CVE-2026-50787

CVE-2026-50787 — e-SIC Livre におけるリソース消費の制御不能 概要 e-SIC Livre esiclivre のCAPTCHA生成コンポーネントに、リソース消費の脆弱性が存在します。 影響を受けるエンドポイントは、CAPTCHA画像の寸法、フォントサイズ、描画する文字数を定義するユーザー制御パラメータを受け入れます。これらの値は、適切な境界チェックなしに使用されます。...

CVE-2026-36958

CVE-2026-36958: 同時HTTPリクエストによるサービス拒否 CVE ID: CVE-2026-36958 日付: 2026-04-29 発見者: Kirubel Solomne ベンダー: U-SPEED 製品: U-SPEED ルーター ファームウェアバージョン: V1.0.0 CWE: CWE-400 - 制御されないリソース消費 説明 U-SPEED ルーターのファームウェア V1.0.0 はサービス拒否に対して脆弱です。Web管理インターフェース上のランダムまたは存在しないエンドポイントに対して大量の同時HTTPリクエストを送信することで、攻撃者は組み込みの Boa...

CVE-2023-54404

The Zod schema-validation library (versions through 4.6.5 ) contains an uncontrolled resource consumption vulnerability (CWE-770). An attacker can trigger a Denial of Service (DoS) by submitting a large array of invalid items to an application using an array schema that lacks a length constraint....

EUVD-2023-60702

Zod schema-validation library through 4.6.5 contains an uncontrolled resource consumption vulnerability that allows attackers to exhaust memory by submitting a large array to an application using an array schema without a length constraint. Attackers can exploit the handleArrayResult parse logic ...

CVE-2023-54404 Zod 4.6.5 Uncontrolled Resource Consumption via Array Validation

Zod schema-validation library through 4.6.5 contains an uncontrolled resource consumption vulnerability that allows attackers to exhaust memory by submitting a large array to an application using an array schema without a length constraint. Attackers can exploit the handleArrayResult parse logic ...

CVE-2023-54404 Zod 4.6.5 Uncontrolled Resource Consumption via Array Validation

Zod schema-validation library through 4.6.5 contains an uncontrolled resource consumption vulnerability that allows attackers to exhaust memory by submitting a large array to an application using an array schema without a length constraint. Attackers can exploit the handleArrayResult parse logic ...

pypdf: Possible large memory usage when retrieving alphabetical page labels

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires accessing the page labels of a document with large alphabetical labels. PatchesThis has been fixed in pypdf==6.19.0. WorkaroundsIf you cannot upgrade yet, consider applying the...

pypdf: Possible large memory usage when retrieving Roman page labels

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires accessing the page labels of a document with large Roman numerals. PatchesThis has been fixed in pypdf==6.17.0. WorkaroundsIf you cannot upgrade yet, consider applying the changes...

pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires parsing the /ToUnicode entry of a font with unusually large values, for example during text extraction. PatchesThis has been fixed in pypdf==6.18.1. WorkaroundsIf you cannot upgrad...

CVE-2026-23842-Denial-of-Service-via-Database-Connection-Pool-Exhaustion-version-1.2.10

CVE-2026-23842 データベース接続プール枯渇によるサービス拒否（≤ 1.2.10） 📌 概要 このリポジトリは、ChatterBot における高深刻度のサービス拒否（Denial-of-Service）脆弱性である CVE-2026-23842 の発見と責任ある開示（responsible disclosure）を文書化したものです。 GitHub Advisory: GHSA-v4w8-49pv-mf72 CVE ID: CVE-2026-23842 CWE: CWE-400（制御されないリソース消費） 深刻度: 高（7.5 / 10）...

CVE-2026-31899

CVE-2026-31899: CairoSVG の再帰的 要素増幅による指数関数的 DoS キーワード: CVE-2026-31899、CairoSVG、指数関数的 DoS、SVG 爆弾、再帰的 use 要素、サービス妨害、XML 増幅、Python SVG の脆弱性、CWE-400、制御不能なリソース消費、billion laughs SVG 目次 概要 脆弱性の詳細 技術的分析 概念実証 影響 対策 CVSS メトリクス 参照 連絡先 概要 CairoSVG における指数関数的サービス妨害（DoS）CVE-2026-31899 — わずか 1,411 バイトの SVG...

CVE-2026-38361

CVE-2026-38361: dash-uploader における複数の未認証 DoS 脆弱性 fohrloop/dash-uploader Python、PyPI には、複数の未認証の サービス拒否 DoS 問題があります。これらに限定されませんが メモリ不足 OOM によるプロセスクラッシュ、ファイルの 0 バイトへの切り詰め、永続的なディスク枯渇、文書化された maxfilesize 制限の完全なバイパスが含まれます。同じサニタイズされていないパラメータセットを通じて、追加のリソース悪用経路も存在します。 ⚠️ パッチは提供されておらず、今後も提供される予定はありません...

Allocation of Resources Without Limits or Throttling

Overview pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the appearance stream rendering loop in appearancestream.py, where...

pypdf: Possible large memory usage when retrieving alphabetical page labels

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires accessing the page labels of a document with large alphabetical labels. Patches This has been fixed in pypdf==6.19.0. Workarounds If you cannot upgrade yet, consider applying the...

EUVD-2026-90283

pypdf: Possible large memory usage when retrieving alphabetical page labels...

pypdf: Possible large memory usage when parsing font data

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires parsing the /Widths entry of a TrueType or Type1 fonts with unusually large values, for example during text extraction. Patches This has been fixed in pypdf==6.18.1. Workarounds I...

EUVD-2026-90368

pypdf: Possible large memory usage when parsing font data...

EUVD-2026-90367

pypdf: Possible large memory usage for large /ToUnicode streams Follow-up 2...

pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires parsing the /ToUnicode entry of a font with unusually large values, for example during text extraction. Patches This has been fixed in pypdf==6.18.1. Workarounds If you cannot...

GHSA-FP3H-C4FM-7VVF pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires parsing the /ToUnicode entry of a font with unusually large values, for example during text extraction. Patches This has been fixed in pypdf==6.18.1. Workarounds If you cannot...