CVE-2026-55449

CloudBeaver is a cloud database manager. Prior to 26.1.2, its resource-management project resolution accepts project identifiers without validating that they are safe path components. An authenticated user with resource-management privileges can supply a crafted project identifier that causes pat...

EUVD-2026-118482

CloudBeaver is a cloud database manager. Prior to 26.1.2, its resource-management project resolution accepts project identifiers without validating that they are safe path components. An authenticated user with resource-management privileges can supply a crafted project identifier that causes pat...

Linux Bluetooth Buffer Overflow DoS

The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems is related to incorrect resource management. Exploiting this vulnerability can allow an attacker to cause service failures...

Django resource management error vulnerability

Versions of Django prior to 6.1, from 6.0.4 up to 6.0.10, and from 5.2.13 up to 5.2.19 contain a resource management error vulnerability. This vulnerability arises because django.http.multipartparser.MultiPartParser consumes excessive memory when processing multipart file uploads containing Base6...

AG-UI protocol AG-UI resource management error vulnerability

AG-UI protocol AG-UI versions 0.0.58 and earlier contain a resource management error vulnerability. This vulnerability arises from the parseSSEStream function within the SSE Parser component, which leads to excessive resource consumption when processing the file...

CVE-2026-118947

A flaw was found in the UMA resource registration endpoint of the keycloak-services component, which provides the core logic for Keycloak's authorization and identity services. The issue occurs when remote resource management is enabled, allowing an authenticated user with specific permissions to...

CVE-2026-118947

A flaw was found in the UMA resource registration endpoint of the keycloak-services component, which provides the core logic for Keycloak's authorization and identity services. The issue occurs when remote resource management is enabled, allowing an authenticated user with specific permissions to...

EUVD-2026-113442

A flaw was found in the UMA resource registration endpoint of the keycloak-services component, which provides the core logic for Keycloak's authorization and identity services. The issue occurs when remote resource management is enabled, allowing an authenticated user with specific permissions to...

CVE-2026-118947

A flaw was found in the UMA resource registration endpoint of the keycloak-services component, which provides the core logic for Keycloak's authorization and identity services. The issue occurs when remote resource management is enabled, allowing an authenticated user with specific permissions to...

Dell OpenManage Enterprise resource management error vulnerability

Versions of Dell OpenManage Enterprise prior to 4.8.0 contain a resource management error vulnerability. This vulnerability stems from improper resource locking and may allow highly privileged attackers with local access to bypass security mechanisms...

Google Chrome resource management error vulnerability

Google Chrome versions prior to 156.0.8078.79 contain a resource management error vulnerability. This flaw stems from a post-free reuse issue in Blink, which may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Filecoin Pin resource management error vulnerability

Filecoin Pin versions 1.1.0 and earlier contain a resource management error vulnerability. This vulnerability stems from the lack of rate limiting and per-user quotas on POST /pins in the file src/Filecoin Pinning-server.ts. Additionally, backend processing in src/Filecoin Pin-store.ts fails to...

GNOME glib-networking resource management error vulnerability

GNOME glib-networking contains a resource management error vulnerability. This vulnerability arises because, when establishing TLS 1.3 connections, glib-networking fails to limit the number of session tickets that can be retained per host by the client side. A malicious server can exploit this by...

CVE-2026-118947: Red Hat: A flaw was found in the UMA resource registration endpoint of the keycloak-services component, which provides the core…

A flaw was found in the UMA resource registration endpoint of the keycloak-services component, which provides the core logic for Keycloak's authorization and identity services. The issue occurs when remote resource management is enabled, allowing an authenticated user with specific permissions to...

Ryan Grove Crass resource management error vulnerability

Versions prior to Ryan Grove Crass 1.0.7 contain a resource management error vulnerability. This vulnerability arises from performing unbounded exponentiation when parsing CSS scientific notation values, potentially leading to excessive CPU and memory consumption and resulting in a crash...

PT-2026-132866

A flaw was found in the UMA resource registration endpoint of the keycloak-services component, which provides the core logic for Keycloak's authorization and identity services. The issue occurs when remote resource management is enabled, allowing an authenticated user with specific permissions to...

Progress Software WS_FTP Server resource management error vulnerability

Versions prior to Progress Software WSFTP Server 2024.0.7 and 2025.0.4 contain a resource management error vulnerability. This vulnerability stems from the backend receiving sessions without proper release in the Ad Hoc Transfer component, potentially leading to server resource exhaustion and...

DNSmasq resource management error vulnerability

dnsmasq contains a resource management error vulnerability. This vulnerability arises because the TCP DNS service uses a fixed number of subprocesses and fails to set a receive timeout for client connections. Remote attackers can exploit this by establishing idle TCP connections to port 53, there...

Kubeflow pipeline resource management error vulnerability

Versions of Kubeflow Pipelines prior to 2.18.0 contain a resource management error vulnerability. This vulnerability arises because the API server decompresses uploaded pipeline archives when locating or reading them; it fails to adequately restrict the size of the extracted data. Small ZIP or...

Authlib joserfc resource management error vulnerability

Authlib versions prior to 1.7.5 contain a resource management error vulnerability. This vulnerability arises because decryptjson fails to limit the number of entries in the JWE General JSON Serialization recipients array; each entry is then processed via decryptcek. As a result, unauthenticated...