CWE-404 Improper Resource Shutdown or Release

Undertow MadeYouReset HTTP/2 DDoS Vulnerability

postcss-selector-parser allows denial of service through uncontrolled AST recursion

SGLang is Vulnerable to DoS via the data_hash Function

Socket.IO: Engine.IO Polling Transport Connection Exhaustion

bytedance InfiniStore: Denial of Service via Non-Cryptographic Hashing in InfiniStore KV Map

Open Babel has out-of-bounds read in PQS lowerit (pre-buffer read)

Duplicate Advisory: Open Babel has out-of-bounds read in PQS lowerit (pre-buffer read)

Open Babel has NULL pointer dereference in CACAO CacaoFormat::SetHilderbrandt

Duplicate Advisory: Open Babel has NULL pointer dereference in CACAO CacaoFormat::SetHilderbrandt

Open Babel has NULL pointer dereference in ChemKinFormat::ReadReactionQualifierLines

Duplicate Advisory: Open Babel has NULL pointer dereference in ChemKinFormat::ReadReactionQualifierLines

Duplicate Advisory: Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence

vllm has Improper Resource Shutdown or Release

aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect

BoxLite has a Timeout Bypass Vulnerability

Dalfox has an Unauthenticated Remote DoS via Closed-Channel Write in `ParameterAnalysis` (server mode)

PyTorch susceptible to local Denial of Service

AMF Vulnerable to Improper Resource Shutdown or Release

AMF Vulnerable to Improper Resource Shutdown or Release

AMF Vulnerable to Improper Resource Shutdown or Release

Apache Tomcat Vulnerable to Improper Resource Shutdown or Release

Apache Tomcat Improper Resource Shutdown or Release vulnerability

GoBGP has an Improper Resource Shutdown or Release

OpenClaw has incomplete Fix for CVE-2026-27486: Unvalidated SIGKILL in `!stop` Chat Command via `shell-utils.ts`

Nuxt OG Image is vulnerable to Denial of Service via unbounded image dimensions