CWE-674: Uncontrolled Recursion
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
Also known as Stack Exhaustion.
A kind of CWE-834 Excessive Iteration.
From the CWE List. © The MITRE Corporation.
Newest
- webonyx graphql-phpgraphql-php: Denial of Service via quadratic complexity in OverlappingFieldsCanBeMerged validation6.9 Medium
- nestjs nestNest: DoS via Recursive handleData in JsonSocket (TCP Transport)7.5 High
- jqlang jqjq: Unbounded Recursion in jv_setpath(), jv_getpath() and delpaths_sorted()6.2 Medium
- imagemagick, red hat enterprise linux 6, enterprise linux 7 +2 moreImageMagick is vulnerable to Stack Overflow in DestroyXMLTree()7.5 High
- imagemagickImageMagick: Stack Overflow via Recursive FX Expression Parsing5.5 Medium
- kagi fastfeedparserFastFeedParser has an infinite redirect loop DoS via meta-refresh chain7.5 High
- stablelibStableLib: Stack exhaustion denial of service via deeply nested CBOR arrays, maps, or tags8.7 High
- nyariv sandboxjsSandboxJS: Stack overflow DoS via deeply nested expressions in recursive descent parser6.9 Medium
- foxit pdf editor, pdf reader +1 moreStack exhaustion caused by cyclic references in Foxit PDF Editor/Reader6.2 Medium
- color iccdeviccDEV: SO in SIccCalcOp::ArgsUsed()6.2 Medium
c2cciutilsPyPIC2C CI utils is vulnerable to DoS via pyasn dependency (CVE-2026-30922)7.5 High- orc discountOrc discount Markdown markdown.c compile recursion4.8 Medium
- squirrelchat smol-tomlsmol-toml: Denial of Service via malformed TOML documents8.2 High
- eemeli yamlyaml is vulnerable to Stack Overflow via deeply nested YAML collections4.3 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morescsi: target: Fix recursive locking in __configfs_open_file()5.5 Medium
- scribanScriban before 7.0.0 Uncontrolled Recursion via object.to_json8.7 High
- scribanScriban before 7.0.0 Stack Overflow via nested array initializers8.7 High
- agronholm cbor2cbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loads7.5 High
- parse-community parse-serverParse Server: LiveQuery subscription query depth bypass8.2 High
- parse-community parse-serverParse Server: Query condition depth bypass via pre-validation transform pipeline8.7 High
- linux, linux kernel +1 morenet: add xmit recursion limit to tunnel xmit functions5.5 Medium
- scribanScriban before 6.6.0 Denial of Service via Infinite Recursion8.7 High
- scribanScriban before 6.6.0 Denial of Service via Uncontrolled Recursion8.7 High
- tomwright daselDasel has unbounded YAML alias expansion in dasel leads to CPU/memory denial of service6.2 Medium
- nltkNLTK before 3.9.4 Denial of Service via JSONTaggedDecoder8.7 High
- parse-community parse-serverParse Server crash via deeply nested query condition operators8.7 High
- pyasn1, red hat migration toolkit for containers, migration toolkit for virtualization +40 more +42 morepyasn1 Vulnerable to Denial of Service via Unbounded Recursion7.5 High
- emilstenstrom justhtmljusthtml before 1.10.0 Denial of Service via deeply nested HTML8.7 High
- python, python software foundation cpython +1 moreStack overflow parsing XML with deeply nested DTD content models6.0 Medium
- luckypennysoftware automapperAutoMapper Vulnerable to Denial of Service (DoS) via Uncontrolled Recursion7.5 High
- courtbouillon cairosvgCairoSVG vulnerable to Exponential DoS via recursive <use> element amplification7.5 High
- webreflection flatted, red hat cluster observability operator 1.5.0, cryostat 4 +29 more +31 moreflatted: Unbounded recursion DoS in parse() revive phase7.5 High
- gitlabUncontrolled Recursion in GitLab7.5 High
- color iccdeviccDEV has a stack overflow in CIccBasicStructFactory::CreateStruct()5.5 Medium
- yhirose cpp-httplibcpp-httplib: Stack Overflow Denial of Service (DoS) via std::regex in multipart filename parsing5.9 Medium
- mlc-ai xgrammar, red hat ai inference server, ai inference server 3.2 +3 more +5 morexgrammar: Multi-layer nesting causes DoS8.7 High
- expressjs multer, red hat developer hub 1.8, developer hub 1.9 +1 more +3 moreMulter vulnerable to Denial of Service via uncontrolled recursion8.7 High
- jashkenas underscoreUnderscore.js has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack8.2 High
- squirrel-lang squirrelSquirrel sqcompiler.cpp UnaryOP recursion4.8 Medium
- wrenwren-lang wren wren_compiler.c resolveLocal recursion4.8 Medium
- chaiscriptChaiScript chaiscript_eval.hpp Function_Push_Pop recursion4.8 Medium
- imagemagickImageMagick's MSL: Stack overflow in ProcessMSLScript6.2 Medium
- aardappel lobsteraardappel lobster idents.h TypeName recursion4.8 Medium
- m2team nanazipNanZip has ROMFS Archive Infinite Loop / Stack Overflow5.1 Medium
- universal-ctags ctagsuniversal-ctags V Language v.c parseExprList recursion4.8 Medium
- mayswind ezbookkeepingmayswind ezbookkeeping versions 1.2.0 and earlier contain a critical vulnerability in JSON and...6.5 Medium
- No product listedA Denial of Service (DoS) vulnerability was discovered in the TON Lite Server before v2024.09....7.5 High
- No product listedA Stack Overflow vulnerability was discovered in the TON Virtual Machine (TVM) before v2024.10....7.5 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongod can run out of stack memory when expressions create deeply nested documents7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morerxrpc: Fix recvmsg() unconditional requeue7.8 High
- Show moreLoading…