EUVD-2026-103192

Text::CSVXS versions before 1.65 for Perl allow memory exhaustion by allocating one entry per index of an RFC 7111 selector in fragment. fragment expands a row= or col= selector into an array with one element per selected index before it reads any data, and it does not clamp an explicit end colum...

CVE-2026-110752

Text::CSVXS versions before 1.65 for Perl allow memory exhaustion by allocating one entry per index of an RFC 7111 selector in fragment. fragment expands a row= or col= selector into an array with one element per selected index before it reads any data, and it does not clamp an explicit end colum...

CVE-2026-110754

Text::CSVXS versions before 1.65 for Perl leak the parsed fields of a record that fails to parse in getline. getline collects the fields of a record into a new array and returns a reference to it only when the parse succeeds. When the record has a syntax error, getline returns undef and never fre...

CVE-2026-67222

A flaw was found in rabbitmq-server. An authenticated remote attacker with policymaker privileges can exploit this issue when the Shovel or Federation plugin is enabled by supplying a specially crafted authentication mechanism value. This causes the server to permanently exhaust Erlang virtual...

CVE-2026-110754

The Text::CSV_XS module for Perl (versions before 1.65 ) contains a memory leak vulnerability within the getline() function. When a record contains a syntax error, the function returns undef but fails to free the array or the fields already parsed during the process. Consequently, a long-running ...

CVE-2026-110754 Text::CSV_XS versions before 1.65 for Perl leak the parsed fields of a record that fails to parse in getline

Text::CSVXS versions before 1.65 for Perl leak the parsed fields of a record that fails to parse in getline. getline collects the fields of a record into a new array and returns a reference to it only when the parse succeeds. When the record has a syntax error, getline returns undef and never fre...

CVE-2026-110752

The Text::CSV_XS Perl module (versions before 1.65 ) is vulnerable to memory exhaustion due to improper memory sizing in the fragment() function. The root cause is that the module expands row= or col= selectors into arrays with one element per index without clamping the end column to the row size...

CVE-2026-110752 Text::CSV_XS versions before 1.65 for Perl allow memory exhaustion by allocating one entry per index of an RFC 7111 selector in fragment

Text::CSVXS versions before 1.65 for Perl allow memory exhaustion by allocating one entry per index of an RFC 7111 selector in fragment. fragment expands a row= or col= selector into an array with one element per selected index before it reads any data, and it does not clamp an explicit end colum...

CVE-2026-67414

A flaw was found in rabbitmq-server. This vulnerability allows an authenticated remote attacker to cause a Denial of Service DoS by exhausting broker memory. When processing Advanced Message Queuing Protocol AMQP messages, the parser fails to limit the aggregate number of array elements across an...

CVE-2026-67415

A flaw was found in rabbitmq-server. An authenticated remote attacker with administrative privileges can cause a Denial of Service DoS by submitting crafted runtime parameters through the Shovel Management HTTP API. Because these parameters are converted into non-reclaimable memory identifiers...

EUVD-2026-103177

StreamReadConstraints.maxNameLength default 50,000 characters is intended to bound how much memory a single JSON Object property name can consume while being parsed, independently of the much larger maxStringLength default 100,000,000 characters that bounds ordinary string values. For parsers bui...

CVE-2026-68498

The jackson-core library (specifically versions 2.16.0 and 3.0.0 ) is vulnerable to a memory-exhaustion Denial of Service (DoS) via CVE-2026-68498 . The root cause is that ReaderBasedJsonParser fails to enforce the StreamReadConstraints.maxNameLength (default 50,000 characters) for character-back...

CVE-2026-95859

The libp2p-rust networking stack (prior to version 0.49.5 ) contains a vulnerability in Gossipsub control-message handling. The root cause is that the system unconditionally adds attacker-supplied topic hashes to connected_peer.topics without verifying if the peer previously subscribed to them. A...

CVE-2026-16251

Mattermost versions 11.10.x = 11.10.0, 11.7.x = 11.7.9, 11.9.x = 11.9.1, 11.8.x = 11.8.5 fail to limit the size of remote image responses buffered in memory during local image proxy direct fetches, which allows a remote attacker to cause memory exhaustion on the server via a crafted oversized ima...

CVE-2026-16251 Mattermost local image proxy allows server memory exhaustion via unbounded image response buffering

Mattermost versions 11.10.x = 11.10.0, 11.7.x = 11.7.9, 11.9.x = 11.9.1, 11.8.x = 11.8.5 fail to limit the size of remote image responses buffered in memory during local image proxy direct fetches, which allows a remote attacker to cause memory exhaustion on the server via a crafted oversized ima...

CVE-2026-16251

Mattermost versions 11.10.x <= 11.10.0 , 11.7.x <= 11.7.9 , 11.9.x <= 11.9.1 , and 11.8.x

EUVD-2026-102750

Mattermost versions 11.10.x = 11.10.0, 11.7.x = 11.7.9, 11.9.x = 11.9.1, 11.8.x = 11.8.5 fail to limit the size of remote image responses buffered in memory during local image proxy direct fetches, which allows a remote attacker to cause memory exhaustion on the server via a crafted oversized ima...

CVE-2026-111377

A flaw was found in FreeRDP. An authenticated remote attacker can cause a Denial of Service DoS by initiating a message on a static virtual channel and repeatedly sending data fragments without completing the transmission. Because the server fails to enforce cumulative size limits during message...

CVE-2026-111378

A flaw was found in FreeRDP. An unauthenticated remote attacker can cause a Denial of Service DoS by exhausting server memory. When processing Network Level Authentication NLA connections over Transport Layer Security TLS, the server misinterprets invalid protocol bytes as an incomplete packet...

CVE-2026-111377

FreeRDP from 2.0.0 before 3.32.0 contains an unbounded reassembly vulnerability in WTSProcessChannelData that fails to enforce cumulative fragment limits. Authenticated clients can start a static virtual channel message, withhold the LAST flag, and send endless fragments to exhaust server memory...