CWE-405 Asymmetric Resource Consumption (Amplification)

Microsoft Security Advisory CVE-2026-96960 - .NET and Visual Studio Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-70162 - .NET Denial of Service Vulnerability

Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout

pypdf: Possible long runtimes/large memory usage when retrieving outlines

decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input

league/commonmark: Denial of service via deeply nested XML output

Nerdbank.MessagePack has a memory amplification DoS in collection deserialization

Duplicate Advisory: OpenClaw is vulnerable to unauthenticated resource exhaustion through its voice call webhook handling

OpenClaw has incomplete Fix for CVE-2026-32011: Feishu Webhook Pre-Auth Body Parsing DoS (Slow-Body / Slowloris Variant)

Devalue is vulnerable to denial of service due to memory exhaustion in devalue.parse

devalue vulnerable to denial of service due to memory/CPU exhaustion in devalue.parse

Marshmallow has DoS in Schema.load(many)

Sigstore Timestamp Authority allocates excessive memory during request parsing

Fulcio allocates excessive memory during token parsing

net-imap rubygem vulnerable to possible DoS by memory exhaustion

swift-nio-http2 affected by HTTP/2 MadeYouReset vulnerability

Chall-Manager's scenario decoding process does not check for zip bombs

Possible DoS by memory exhaustion in net-imap

jwt-go allows excessive memory allocation during header parsing

body-parser vulnerable to denial of service when url encoding is enabled

Denial of Service in Page Error Handling

TYPO3 CMS vulnerable to Denial of Service in Page Error Handling

Asymmetric Resource Consumption (Amplification) in Docker containers created by Wings