Lucene search
K

5 matches found

OSV
OSV
added 2026/02/25 10:31 p.m.3 views

GHSA-76RV-2R9V-C5M6 zae-limiter: DynamoDB hot partition throttling enables per-entity Denial of Service

Summary All rate limit buckets for a single entity share the same DynamoDB partition key namespace/ENTITYid. A high-traffic entity can exceed DynamoDB's per-partition throughput limits 1,000 WCU/sec, causing throttling that degrades service for that entity — and potentially co-located entities in...

4.3CVSS5.5AI score0.00228EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2026/02/25 10:31 p.m.5 views

zae-limiter: DynamoDB hot partition throttling enables per-entity Denial of Service

Summary All rate limit buckets for a single entity share the same DynamoDB partition key namespace/ENTITYid. A high-traffic entity can exceed DynamoDB's per-partition throughput limits 1,000 WCU/sec, causing throttling that degrades service for that entity — and potentially co-located entities in...

5.3CVSS5.4AI score0.00228EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2026/02/25 2:56 p.m.24 views

CVE-2026-27695 zae-limiter: DynamoDB hot partition throttling enables per-entity Denial of Service

zae-limiter is a rate limiting library using the token bucket algorithm. Prior to version 0.10.1, all rate limit buckets for a single entity share the same DynamoDB partition key namespace/ENTITYid. A high-traffic entity can exceed DynamoDB's per-partition throughput limits 1,000 WCU/sec, causing...

4.3CVSS0.00228EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/02/25 2:56 p.m.1 views

CVE-2026-27695 zae-limiter: DynamoDB hot partition throttling enables per-entity Denial of Service

zae-limiter is a rate limiting library using the token bucket algorithm. Prior to version 0.10.1, all rate limit buckets for a single entity share the same DynamoDB partition key namespace/ENTITYid. A high-traffic entity can exceed DynamoDB's per-partition throughput limits 1,000 WCU/sec, causing...

4.3CVSS5.5AI score0.00228EPSS
Exploits0References2
OSV
OSV
added 2026/02/25 2:56 p.m.7 views

CVE-2026-27695 zae-limiter: DynamoDB hot partition throttling enables per-entity Denial of Service

zae-limiter is a rate limiting library using the token bucket algorithm. Prior to version 0.10.1, all rate limit buckets for a single entity share the same DynamoDB partition key namespace/ENTITYid. A high-traffic entity can exceed DynamoDB's per-partition throughput limits 1,000 WCU/sec, causing...

4.3CVSS5.6AI score0.00228EPSS
Exploits0References4
Rows per page
Query Builder