CVE-2026-116872

Semantic MediaWiki from 3.0.0 before 7.3.1 contains an algorithmic complexity vulnerability in TermParser::normalizecompactform that allows unauthenticated attackers to cause quadratic CPU consumption. Attackers can submit long search terms with many distinct in:... or has:... expressions to...

EUVD-2026-110700

Semantic MediaWiki from 3.0.0 before 7.3.1 contains an algorithmic complexity vulnerability in TermParser::normalizecompactform that allows unauthenticated attackers to cause quadratic CPU consumption. Attackers can submit long search terms with many distinct in:... or has:... expressions to...

PT-2026-126333

Semantic MediaWiki from 3.0.0 before 7.3.1 contains an algorithmic complexity vulnerability in TermParser::normalize compact form that allows unauthenticated attackers to cause quadratic CPU consumption. Attackers can submit long search terms with many distinct in:... or has:... expressions to...

CVE-2026-6042-PoC

CVE-2026-6042: Algorithmic Complexity DoS in musl libc iconv Gap-skipping loops in musl's iconv GB18030 4-byte decoder allow a small crafted input to consume disproportionate CPU time. A 40 KB adversarial payload can pin a CPU core for over 40 minutes. Advisory :...

CVE-2026-108529

Inefficient Algorithmic Complexity vulnerability in the HTTP/2 implementation of mtrudel bandit allows an unauthenticated remote attacker to exhaust server CPU via small SETTINGS or connection-level WINDOWUPDATE frames. The attacker opens thousands of streams whose responses block on the connecti...

CVE-2026-108529

The mtrudel bandit web server (versions 0.3.4 before 1.14.0 ) is vulnerable to an Inefficient Algorithmic Complexity vulnerability in its HTTP/2 implementation. An unauthenticated remote attacker can exhaust server CPU by opening thousands of streams that block on the connection send window. By s...

EUVD-2026-109829

Inefficient Algorithmic Complexity vulnerability in the HTTP/2 implementation of mtrudel bandit allows an unauthenticated remote attacker to exhaust server CPU via small SETTINGS or connection-level WINDOWUPDATE frames. The attacker opens thousands of streams whose responses block on the connecti...

CVE-2026-108529 SETTINGS and stream-0 WINDOW_UPDATE frames trigger quadratic work over blocked streams in Bandit

Inefficient Algorithmic Complexity vulnerability in the HTTP/2 implementation of mtrudel bandit allows an unauthenticated remote attacker to exhaust server CPU via small SETTINGS or connection-level WINDOWUPDATE frames. The attacker opens thousands of streams whose responses block on the connecti...

Linux Distros Unpatched Vulnerability : CVE-2026-115352

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mistune before 3.3.0 contains an algorithmic complexity vulnerability in the inline link parser that allows unauthenticated attackers to exhaust CPU by submitti...

Linux Distros Unpatched Vulnerability : CVE-2026-115347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mistune before 3.3.0 contains an inefficient algorithmic complexity vulnerability in parselinktext that allows remote attackers to cause denial of service throu...

Linux Distros Unpatched Vulnerability : CVE-2026-115348

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mistune from 3.0.0 before 3.3.0 contains an algorithmic complexity vulnerability in the inline link parser's parselinktext function that allows unauthenticated...

Linux Distros Unpatched Vulnerability : CVE-2026-115319

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fzf 0.36.0 through 0.74.5 contains an inefficient algorithmic complexity vulnerability in maskActionContents that allows local attackers to exhaust the --listen...

dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network...

dotnet9.0: dotnet: dotnet10.0: dotnet8.0: .NET Denial of Service Vulnerability

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-115348

A flaw was found in mistune. A remote, unauthenticated attacker can exploit an algorithmic complexity vulnerability in the inline link parser by submitting specially crafted Markdown input containing numerous unbalanced brackets. This forces repeated forward scans during text parsing, consuming...

CVE-2026-115347

A flaw was found in mistune. A remote attacker can exploit an inefficient algorithmic complexity issue in the link text parsing logic by submitting specially crafted Markdown input containing long sequences of unmatched square brackets. Processing this input causes repeated forward scans, leading...

CVE-2026-115352

A flaw was found in mistune. This algorithmic complexity vulnerability allows an unauthenticated remote attacker to cause a Denial of Service DoS by submitting specially crafted Markdown input containing long sequences of unmatched bracket characters. When parsing this malformed input, the inline...

dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network...

dotnet9.0: dotnet: dotnet10.0: dotnet8.0: .NET Denial of Service Vulnerability

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...

dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network...