potentially crashes...
Uncontrolled Resource Consumption
multiparty is vulnerable to Uncontrolled Resource Consumption.The vulnerability is due to unrestricted memory usage while accumulating multipart part headers, which allows an unauthenticated attacker to send a request with excessively large headers and exhaust process memory, causing the server t...
thrift: Apache Thrift: php `--gen php:inlined` struct readers (and `TProtocol::skipBinary`) have no recursion-depth guard
A flaw was found in Apache Thrift's PHP bindings. A remote attacker could cause a denial of service DoS by sending specially crafted input that triggers uncontrolled recursion. This excessive recursion can exhaust system resources or stack space, leading to an application crash...
thrift: thrift: Denial of Service via uncontrolled recursion in C GLib bindings
A flaw was found in Apache Thrift. An uncontrolled recursion vulnerability in the C GLib library bindings allows a remote, unauthenticated attacker to send specially crafted input to an affected application. Processing this input triggers excessive nested function calls that exhaust stack memory,...
thrift: Apache Thrift: Denial of Service via uncontrolled resource allocation in PHP bindings
A flaw was found in the Apache Thrift PHP bindings. Due to a lack of limits or throttling on resource allocation, a remote attacker can send crafted requests that consume excessive system resources. This issue can lead to a Denial of Service DoS for the affected service...
CLEANSTART-2026-PR17240 Uncontrolled Resource Consumption vulnerability in the HTTP/1
Security vulnerability affects the apache-nifi package. Uncontrolled Resource Consumption vulnerability in the HTTP/1...
