23764 matches found
The vulnerability of the pyasn1 library in the Python programming language, related to uncontrolled resource consumption, allows attackers to cause service failures.
The vulnerability of the pyasn1 library in the Python programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the DelegatingDecompressorFrameListener() class in the framework for developing network applications, servers, and clients using the Netty protocol allows a attacker to cause a service failure.
The vulnerability of the DelegingDecompressorFrameListener class in the framework for developing network applications, servers, and clients using the Netty protocol is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service...
The vulnerability of the pyasn1 library in the Python programming language, related to uncontrolled resource consumption, allows attackers to cause service failures.
The vulnerability of the pyasn1 library in the Python programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the DefaultHttp2Connection.DefaultEndpoint component in the framework for developing network applications, servers, and clients using the Netty protocol allows a attacker to cause a service failure.
The vulnerability of the DefaultHttp2Connection.DefaultEndpoint component in the framework for developing network applications, servers, and client protocols using Netty is related to an uncontrolled resource consumption. Exploiting this vulnerability may allow a malicious actor to cause service...
CVE-2026-102270: Inefficient Regular Expression Complexity
PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT ispemformat is affected because lazy PEM regular expression backtracks extensively. This occurs when a certificate-like input contains repeated BEGIN markers without a matching END marker. As a result, ispemforma...
PT-2026-102362
Name of the Vulnerable Software and Affected Versions PyJWT versions prior to 2.14.0 Description The is pem format function is affected by a regular expression issue where lazy PEM processing causes extensive backtracking. This happens when input resembling a certificate contains repeated BEGIN...
PT-2026-99934
Name of the Vulnerable Software and Affected Versions ag-ui-protocol ag-ui versions prior to 2026-09-23 Description A remote issue exists in the HTTP Handler component within the readAllBytes function of the JdkAgentHttpHandler.java file. Manipulation of this function can lead to excessive resour...
CVE-2026-101333: Allocation of Resources Without Limits or Throttling
A flaw was found in the Micrometer user-event metrics listener of Keycloak, a solution for integrated identity and access management. The issue occurs when the listener is configured to include the idp tag. An unauthenticated attacker can send requests to the identity broker login endpoint using...
PT-2026-99908
A flaw was found in the Micrometer user-event metrics listener of Keycloak, a solution for integrated identity and access management. The issue occurs when the listener is configured to include the idp tag. An unauthenticated attacker can send requests to the identity broker login endpoint using...
CVE-2026-101098: Uncontrolled Resource Consumption
A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affected by this issue is the function readAllBytes of the file JdkAgentHttpHandler.java of the component HTTP Handler. Such manipulation leads to resource consumption. The attack can be launched remotely. The pu...
The vulnerability of the decodeLength() method in the framework for developing network applications, servers, and clients using the Netty protocol allows a attacker to cause a service failure.
The vulnerability of the decodeLength method in the framework for developing network applications, servers, and Netty protocol clients is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Allocation of Resources Without Limits or Throttling
Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via excessive allocation. An attacker can exhaust system resources by sending...
CVE-2026-94400
Uncontrolled Resource Consumption CWE-400 in Kibana can lead denial of service via Excessive Allocation CAPEC-130...
CVE-2026-94396
Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...
CVE-2026-94399
Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...
AZL-104954 CVE-2026-94399 affecting package rubygem-elasticsearch 8.9.0-1
Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...
AZL-104945 CVE-2026-94397 affecting package rubygem-elasticsearch 8.9.0-1
Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...
CVE-2026-94408
Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...
