USN-8625-1: OpenSSL vulnerability

It was discovered that OpenSSL incorrectly allocated memory buffers in the SSL/TLS state machine when receiving handshake data. A remote attacker could possibly use this issue to cause OpenSSL to consume excessive memory, leading to a denial of service. This issue is known as the "HollowByte"...

EEF-CVE-2026-47073 Unbounded memory consumption in WebSocket client in hackney

Summary Allocation of Resources Without Limits or Throttling vulnerability in benoitc hackney allows Flooding. The WebSocket client in src/hackney\ws.erl imposes no upper bound on memory consumption in three code paths. First, read\handshake\response/3 accumulates received bytes into a growing...