23766 matches found
CVE-2026-100648 vllm before 0.29.0 Uncontrolled Resource Consumption via Audio Decoding
vllm before 0.29.0 fails to enforce VLLMMAXAUDIOCLIPFILESIZEMB limit in multimodal chat audio decoding, allowing unauthenticated clients to bypass file size restrictions. Attackers can submit oversized audio files through chat endpoints to consume excessive memory and CPU resources during decodin...
CVE-2026-100648 vllm before 0.29.0 Uncontrolled Resource Consumption via Audio Decoding
vllm before 0.29.0 fails to enforce VLLMMAXAUDIOCLIPFILESIZEMB limit in multimodal chat audio decoding, allowing unauthenticated clients to bypass file size restrictions. Attackers can submit oversized audio files through chat endpoints to consume excessive memory and CPU resources during decodin...
CVE-2026-100542
The OpenClaw (npm package 'openclaw' ) versions >= 2026.5.28 and
CVE-2026-100542 OpenClaw before 2026.8.1 Extraction Limit Bypass via tar.bz2
OpenClaw npm package 'openclaw' versions = 2026.5.28 and 2026.8.1 mishandle archive listings in the tar.bz2 skill installer: bounded command-output suffixes were treated as complete listings of the archive. A crafted .tar.bz2/.tbz2 skill archive can push prohibited entries out of both retained...
EUVD-2026-87508
OpenClaw npm package 'openclaw' versions = 2026.5.28 and 2026.8.1 mishandle archive listings in the tar.bz2 skill installer: bounded command-output suffixes were treated as complete listings of the archive. A crafted .tar.bz2/.tbz2 skill archive can push prohibited entries out of both retained...
CVE-2026-94400: Uncontrolled Resource Consumption
Uncontrolled Resource Consumption CWE-400 in Kibana can lead denial of service via Excessive Allocation CAPEC-130...
PT-2026-99433
Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description Uncontrolled Resource Consumption in Kibana can lead to a denial of service through excessive allocation. This occurs when the system fails to limit the amount of resources allocated, allowing...
CVE-2026-100662: Uncontrolled Resource Consumption
Netty's HTTP/3 codec io.netty:netty-codec-http3 versions 4.2.0.Final through 4.2.17.Final contain an uncontrolled resource consumption vulnerability in the QPACK encoder-stream instruction decoder QpackEncoderHandler, installed on the peer-initiated unidirectional QPACK encoder stream, type 0x02...
PT-2026-99428
Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description Uncontrolled Resource Consumption in Elasticsearch can lead to a denial of service through excessive allocation, which occurs when a system allocates more memory or resources than...
CVE-2026-94398: Uncontrolled Resource Consumption
Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...
PT-2026-99430
Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description Uncontrolled Resource Consumption in Elasticsearch can lead to a denial of service through excessive allocation. This occurs when the system fails to limit the amount of resources...
PT-2026-99431
Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description Uncontrolled Resource Consumption in Elasticsearch can lead to a denial of service through excessive allocation. This occurs when the system fails to limit the amount of resources...
PT-2026-99427
Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description Uncontrolled Resource Consumption in Elasticsearch can lead to a denial of service through excessive allocation, which occurs when a system allocates more memory or resources than...
PT-2026-99429
Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description Uncontrolled Resource Consumption in Elasticsearch can lead to a denial of service through excessive allocation. This occurs when the system fails to limit the amount of resources...
CVE-2026-100542: Uncontrolled Resource Consumption
OpenClaw npm package 'openclaw' versions = 2026.5.28 and 2026.8.1 mishandle archive listings in the tar.bz2 skill installer: bounded command-output suffixes were treated as complete listings of the archive. A crafted .tar.bz2/.tbz2 skill archive can push prohibited entries out of both retained...
CVE-2026-100651: Uncontrolled Resource Consumption
vLLM before 0.29.0 fails to enforce decoder prompt-length validation on the disaggregated serving endpoint /inference/v1/generate. When the request contains a 'features' multimodal payload, vllm/entrypoints/serve/disagg/serving.py builds a multimodal EngineInput directly from the caller-supplied...
PT-2026-99333
Name of the Vulnerable Software and Affected Versions Netty HTTP/3 codec versions 4.2.0.Final through 4.2.17.Final Description An uncontrolled resource consumption issue exists in the QPACK encoder-stream instruction decoder within the QpackEncoderHandler installed on the peer-initiated...
PT-2026-99432
Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description Uncontrolled Resource Consumption in Elasticsearch can lead to a denial of service through excessive allocation, which occurs when a system allocates more resources than it can handle,...