CWE-459 Incomplete Cleanup

compression vulnerable to Denial of Service via memory leak on premature response close

multer vulnerable to Denial of Service via orphaned disk writes on aborted uploads

podman quadlet install --replace does not fully replace the old file

multer vulnerable to Denial of Service via file descriptor leak on aborted uploads

Better Auth: Stale sessions persist after user deletion across admin, anonymous, and SCIM flows

mknod: Device nodes created mislabeled on SELinux, with broken cleanup (remove_dir on a node)

zebrad has persistent on-disk corruption of Sapling/Orchard subtree roots after chain fork via pop_tip

Zebra has block suppression via NU5 same-header body poisoning of sent-hash cache

Multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads

Apache Tomcat Incomplete Cleanup vulnerability

Multer vulnerable to Denial of Service via incomplete cleanup

Vikunja Vulnerable to Account Takeover via Password Reset Token Reuse

webtransport-go: Memory Exhaustion Attack due to Missing Cleanup of Streams Map

Apache Struts has a Denial of Service vulnerability

Babylon Incorrect FP inactive accounting in costaking creates “phantom stake” that earns rewards after BTC unbond

Apache Struts is Vulnerable to DoS via File Leak

Apache Struts Improper Control of Dynamically-Managed Code Resources vulnerability

Apache Tomcat Denial of Service via invalid HTTP priority header

Denial of Service via incomplete cleanup vulnerability in Apache Tomcat

Moodle HTTP authorization header is preserved between "emulated redirects"

Apache Tomcat Incomplete Cleanup vulnerability

SiYuan has an arbitrary file deletion vulnerability

redis-py Race Condition due to incomplete fix

Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible

Flarum mishandles invalidation of user email tokens