CVE-2026-11586

By default, curl automatically responds to WebSocket PING frames. Because curl lacks an upper bound on memory allocation for unacknowledged frames, a malicious server can exhaust all available memory by flooding curl with rapid, sequential PING messages...

curl: curl: Denial of Service via WebSocket PING flood

A flaw was found in curl. A malicious server can exploit this vulnerability by sending rapid, sequential WebSocket PING messages. Due to a lack of an upper bound on memory allocation for unacknowledged frames, curl can be forced to exhaust all available memory, leading to a denial of service...

PT-2026-51742

Name of the Vulnerable Software and Affected Versions libcurl affected versions not specified Description The WebSocket component of the libcurl library contains a resource allocation issue. By default, curl automatically responds to WebSocket PING frames. Because the software lacks an upper boun...

EUVD-2024-31658

Malicious code in bioql PyPI...

CVE-2023-6533

Malformed Device Reset Locally Command Class packets can be sent to the controller, causing the controller to assume the end device has left the network. After this, frames sent by the end device will not be acknowledged by the controller. This vulnerability exists in PC Controller v5.54.0, and...

PT-2024-14999 · Unknown · Pc Controller

Name of the Vulnerable Software and Affected Versions: PC Controller versions prior to 5.54.0 Description: The issue arises from malformed Device Reset Locally Command Class packets being sent to the controller. This causes the controller to incorrectly assume that the end device has left the...