CWE-770

The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents.

AgataSoft PingMaster Pro 2.1 contains a denial of service vulnerability in the Trace Route feature that allows attackers

Managed Switch Port Mapping Tool 2.85.2 contains a denial of service vulnerability that allows attackers to crash the ap

Nsauditor 3.2.2.0 contains a denial of service vulnerability that allows attackers to crash the application by overwriti

SyncBreeze 10.0.28 contains a denial of service vulnerability in the login endpoint that allows remote attackers to cras

TapinRadio 2.13.7 contains a denial of service vulnerability in the application proxy settings that allows attackers to

A denial-of-service vulnerability exists in the NetX IPv6 component functionality of Eclipse ThreadX NetX Duo. A special

Suricata is a network IDS, IPS and NSM engine. Prior to versions 8.0.3 and 7.0.14, crafted DCERPC traffic can cause Suri

Suricata is a network IDS, IPS and NSM engine. Prior to versions 8.0.3 and 7.0.14, specially crafted traffic can cause S

aSc TimeTables 2021.6.2 contains a denial of service vulnerability that allows attackers to crash the application by ove

The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query p

Code Blocks 20.03 contains a denial of service vulnerability that allows attackers to crash the application by manipulat

Frigate 2.02 contains a denial of service vulnerability that allows attackers to crash the application by sending oversi

VirtualTablet Server 3.0.2 contains a denial of service vulnerability that allows attackers to crash the service by send

apko allows users to build and publish OCI container images built from apk packages. From version 0.14.8 to before 1.1.1

UltraVNC Viewer 1.2.4.0 contains a denial of service vulnerability that allows attackers to crash the application by man

ProficySCADA for iOS 5.0.25920 contains a denial of service vulnerability that allows attackers to crash the application

AdonisJS is a TypeScript-first web framework. Prior to versions 10.1.3 and 11.0.0-next.9, a denial of service (DoS) vuln

Connections received from the proxy port may not count towards total accepted connections, resulting in server crashes i

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.8 before 18.6.6, 18.7 before 18.7.4, and 1

A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. Soon after

Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.8, there is a potential vulnerability in Traefik managi

ntpd-rs is a full-featured implementation of the Network Time Protocol. Prior to 1.7.1, an attacker can remotely induce

Centova Cast 3.2.12 contains a denial of service vulnerability that allows attackers to overwhelm the system by repeated

XMedia Recode 3.4.8.6 contains a denial of service vulnerability that allows attackers to crash the application by loadi

jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of the first argument of the `addImage`

go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version 1.17.0, an atta

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1

Fiber is an Express inspired web framework written in Go. In versions on the v3 branch prior to 3.1.0, the use of the `f

Wasmtime is a runtime for WebAssembly. Prior to versions 24.0.6, 36.0.6, 4.0.04, 41.0.4, and 42.0.0, Wasmtime's implemen

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.5, 18.8 before 18.8.5, and 1

TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. Versions prior to version 2.02 are vulnerable to a De

TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. Versions prior to version 2.02 have a Denial of Servi

An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. `URLField.to_python()` in Django

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standar

Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability in Multer prior to version 2.1.1 allo

OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.10.2, the PasswordHash AP

OpenClaw versions prior to 2026.2.13 contain a denial of service vulnerability in webhook handlers that buffer request b

OpenClaw versions prior to 2026.2.14 contain a denial of service vulnerability in the fetchWithGuard function that alloc

jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Pr

CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a denial of service vulnerability exists in CoreDN

express-rate-limit is a basic rate-limiting middleware for Express. In versions starting from 8.0.0 and prior to version

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service ove

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior 9.5.2-alph

OpenClaw versions 2026.2.21-2 up to, but not including, 2026.2.22, and @openclaw/voice-call versions 2026.2.21 up to, bu

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.0 before 18.7.6, 18.8 before 18.8.6, and 1

flagd is a feature flag daemon with a Unix philosophy. Prior to 0.14.2, flagd exposes OFREP (/ofrep/v1/evaluate/...) and

flatted is a circular JSON parser. Prior to 3.4.0, flatted's parse() function uses a recursive revive() phase to resolve

The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during permessa

wpDiscuz before 7.6.47 contains an unauthenticated denial of service vulnerability that allows anonymous users to trigge