CVE-2026-108529

The mtrudel bandit web server (versions 0.3.4 before 1.14.0 ) is vulnerable to an Inefficient Algorithmic Complexity vulnerability in its HTTP/2 implementation. An unauthenticated remote attacker can exhaust server CPU by opening thousands of streams that block on the connection send window. By s...

CVE-2026-108529 SETTINGS and stream-0 WINDOW_UPDATE frames trigger quadratic work over blocked streams in Bandit

Inefficient Algorithmic Complexity vulnerability in the HTTP/2 implementation of mtrudel bandit allows an unauthenticated remote attacker to exhaust server CPU via small SETTINGS or connection-level WINDOWUPDATE frames. The attacker opens thousands of streams whose responses block on the connecti...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via unbounded nesting depth in the inline parser, where processing deeply nested inline elements such as emphasis or links causes uncontrolled resource consumption. An attacker can submit input with...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Netty (CVE-2026-62243, CVE-2026-75595, CVE-2026-75596)

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Netty: Improper Validation of Certificate with Host Mismatch, Improper Check for Unusual or Exceptional Conditions, and Inefficient Algorithmic Complexity. Netty is used in our Speech microservices. These...

Inefficient Algorithmic Complexity

Overview djangorestframework is a powerful and flexible toolkit for building Web APIs. Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via unbounded parsing of the Accept and Content-Type headers in content negotiation. An attacker can send a request with an...

Linux Distros Unpatched Vulnerability : CVE-2026-96958

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. CVE-2026-96958 Note that Nessus relies on the presenc...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via repeated string concatenation in the seek function of src/PIL/GifImagePlugin.py when parsing GIF comment extension blocks. Each comment block encountered during frame seeking is appended to a growi...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via repeated string concatenation in the seek function of src/PIL/GifImagePlugin.py when parsing GIF comment extension blocks. An attacker can supply a GIF file containing many comment blocks, causing...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via the nextobjectid function in src/PIL/PdfParser.py when saving a multi-frame image as a multi-page PDF using im.savefp, "PDF", saveall=True. The function computes the next PDF object ID by calling m...

CVE-2026-110688: Inefficient Algorithmic Complexity

Cpanel::JSON::XS versions from 4.51 before 4.80 for Perl allow quadratic CPU use by revalidating the remaining buffer per value in incrparse. At the first non-ASCII byte in a string, the decoder validates UTF-8 from there to the end of its input. incrparse decodes each buffered value with a fresh...

CVE-2026-101021

The J4Care dcm4che software is vulnerable to an Inefficient Algorithmic Complexity flaw (CWE-407) within the MultipartInputStream component. The root cause is that the component performs inefficient boundary matching and unnecessary buffer copying. An attacker can provide crafted multipart input ...

CVE-2026-101021 J4Care dcm4che Inefficient Algorithmic Complexity

MultipartInputStream performs inefficient boundary matching and unnecessary buffer copying. Crafted multipart input can force excessive boundary comparisons and repeated copying...

Linux Distros Unpatched Vulnerability : CVE-2026-70196

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network. CVE-2026-70196 Note that Nessus relies on the...

CVE-2026-101021: Inefficient Algorithmic Complexity

MultipartInputStream performs inefficient boundary matching and unnecessary buffer copying. Crafted multipart input can force excessive boundary comparisons and repeated copying...

Inefficient Algorithmic Complexity

Overview org.webjars.npm:nodemailer is an Easy as cake e-mail sending from your Node.js applications Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the parseHeaders method of MessageParser in src/dkim/message-parser.ts, whose unfold loop appends each...

Inefficient Algorithmic Complexity

Overview nodemailer is an Easy as cake e-mail sending from your Node.js applications Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the parseHeaders method of MessageParser in src/dkim/message-parser.ts, whose unfold loop appends each continuation line...

Linux Distros Unpatched Vulnerability : CVE-2026-69651

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. CVE-2026-69651 Note that Nessus relies on the presenc...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the processing of signed XML data due to inefficient algorithmic complexity in the System.Security.Cryptography.Xml and System.Private.Xml components. An attacker can cause excessive resource...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the processing of signed XML data due to inefficient algorithmic complexity in the System.Security.Cryptography.Xml and System.Private.Xml components. An attacker can cause excessive resource...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the processing of signed XML data due to inefficient algorithmic complexity in the System.Security.Cryptography.Xml and System.Private.Xml components. An attacker can cause excessive resource...