CWE-400: Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
Also known as Resource Exhaustion.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- beautifier js-beautifybeautifier js-beautify memory allocation6.9 Medium
- wbond certvalidatorwbond certvalidator Certificate Path Builder resource consumption6.9 Medium
libassDebianAn issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the...7.5 High- mozilla firefox, thunderbird +1 moreDenial-of-service in the Printing: Output component6.5 Medium
- mozilla firefox, thunderbird +1 moreDenial-of-service in the WebRTC component6.5 Medium
- ibm aspera enterprise webappsIBM Aspera Enterprise Webapps Denial of Service7.5 High
- ibm maximo ai serviceMaximo AI Service Denial of Service7.5 High
- ibm maximo application suite - iot componentIBM Maximo Application Suite - IoT Component Denial of Service7.5 High
- containerdcontainerd: Unpack DoS via repeated opaque whiteouts4.6 Medium
- red hat openstack platform 18.0Openstack-network-exporter: http.server has no readheadertimeout / readtimeout (slowloris)5.3 Medium
- open-webuiOpen WebUI 0.9.0 before 0.11.4 Denial of Service via Recurrence Rule Validation7.1 High
- open-webuiOpen WebUI 0.11.0 before 0.11.4 Memory Exhaustion via Knowledge Search Regex7.1 High
- open-webuiOpen WebUI 0.11.0 before 0.11.4 Denial of Service via Automation Recurrence Rules7.1 High
- open-webuiOpen WebUI 0.6.42 before 0.11.4 Memory Exhaustion via Compressed Remote Image7.1 High
- zhayujie cowagentzhayujie CowAgent Streaming Tool-Call Argument json.loads allocation of resources5.3 Medium
- zhayujie cowagentzhayujie CowAgent Media Download memory allocation5.3 Medium
- konstanty bialkowski libmodplugKonstanty Bialkowski libmodplug ABC Music Format load_abc.cpp abc_add_gchord resource consumption5.3 Medium
- unknown woocommerce bookings, woocommerce bookings +1 moreWooCommerce Bookings < 3.11.0 - Unauthenticated Denial of Service7.5 High
- sillytavernSillyTavern 1.12.13 through 1.19.0 Pre-Authentication Denial of Service via Body Parsing8.2 High
- getkin kin-openapikin-openapi deepObject query decoding repeatedly compiles an invariant regular expression5.3 Medium
- jhaals yopassyopass Prometheus metrics middleware allows remote memory exhaustion through unbounded method labels7.5 High
- luskaner agelanserverageLANServer: Unbounded JSON Array Allocation in AoE3 Cloud `getFileURL` Endpoint Leads to Remote Denial of Service7.5 High
- pyloadpyLoad: Lack of Input Size Validation Leads to Denial of Service (DoS) and Process Termination6.5 Medium
- google guavaDenial of Service via Eager Array Allocation During Deserialization in Guava8.2 High
- nginxui nginx ui, 0xjacky nginx-ui +1 moreNginx UI: Unauthenticated signed-request body staging can exhaust temporary storage7.5 High
- apache cxfApache CXF: FIQL Query Parser Denial of Service7.5 High
- No product listedEIPStackGroup OpENer v2.3 / master commit 76b95cf contains a buffer overflow in the...7.5 High
- No product listedEIPStackGroup OpENer v2.3.0/master up to commit 76b95cf contains an out-of-bounds read...7.5 High
- No product listedEIPStackGroup OpENer v2.3 and master up to commit 76b95cf contain an expired pointer dereference...7.5 High
- No product listedOpENer v2.3.0 / commit 76b95cf contains an out-of-bounds read in the unconnected explicit...7.5 High
- strawberry-graphql strawberryStrawberry legacy graphql-ws retains naturally completed subscription slots3.7 Low
- darylldoyle svg-sanitizersvg-sanitizer: Mixed-case xlink:HrEf skips the `<use>` nesting-DoS check in Resolver::processReferences6.5 Medium
- borewit music-metadatamusic-metadata: uncatchable process crash parsing a crafted `.dsf` (residual of CVE-2026-32256)6.2 Medium
- borewit music-metadatamusic-metadata: MP4 stsd sample-entry size==0 causes a synchronous infinite loop (DoS) — unreleased regression on master6.2 Medium
- ibm guardium data protectionIBM Guardium Data Protection Denial of Service7.5 High
- corazawaf corazaOWASP Coraza WAF: Resource exhaustion via deferred file handle accumulation in multipart body processor5.3 Medium
- pydantic ai, pydantic-ai, pydantic-ai-slim +2 morePydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrl6.5 Medium
- pydantic ai, pydantic-ai, pydantic-ai-slim +2 morePydantic AI: Excessive resource use when local web fetching converts nested HTML6.5 Medium
- thephpleague commonmarkleague/commonmark 2.0.0 before 2.10.2 Quadratic DoS via TableStartParser8.7 High
- ibm datapower gateway 10.5.0, datapower gateway, datapower gateway 10.6.0 +2 more +4 moreIBM DataPower Gateway Denial of Service5.9 Medium
- ibm datapower gateway 11.0.0, datapower gateway +1 moreIBM DataPower Gateway Denial of Service7.5 High
gnutlsAlpaquita,gnutls26Ubuntu,gnutls28Debian +1 more +3 moreImproper certificate validation in gnutls v3.8.13 causes the application to reject legitimate...5.9 MediummingUbuntuAn issue in libming through 0.4.8 allows a remote attacker to cause a denial of service via the...7.5 High- asynchttpclient async-http-clientAsyncHttpClient: Unbounded WebSocket permessage-deflate decompression enables a decompression-bomb denial of service when compression is enabled7.5 High
- absolute security secure accessDenial of Service in Absolute Secure Access6.0 Medium
- absolute security secure accessDenial of Service in Absolute Secure Access8.7 High
- absolute security secure accessDenial of Service in Absolute Secure Access7.1 High
- absolute security secure accessDenial of service vulnerability in Secure Access8.2 High
- excelizeExcelize: Unbounded spinCount in agile decryption burns CPU during OpenFile7.5 High
- No product listedOpen5GS GTP-U Receive Path gtp-path.c ogs_pfcp_xact_local_create allocation of resources6.9 Medium
- Show moreLoading…