CWE-407

CVEs per yearBy the year they were published

1. 20171
2. 20171
3. 20181
4. 20212
5. 20212
6. 20225
7. 2026216
8. 202618
9. 202616
10. 202612
11. 20262

Newest CVEs

• CVE-2026-119741

  rsync < 3.5.2 Denial of Service via hash_search() Checksum Collisions

  RsyncProject · rsync

  High8.7
• CVE-2026-121437

  Mistune 3.3.0 before 3.3.4 Quadratic-Time DoS via _process_emphasis_delimiters

  lepture · mistune

  High8.7
• CVE-2026-62160

  Daptin: ParseAcceptLanguage `_` separator bypass enables >250x CPU amplification via Accept-Language header in LanguageMiddleware

  daptin · daptin

  High8.7
• CVE-2026-87768

  DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds

  DateTime-Lite

  Not scored
• CVE-2026-119197

  pyasn1: Quadratic-complexity denial of service in binary REAL decoding

  pyasn1 · pyasn1

  High7.5
• CVE-2026-119196

  pyasn1: Quadratic CPU consumption in constructed BIT STRING decoding

  pyasn1 · pyasn1

  High7.5
• CVE-2026-119195

  pyasn1: Quadratic-time denial of service in constructed string and indefinite-length ANY decoding

  pyasn1 · pyasn1

  High7.5
• CVE-2026-119194

  pyasn1: Quadratic CPU use in schemaless BER/CER/DER container decoding

  pyasn1 · pyasn1

  High7.5
• CVE-2019-25781

  Python-Markdown 3.0 through 3.11.2 Denial of Service via Link Bracket Parsing

  Python-Markdown · Markdown

  High8.7
• CVE-2026-118694

  python-markdown2 through 2.5.5 Denial of Service via Unclosed Inline Link Destinations

  trentm · python-markdown2

  High8.7

Vendors it comes up for most

1. py-pdf10
2. Apache Software Foundation8
3. OISF8
4. Progressive Robot Ltd8
5. thephpleague8
6. GitLab7
7. Microsoft7
8. lepture7
9. Red Hat6
10. djangoproject6