BIT-DOTNET-2026-50651 .NET Denial of Service Vulnerability

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

BIT-DOTNET-SDK-2026-50648 .NET Framework Denial of Service Vulnerability

Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network...

BIT-DOTNET-2026-50648 .NET Framework Denial of Service Vulnerability

Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network...

BIT-DOTNET-2026-50525 .NET Denial of Service Vulnerability

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

PT-2026-65379

Gitea: Denial of Service via Unbounded io.ReadAll in NPM Package Tag Endpoint in gitea.dev...

PT-2026-65017

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

PT-2026-65015

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

PT-2026-65028

Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network...

PT-2026-65012

Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network...

PT-2026-65031

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

PT-2026-65007

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

PT-2026-65019

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

PT-2026-65023

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

PT-2026-65003

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

Linux Distros Unpatched Vulnerability : CVE-2026-64274

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: goodix - clamp the device-reported contact count goodixtsreadinputreport copies the number of touch points reported by the device into an on-stack buffer...

GHSA-6VCH-Q96H-7GC3 etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline

Impact What kind of vulnerability is it? Who is impacted? A network attacker who can reach an etcd TLS listener can open many TCP connections and never send a ClientHello. Each connection spawns a goroutine in the etcd server process that blocks indefinitely inside tls.Conn.Handshake, and each is...

Smithy-RS: Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service

Summary Smithy-RS is a Rust code generation and runtime framework that generates HTTP clients and servers from Smithy interface definitions, powering the AWS SDK for Rust and custom service implementations. An issue exists where, under certain circumstances, allocation of resources without limits...

OmniFaces: Forged combined-resource IDs and related output/push boundaries

Forged combined-resource IDs CombinedResourceInfo accepts a path-derived ID without an authenticity check, inflates it without an output limit, converts it to attacker-selected resource identifiers, and retains unique IDs in an unbounded static cache. In bounded tests, 20,754 encoded bytes...

GHSA-FP43-VJ7G-PG92 OmniFaces: Forged combined-resource IDs and related output/push boundaries

Forged combined-resource IDs CombinedResourceInfo accepts a path-derived ID without an authenticity check, inflates it without an output limit, converts it to attacker-selected resource identifiers, and retains unique IDs in an unbounded static cache. In bounded tests, 20,754 encoded bytes...

GHSA-7PPR-R889-MCF2 blaze: Unbounded WebSocket message aggregation in http4s-blaze-server

Summary http4s-blaze-server aggregates the fragments of an incoming WebSocket message with no limit on total size or fragment count. A client that completes a WebSocket handshake can send an unterminated fragmented message and drive unbounded heap growth in the server JVM, resulting in denial of...