EUVD-2026-125221

NLTK from 3.2.5 before 3.10.4 contains an algorithmic complexity vulnerability in TreebankWordTokenizer.spantokenize that allows remote attackers to cause quadratic CPU consumption through repeated list.pop0 calls. Attackers can submit long runs of double-quote characters to services...

EUVD-2026-125220

NLTK from 3.6 before 3.10.4 contains an algorithmic complexity vulnerability in LegalitySyllableTokenizer.tokenize that allows remote attackers to exhaust CPU by supplying long all-vowel tokens. Attackers can submit a token such as a long run of vowels, causing the unguarded onset reversal loop t...

EUVD-2026-124377

PapaParse before 5.7.1 contains an inefficient algorithmic complexity vulnerability that allows remote unauthenticated attackers to cause denial of service by submitting delimiter-free quoted CSV input to Papa.parse. Attackers can supply a single-column quoted CSV with no delimiters, triggering...

CVE-2026-127056: mholt PapaParse: PapaParse before 5.7.1 contains an inefficient algorithmic complexity vulnerability that allows remote unauthenticated…

PapaParse before 5.7.1 contains an inefficient algorithmic complexity vulnerability that allows remote unauthenticated attackers to cause denial of service by submitting delimiter-free quoted CSV input to Papa.parse. Attackers can supply a single-column quoted CSV with no delimiters, triggering...

dotnet8.0: ASP.NET Core Denial of Service Vulnerability

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network...

OESA-2026-4792 python-mistune security update

The python-mistune package is a fast yet powerful Python Markdown parser with renderers and plugins, compatible with sane CommonMark rules. Security Fixes: Mistune before 3.3.0 contains an inefficient algorithmic complexity vulnerability in parselinktext that allows remote attackers to cause deni...

CVE-2026-126623

Progressive Robot hMailServer versions 6.3.6 and 6.3.7 are vulnerable to a high severity Denial of Service (DoS) attack due to inefficient algorithmic complexity in the JSON reader. A remote unauthenticated attacker can provide a specially crafted JSON object—such as via a TLS-RPT report or a lin...

CVE-2026-126623 Inefficient Algorithmic Complexity in hMailServer

Inefficient algorithmic complexity in the JSON reader of Progressive Robot hMailServer 6.3.6 and 6.3.7 allows a remote attacker to hold the server's mail delivery threads or its REST API's worker threads, making mail delivery, the REST API and the webmail unavailable. 6.3.6 fixed CVE-2026-107574,...

CVE-2026-77680-Security-Analysis

OYEKANMI OLUWATUNMISE JOSEPH RUN/CYB/23/15421 CVE-2026-77680 — Security Analysis Assessment: Medium severity · CVSS v3.1: 5.3 · Primary impact: Availability CPU exhaustion / denial of service This repository documents the technical behavior, risk, remediation, and a Cyber Kill Chain mapping for...

EUVD-2026-121561

Microsoft Security Advisory CVE-2026-109478 - ASP.NET Core Denial of Service Vulnerability...

CVE-2026-126623: Inefficient Algorithmic Complexity

Inefficient algorithmic complexity in the JSON reader of Progressive Robot hMailServer 6.3.6 and 6.3.7 allows a remote attacker to hold the server's mail delivery threads or its REST API's worker threads, making mail delivery, the REST API and the webmail unavailable. 6.3.6 fixed CVE-2026-107574,...

ROS-20261111-73-0022

A vulnerability in Python 3 related to algorithmic complexity. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

ROS-20261111-73-0023

A vulnerability in python3.11 related to algorithmic complexity. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

GHSA-CPW3-H88J-9F6X Microsoft Security Advisory CVE-2026-120796 - .NET Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET. This advisory provides guidance on updating affected applications and components. Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a...

Microsoft Security Advisory CVE-2026-120796 - .NET Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET. This advisory provides guidance on updating affected applications and components. Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a...

CVE-2026-118749

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-109478

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network...

Duplicate Advisory: Microsoft Security Advisory CVE-2026-109478 - ASP.NET Core Denial of Service Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-r3qf-p3jm-8h4p. This link is maintained to preserve external references. Original Description Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-6042-PoC

CVE-2026-6042: Algorithmic Complexity DoS in musl libc iconv Gap-skipping loops in musl's iconv GB18030 4-byte decoder allow a small crafted input to consume disproportionate CPU time. A 40 KB adversarial payload can pin a CPU core for over 40 minutes. Advisory :...

CVE-2026-124016

The postal-mime library before version 4.2.1 is vulnerable to an algorithmic complexity denial of service (DoS) via the PostalMime.processLine() function. Unauthenticated remote attackers can cause excessive CPU consumption by delivering crafted emails with deeply nested multipart structures (up ...