CWE-1050 Excessive Platform Resource Consumption within a Loop
Description
The product has a loop body or loop condition that contains a control element that directly or indirectly consumes platform resources, e.g. messaging, sessions, locks, or file descriptors.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-1050 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-h4r5-mxv5-8mjc | CVE-2026-100350 | MODERATE |
kin-openapi deepObject query decoding repeatedly compiles an invariant regular expression |
2026-10-15 | |
| GHSA-8rr7-cvq3-gmfh | - | HIGH | - |
league/commonmark: Denial of service via distinctly-named attributes in the Attributes extension |
2026-09-01 |
| GHSA-jjv6-8j6v-6j52 | - | HIGH | - |
league/commonmark: Denial of service in the SmartPunct and Attributes extensions |
2026-09-01 |
| GHSA-j8pm-gj4c-rq4x | - | HIGH | - |
league/commonmark: Denial of service via crafted code fences, reference links, and emphasis delimiters |
2026-09-01 |
| GHSA-2q4p-g7hv-5rgv | CVE-2026-71488 | HIGH | - |
league/commonmark: Quadratic-time denial of service when parsing crafted Markdown |
2026-08-06 |
| GHSA-96hv-2xvq-fx4p | CVE-2026-48779 | HIGH |
ws: Memory exhaustion DoS from tiny fragments and data chunks |
2026-07-13 | |
| GHSA-h4wv-g838-66g3 | CVE-2026-4634 | HIGH |
Keycloak: Application-Level DoS via Scope Processing |
2026-04-04 | |
| GHSA-m2q5-xhqg-92r2 | CVE-2025-67419 | HIGH |
evershop allows unauthenticated attackers to exhaust application server's resources via "GET /images" API |
2026-01-05 | |
| GHSA-grv7-fg5c-xmjg | CVE-2024-4068 | HIGH |
Uncontrolled resource consumption in braces |
2024-06-10 | |
| GHSA-wxc4-f4m6-wwqv | CVE-2019-11254 | MODERATE |
Excessive Platform Resource Consumption within a Loop in Kubernetes |
2023-02-09 |