Все уязвимости

pypdf: Possible long runtimes/large memory usage when retrieving outlines

pypdf: Possible large memory usage for exceptions in strict mode

.NET Denial of Service Vulnerability

.NET Denial of Service Vulnerability

minimatch: potential denial of service via globparts amplification

Crypt::Age versions before 0.004 for Perl allow CPU exhaustion via an unbounded number of recipient stanzas, each costing an X25519 scalar multiplication in unwrap_file_key

Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal digits under allow_bignum

undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering

Message parser retains every identical singleton RDATA, enabling wire-to-work amplification

Misskey: Lack of rate limiting and size restrictions in RSS fetching API

Excessive CPU consumption from repeated initial window changes in net/http

Reject malformed ECH outer extension references in crypto/tls

HTTP/2 server memory exhaustion due to Trailer headers in net/http

IBM DataPower Gateway Denial of Service

commonmark 2.0.0 before 2.8.4 Denial of Service via XML

wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusion

Apache Struts: Disproportionate response size when rendering BigDecimal request parameters

Apache Directory LDAP API: Denial of service via excessive bcrypt cost factor in stored passwords

Zebra before 6.2.1 Denial of Service via Uncapped V6 Shielded Proof Verification

Zebra before 6.1.0 Batch-Verification Poisoning DoS via Unattributed Pushed Transactions

Zebra before 6.0.0 Denial of Service via Synchronous Script FFI Verification

Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout

Concrete CMS below 9.5.3 is vulnerable to Authenticated Denial of Service via Unescaped SQL LIKE Wildcards in Keyword Search

Marshmallow has DoS in Schema.load(many)

body-parser vulnerable to denial of service when url encoding is enabled

Robots::Validate versions from 0.3.2 before 0.3.11 for Perl allow unbounded outbound DNS queries per validation via a forward-confirmation loop that does not bound the names it queries

Excessive Memory Use Buffering DTLS Records for a Future Epoch

Envoy vulnerable to HTTP/2 memory exhaustion via cookie header size bypass and HPACK amplification

Frontend DoS via the popup.testtriggerexpr action

Frontend DoS via the validate.api.exists action