PT-2026-87843

Name of the Vulnerable Software and Affected Versions Microsoft.OpenApi.YamlReader versions 2.0.0-preview.11 through 2.11.x Microsoft.OpenApi.YamlReader versions 3.0.0 through 3.9.x Microsoft.OpenApi.Readers versions prior to 1.6.30 Description Uncontrolled resource consumption occurs when parsin...

EUVD-2026-16064

LiquidJS has Exponential Memory Amplification through its replacefirst Filter $& Pattern...

PT-2026-28764

TemplateContext.LimitToString defaults to 0 unlimited. While Scriban implements a default LoopLimit of 1000, an attacker can still cause massive memory allocation via exponential string growth. Doubling a string for just 30 iterations generates over 1GB of text, instantly exhausting heap memory a...

GHSA-4JQ9-2XHW-JPX7 Java: DoS Vulnerability in JSON-JAVA

Summary A denial of service vulnerability in JSON-Java was discovered by ClusterFuzz. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used. There are two issues: 1 the parser bug can be used to circumvent a check that is supposed to...