CWE-400: Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
Also known as Resource Exhaustion.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- openclawOpenClaw < 2026.2.14 - Denial of Service via Large Base64 Media File Decoding6.8 Medium
- openclawOpenClaw < 2026.2.14 - Denial of Service via Unbounded URL-backed Media Fetch8.7 High
- hewlett packard enterprise (hpe) hpe aruba networking private 5g core, hpe aruba networking private 5g core +1 moreUnauthenticated Improper Access Control in management API allows unauthorized service disruption6.5 Medium
- iobit unlockerAn issue in IObit Unlocker v1.3.0.11 allows attackers to cause a Denial of Service (DoS) via a...6.2 Medium
- traefik, red hat openshift dev spaces 3.27 +1 moreTraefik: TCP readTimeout bypass via STARTTLS on Postgres7.5 High
- quic-go webtransport-gowebtransport-go CloseWithError can block indefinitely5.3 Medium
- haloAn issue in halo v.2.22.4 and before allows a remote attacker to cause a denial of service via a...7.5 High
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.3,...7.5 High
- apple macosThe issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15...5.5 Medium
- apple ipados, macos, safari +3 more +5 moreThis issue was addressed through improved state management. This issue is fixed in iOS 26.3 and...5.3 Medium
- apple ipados, macos, tvos +4 more +6 moreA denial-of-service issue was addressed with improved validation. This issue is fixed in watchOS...7.5 High
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.7.4,...5.7 Medium
- qnap qsync centralQsync Central4.9 Medium
- qnap qsync centralQsync Central4.9 Medium
- qnap qsync centralQsync Central4.9 Medium
- qnap file station, qnap systems inc. file station 5 +1 moreFile Station 51.3 Low
- ajv.js ajv, red hat confidential compute attestation, cryostat 4 +67 more +69 moreajv has ReDoS when using `$data` option2.9 Low
amphp/http-serverPackagistamphp/http-server affected by HTTP/2 DDoS vulnerability5.3 Medium- No product listedAn issue in mquickjs before commit 74b7e (2026-01-15) allows a local attacker to cause a denial...5.5 Medium
tcpreplayUbuntuAn issue inTcpreplay v4.5.1 allows a local attacker to cause a denial of service via a crafted...5.5 Medium- bishopfox sliverSliver has a DNS C2 OTP Bypass Allows Unauthenticated Session Flooding and Denial of Service7.5 High
- adonisjs bodyparser, core +1 moreAdonisJS vulnerable to Denial of Service (DoS) via Unrestricted Memory Buffering in PartHandler during File Type Detection7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morevsock/virtio: cap TX credit to local buffer size5.5 Medium
- navidromeNavidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints9.2 Critical
- chainguard apkoapko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams7.5 High
- melang melonWater-Melon Melon commit 9df9292 and below is vulnerable to Denial of Service. The HTTP component...7.5 High
- ntoolslab office readerA path traversal in Moo Chan Song v4.5.7 allows attackers to cause a Denial of Service (DoS) via...5.0 Medium
- chainguard apkoapko is vulnerable to unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams5.5 Medium
- tp-link systems inc. archer be230 v1.2, tp-link archer be230 firmware +1 moreImproper Input Validation Leading to DoS on TP-Link Archer BE2306.8 Medium
- samsung exynos 1080 firmware, exynos 850 firmware, exynos 9110 firmware +6 more +8 moreAn issue was discovered in Samsung Modem Exynos through 2025-08-29. Incorrect handling of NAS...7.5 High
- parall jspdfjsPDF Affected by Denial of Service (DoS) via Unvalidated BMP Dimensions in BMPDecoder8.7 High
- huggingface huggingface/text-generation-inferenceUnbounded External Image Fetch in Validation Leads to Resource-Exhaustion DoS in huggingface/text-generation-inference7.5 High
- danny-avila danny-avila/librechatDenial of Service via JavaScript Memory Overflow in danny-avila/librechat5.7 Medium
- run-llama run-llama/llama indexUncontrolled Memory Consumption in run-llama/llama_index5.3 Medium
- obsidianforensics unfurlUnfurl < 2026.04 - Denial of Service via Unbounded zlib Decompression8.7 High
- vercel next.jsNext.js: Server-Side Request Forgery in Server Actions on Custom Servers8.3 High
- vercel next.jsNext.js: Response Body Cache Confusion with Invalid UTF-8 Request Bodies6.3 Medium
- vercel next.jsNext.js: Unbounded Server Action payload in Edge runtime6.3 Medium
- vercel next.jsNext.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname8.3 High
- vercel next.jsNext.js: Unauthenticated Disclosure of Internal Server Function endpoints6.3 Medium
- vercel next.jsNext.js: Cross-site scripting in App Router applications using CSP nonces4.7 Medium
- vercel next.jsNext.js: Cross-site scripting in beforeInteractive scripts with untrusted input6.1 Medium
- vercel next.js, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreNext.js: Denial of Service via connection exhaustion in applications using Cache Components7.5 High
- vercel next.js, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreNext.js: Server-side request forgery in applications using WebSocket upgrades8.6 High
- vercel next.js, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreNext.js: Denial of Service in the Image Optimization API5.9 Medium
- vercel next.jsNext.js: Cache poisoning in React Server Component responses5.4 Medium
- vercel next.js, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreNext.js: Middleware / Proxy bypass in Pages Router applications using i18n7.5 High
- vercel next.jsNext.js: Middleware / Proxy redirects can be cache-poisoned3.7 Low
- vercel next.jsNext.js: HTTP request smuggling in rewrites6.3 Medium
- vercel next.jsNext.js: Unbounded next/image disk cache growth can exhaust storage6.9 Medium
- Show moreLoading…