CWE-606 Unchecked Input for Loop Condition
Description
The product does not properly check inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-606 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-7w5x-hrqm-74c2 | CVE-2026-85730 | HIGH |
smol-toml: Denial of Service via malformed TOML documents |
2026-09-09 | |
| GHSA-2jcm-hq8r-84wx | CVE-2026-10143 | HIGH |
kafka-python vulnerable to denial of service through an unbounded SCRAM iteration count |
2026-09-01 | |
| GHSA-m93f-wj8c-rp8p | CVE-2026-62901 | HIGH |
nuget/Microsoft.NETCore.App.Runtime.linux-arm
nuget/Microsoft.NETCore.App.Runtime.linux-arm64
nuget/Microsoft.NETCore.App.Runtime.linux-musl-arm
nuget/Microsoft.NETCore.App.Runtime.linux-musl-arm64
nuget/Microsoft.NETCore.App.Runtime.linux-musl-x64
nuget/Microsoft.NETCore.App.Runtime.linux-x64
nuget/Microsoft.NETCore.App.Runtime.osx-arm64
nuget/Microsoft.NETCore.App.Runtime.osx-x64
nuget/Microsoft.NETCore.App.Runtime.win-arm64
nuget/Microsoft.NETCore.App.Runtime.win-x64
nuget/Microsoft.NETCore.App.Runtime.win-x86
|
Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service Vulnerability |
2026-08-11 |
| GHSA-rhh3-jpg6-66xh | CVE-2026-71439 | MODERATE |
Mermaid radar diagrams are vulnerable to DoS |
2026-08-06 | |
| GHSA-64fm-8hw2-v72w | CVE-2024-28243 | MODERATE |
KaTeX's maxExpand bypassed by `\edef` |
2026-02-05 | |
| GHSA-95h4-8mqc-4mpf | CVE-2025-43801 | MODERATE |
Liferay Portal has unchecked input for loop condition vulnerability in XML-RPC |
2025-09-16 | |
| GHSA-6x36-qxmj-rv4p | CVE-2024-43499 | HIGH |
.NET Denial of Service Vulnerability |
2025-04-04 | |
| GHSA-wmm6-pgp8-29hg | - | HIGH |
Duplicate Advisory: .NET and Visual Studio Denial of Service Vulnerability |
2024-11-12 | |
| GHSA-fgpw-cx3v-wj95 | CVE-2024-34486 | HIGH |
Ryu Infinite Loop vulnerability |
2024-08-02 | |
| GHSA-cvr6-37gx-v8wc | CVE-2024-28244 | MODERATE |
KaTeX's maxExpand bypassed by Unicode sub/superscripts |
2024-03-25 |