PT-2026-82617

Name of the Vulnerable Software and Affected Versions nltk PorterStemmer versions prior to 3.10.3 Description The PorterStemmer contains an inefficient-algorithmic-complexity issue that can lead to a denial of service. The is consonant helper function walks backward over trailing 'y' characters o...

CVE-2026-72663

CVE-2026-72663 concerns Kibana with an inefficient algorithmic complexity (CWE-407) in TSVB visualizations that can cause denial of service. A specially crafted, deeply nested expression evaluated in a TSVB visualization may trigger worst-case behavior that ties up a Kibana request thread, making...

CVE-2026-72685

CVE-2026-72685 describes an inefficient algorithmic complexity in Elasticsearch that allows a low-privileged authenticated user, who can index documents, to submit a small crafted document causing a worker thread to be consumed for an extended period, degrading indexing availability. Affected ver...

Inefficient Algorithmic Complexity

Overview org.bouncycastle:bcprov-ext-jdk14 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the IETFUtils.valueToString method, reached through X500Name.toString, equals, and hashCode via...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the IETFUtils.valueToString method, reached through X500Name.toString, equals, and hashCode via AbstractX500NameStyle, which escapes each special character with vBuf.insertindex, "\" on the same...

The vulnerability of the cJSON_Compare() function in the cJSON.c library for working with JSON objects in C language allows a attacker to cause a service denial.

The vulnerability of the cJSONCompare function in the cJSON.c library for working with JSON objects in C language is related to its inefficient algorithmic complexity. Exploiting this vulnerability could allow an attacker to cause a service failure...

UBUNTU-CVE-2026-67216

cJSON through 1.7.19 contains an inefficient algorithmic complexity flaw in cJSONCompare. When comparing objects, the function recurses into each shared subtree twice, once in each direction, with no depth guard, making the running time exponential in nesting depth. A small, deeply nested documen...

BIT-THRIFT-2026-55968 Apache Thrift: Node.js quadratic-time DoS in server receive transports

Inefficient Algorithmic Complexity, Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Node.js bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

Inefficient Algorithmic Complexity

Overview elysia is an Ergonomic Framework for Human Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via the getAll function in form data normalization for multipart/form-data endpoints. An attacker can cause excessive CPU consumption by submitting a large...

Inefficient Algorithmic Complexity

Overview @conform-to/dom is an A set of opinionated helpers built on top of the Constraint Validation API Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the parseSubmission process. An attacker can cause excessive CPU consumption by submitting forms with...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the --listen process due to inefficient HTTP body processing using repeated string concatenation, which results in quadratic time complexity. An attacker can cause excessive CPU usage and monopolize...

Security Bulletin: Vulnerabilities exists in IBM Netezza Software

Summary Vulnerabilities identified in IBM Netezza Software have been addressed in version 11.3.1.1. Vulnerability Details CVEID:CVE-2024-24786 DESCRIPTION: The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when...

CVE-2026-11312

A vulnerability was found in bytedance InfiniStore up to 0.2.33. The impacted element is the function purgekvmap in the library /src/infinistore.h of the component KV Map Handler. Performing a manipulation results in inefficient algorithmic complexity. The attack requires a local approach. The...

PT-2026-46877

Name of the Vulnerable Software and Affected Versions bytedance InfiniStore versions prior to 0.2.34 Description An issue exists in the KV Map Handler component within the /src/infinistore.h library. A local attacker can perform a manipulation of the purge kv map function, resulting in inefficien...

EUVD-2026-28800

Absinthe: Quadratic fragment-name uniqueness check...

Inefficient Algorithmic Complexity

Overview Twisted is an event-based network programming and multi-protocol integration framework. Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity through the decode function in the DNS name decompression process. An attacker can cause the server to hang and...

Security Bulletin: Vulnerabilities in python affects IBM Netezza Appliance

Summary The python package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2025-12084, CVE-2025-13836 Vulnerability Details CVEID:CVE-2025-12084 DESCRIPTION: When building nested elements using xml.dom.minidom methods such as appendChild that have a...

Security Bulletin: Multiple vulnerabilities in Python affect AIX

Summary Vulnerabilities in Python could allow a null pointer dereference CVE-2026-32776, CVE-2026-32778, an infinite loop CVE-2026-32777, or impact availability CVE-2025-12084. Python is used by AIX as part of Ansible node management automation. Vulnerability Details CVEID:CVE-2026-32776...

CVE-2025-11230 Denial of service vulnerability in HAProxy mjson library

Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests...

CVE-2025-11230

CVE-2025-11230 affects HAProxy due to inefficient algorithm complexity in the mjson library, enabling remote denial-of-service via specially crafted JSON requests. Connected documents specify vulnerable haproxy versions: < 2.4.24-2 and