CWE-405

75 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 0High 41Medium 32Low 2Not scored 0

CVEs per yearBy the year they were published

CVE-2026-111752
Angular: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR)
angular · angular
High8.2
CVE-2026-119207
pypdf: Possible large memory usage for exceptions in strict mode
py-pdf · pypdf
High7.1
CVE-2026-118764
minimatch: potential denial of service via globparts amplification
isaacs · minimatch
Medium6.9
CVE-2026-85783
Crypt::Age versions before 0.004 for Perl allow CPU exhaustion via an unbounded number of recipient stanzas, each costing an X25519 scalar multiplication in unwrap_file_key
Crypt-Age
High7.5
CVE-2026-110676
Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal digits under allow_bignum
Cpanel-JSON-XS
High7.5
CVE-2026-109932
undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering
undici · undici
Medium5.9
CVE-2026-70162
.NET Denial of Service Vulnerability
Microsoft · Microsoft Visual Studio 2022 version 17.14
Medium5.9
CVE-2026-96960
.NET Denial of Service Vulnerability
Microsoft · Microsoft .NET Framework 3.5
High7.5
CVE-2026-104817
Misskey: Lack of rate limiting and size restrictions in RSS fetching API
misskey-dev · misskey
High8.7
CVE-2026-78669
Excessive CPU consumption from repeated initial window changes in net/http
Go standard library · net/http
High7.5