EUVD-2026-73741

Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability...

CVE-2026-79695

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Handling of Highly Compressed Data Data Amplification vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability,...

CVE-2026-79695

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Handling of Highly Compressed Data Data Amplification vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability,...

EUVD-2026-74849

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Handling of Highly Compressed Data Data Amplification vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability,...

CVE-2026-79695

Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application are affected by an Improper Handling of Highly Compressed Data (Data Amplification) vulnerability. Affected versions are Appliance prior to 5.36.00.16 and Application prior to 5.36.00.00 . An unauthenticated attacker with remote netw...

Duplicate Advisory: Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8cp2-47hg-mfgh. This link is maintained to preserve external references. Original Description Improper handling of highly compressed data data amplification in ASP.NET Core allows an unauthorized attacker to den...

CVE-2026-69304

Improper handling of highly compressed data data amplification in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-69304

CVE-2026-69304 is a Denial of Service (DoS) vulnerability in ASP.NET Core caused by improper handling of highly compressed data, also referred to as data amplification . An unauthorized attacker over a network can trigger a denial of service without requiring prior authentication or user interact...

ASP.NET Core Denial of Service Vulnerability

Improper handling of highly compressed data data amplification in ASP.NET Core allows an unauthorized attacker to deny service over a network...

PT-2026-87350

Microsoft's Security Advisory CVE-2026-69304 hits ASP․NET Core, a denial of service vulnerability. ASP․NET Core's MEV IValidationMessageFormatter is superseded by ValidationAttribute․FormatMessage, which the BCL now provides. The interface gets dropped in favor of the base class method. F ships n...

Security Bulletin: MongoDB Enterprised Advanced affected by: Data Amplification, Uncontrolled Resource Consumption (CVE-2025-58057, CVE-2026-42583)

Summary There are vulnerabilities in netty-codec-4.1.132.Final.jar used in MongoDB Enterprised Advanced for IBM, involving CVE-2025-58057, CVE-2026-42583. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2025-58057 DESCRIPTION: Netty is an asynchronous event-driven network...

APM Server 8.19.20, 9.4.5, 9.5.1 Security Update (ESA-2026-152)

Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map...

Security Bulletin: IBM SPSS Modeler is affected by vulnerabilities in Apache Thrift

Summary IBM SPSS Modeler is affected by vulnerabilities in Apache Thrift. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-43871 DESCRIPTION: Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification through the Hpack.decodeHeaders path in ember-core/shared/src/main/scala/org/http4s/ember/core/h2/Hpack.scala. An attacker can exhaust heap memory and crash an HTTP/2 server...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification through the Hpack.decodeHeaders path in ember-core/shared/src/main/scala/org/http4s/ember/core/h2/Hpack.scala. An attacker can exhaust heap memory and crash an HTTP/2 server...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification through the Hpack.decodeHeaders path in ember-core/shared/src/main/scala/org/http4s/ember/core/h2/Hpack.scala. An attacker can exhaust heap memory and crash an HTTP/2 server...

K000163067: Apache Thrift vulnerabilities CVE-2026-48586 and CVE-2026-55969

Security Advisory Description CVE-2026-48586 Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes th...

Security Bulletin: Vulnerabilities found in Watson Data Intelligence

Summary Multiple Vulnerabilities were addressed in Watson Data Intelligence version 5.3.1 Patch 11 Vulnerability Details CVEID:CVE-2026-41608 DESCRIPTION: Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrif...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview exceljs is a package to Read, manipulate and write spreadsheet data and styles to XLSX and JSON. Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification via Workbook.xlsx.load in lib/xlsx/xlsx.js. An attacker can exhaust memory a...

CVE-2026-19671 Improper handling of highly compressed data (data amplification) in CISA Malcolm

Malcolm's upload-processing pipeline scripts/safe-extract.py enforces entry-count, nesting-depth, and total-uncompressed-byte limits when extracting container archives zip/tar/rar/7z via libarchive, but those limits are not applied when the uploaded file is a single-stream compressed format .gz,...