255 matches found
urllib3: urllib3 Streaming API improperly handles highly compressed data
A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header e.g., gzip, deflate, br, or zstd. The library must read compressed data from the network and decompress it...
The vulnerability of the onHeaderDecoded() function in Android operating systems, allowing a hacker to trigger a service failure
The vulnerability of the onHeaderDecoded function in Android operating systems is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a hacker to cause a service failure...
CLSA-2026-1777048319 openssl: Fix of CVE-2023-0464
CVE-2023-0464: fix excessive resource use when verifying X.509 policy constraints...
Security update for cockpit (important)
openSUSE security update: security update for cockpit ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20504-1 Rating: important References: bsc1257836 bsc1258641 Cross-References: CVE-2026-25547 CVE-2026-26996 CVSS scores: CVE-2026-25547 SUSE : 7.5...
EUVD-2026-22736
ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. A high-privileged attacker could exploit this vulnerability and exhaust system resources, reducing application speed. Exploitation o...
CVE-2026-27308
CVE-2026-27308 affects ColdFusion 2023.18, 2025.6 and earlier. It describes an Uncontrolled Resource Consumption vulnerability that canCause application denial-of-service by exhausting system resources. An attacker with high privileges, located adjacent to the target, can exploit this without use...
The vulnerability of the Node.js software platform, related to uncontrolled resource consumption, allows attackers to compromise the accessibility of protected information.
The vulnerability of the Node.js software platform is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of protected information...
The vulnerability of the Avahi service detection system in local networks, related to uncontrolled resource consumption, allows a hacker to cause a service failure.
The vulnerability of the Avahi service detection system in local networks is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a hacker to cause a service failure...
Allocation of Resources Without Limits or Throttling
Overview Scriban is a Scriban is a fast, powerful, safe and lightweight scripting language and engine for .NET, which was primarily developed for text templating with a compatibility mode for parsing liquid templates. Today, not only Scriban can be used in text templating scenarios, but also can ...
EUVD-2026-12833
apko affected by unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams...
ALSA-2026:4453 Important: .NET 10.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.104 and .NET Runtime...
CVE-2025-70059
An issue pertaining to CWE-400: Uncontrolled Resource Consumption was discovered in YMFE yapi v1.12.0 and allows attackers to cause a denial of service...
CVE-2026-21619
Uncontrolled Resource Consumption, Deserialization of Untrusted Data vulnerability in hexpm hexcore hexapi modules, hexpm hex mixhexapi modules, erlang rebar3 r3hexapi modules allows Object Injection, Excessive Allocation. This vulnerability is associated with program files src/hexapi.erl,...
Security update for erlang
This update for erlang fixes the following issues: CVE-2025-48039:Fixed an excessive use of system resources. bsc1249469 CVE-2025-48038:Fixed an excessive use of system resources. bsc1249470 CVE-2025-48040:Fixed an excessive resource consumption. bsc1249472 Patch Instructions: To install this SUS...
The vulnerability of the SSH service of Cisco Ultra-Reliable Wireless Backhaul (URWB) network devices on Cisco IEC6400 Wireless Backhaul Edge Compute devices allows a attacker to cause a service failure.
The vulnerability of the SSH service of Cisco’s Ultra-Reliable Wireless Backhaul URWB network devices for Cisco IEC6400 Wireless Backhaul Edge Compute devices is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service...
CVE-2026-25547 Uncontrolled Resource Consumption in @isaacs/brace-expansion
@isaacs/brace-expansion is a hybrid CJS/ESM TypeScript fork of brace-expansion. Prior to version 5.0.1, @isaacs/brace-expansion is vulnerable to a denial of service DoS issue caused by unbounded brace range expansion. When an attacker provides a pattern containing repeated numeric brace ranges, t...
GHSA-7H2J-956F-4VF2 @isaacs/brace-expansion has Uncontrolled Resource Consumption
Summary @isaacs/brace-expansion is vulnerable to a Denial of Service DoS issue caused by unbounded brace range expansion. When an attacker provides a pattern containing repeated numeric brace ranges, the library attempts to eagerly generate every possible combination synchronously. Because the...
CVE-2026-24826
Out-of-bounds Write, Divide By Zero, NULL Pointer Dereference, Use of Uninitialized Resource, Out-of-bounds Read, Reachable Assertion vulnerability in cadaver turso3d.This issue affects...
CVE-2026-24826
Out-of-bounds Write, Divide By Zero, NULL Pointer Dereference, Use of Uninitialized Resource, Out-of-bounds Read, Reachable Assertion vulnerability in cadaver turso3d.This issue affects...