CWE-703 Improper Check or Handling of Exceptional Conditions

vm2: Host Promise rejection from an exposed constructor can terminate the vm2 host process

vm2: Host-returned Promise rejection can bypass vm2's unhandled-rejection hardening and terminate the host process

qs: Denial of Service via Attacker Controlled isBuffer

Netty: RedisArrayAggregator max-elements failure leaves retained partial aggregate state

ImageMagick: Heap-use-after-free via XMP profile could result in a crash

Nodemailer’s addressparser is vulnerable to DoS caused by recursive calls

Netty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length

Fleet vulnerable to Denial of Service via unhandled gRPC log type in launcher endpoint

CometBFT allows a malicious peer to make node stuck in blocksync

malcontent: Nested archive extraction failure can drop content from scan inputs

CometBFT has inconsistencies between how commit signatures are verified and how block time is derived

rPGP vulnerable to parser crash on crafted RSA secret key packets through CVE-2026-21895

Emmett-Core: Unhandled CookieError Exception Causing Denial of Service

Decidim's private data exports can lead to data leaks

Duplicate Advisory: Nodemailer is vulnerable to DoS through Uncontrolled Recursion

rsa crate has potential panic on a prime being equal to 1

KubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation

Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook

Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload

TinyEnv: Missing .env file not required — may cause unexpected behavior

HAX CMS NodeJS Application Has Improper Error Handling That Leads to Denial of Service

Vyper Does Not Check the Success of Certain Precompile Calls

ntpd NTS client denial of service via wrongly sized cookies

Lodestar snappy decompression issue

notation-go has an OS error when setting CRL cache leads to denial of signature verification