CVE-2026-90927

filebrowser through 2.63.23 contains a denial-of-service vulnerability in the /api/command handler . The server fails to limit WebSocket message size before performing permission checks, allowing any authenticated user to buffer arbitrarily large messages and exhaust server heap memory. Notably, ...

Allocation of Resources Without Limits or Throttling

Overview OPCFoundation.NetStandard.Opc.Ua is a package that contains the OPC UA reference implementation and is targeting the .NET Standard Library. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to improper TCP max message size...