CWE-789

CVEs per yearBy the year they were published

1. 20229
2. 20223
3. 202415
4. 202514
5. 2026235
6. 202630
7. 202614
8. 20266
9. 20266

Newest CVEs

• CVE-2026-63476

  isomorphic-git: Unbounded memory allocation from attacker-controlled delta target size (DoS)

  isomorphic-git · isomorphic-git

  Medium4.3
• CVE-2026-83594

  Apache Wicket: FileUploadToResourceField accepts a client-asserted upload result and allocates the size it names

  Apache Software Foundation · Apache Wicket

  High8.3
• CVE-2026-62297

  ag-psd has uncontrolled memory allocation via declared PSD dimensions (DoS)

  Agamnentzar · ag-psd

  High7.5
• CVE-2026-62254

  LibreDWG: excessive class-decoding reallocation in R13-R2000 DWG parsing

  LibreDWG · libredwg

  Medium5.5
• CVE-2026-61845

  Crass: Large numeric exponents cause CPU and memory denial of service

  rgrove · crass

  High8.9
• CVE-2026-115865

  Starlet versions before 0.33 for Perl allow a request declaring a large Content-Length to kill a worker by exhausting memory

  Starlet

  Not scored
• CVE-2026-119280

  MariaDB Connector/J : XA recover() trusted server-supplied gtrid and bqual lengths

  mariadb-corporation · mariadb-connector-j

  Low3.7
• CVE-2026-119278

  MariaDB Connector/J: Rogue server can crash the client during caching_sha2_password authentication

  mariadb-corporation · mariadb-connector-j

  Medium5.9
• CVE-2026-119276

  MariaDB Connector/J: Rogue server can drive large heap allocations from server-declared lengths in OK packets

  mariadb-corporation · mariadb-connector-j

  Medium5.9
• CVE-2026-118590

  nipy nibabel Header volumeutils.py array_from_file memory allocation

  nipy · nibabel

  Medium6.9

Vendors it comes up for most

1. Apache Software Foundation33
2. Cisco13
3. IBM12
4. Legion of the Bouncy Castle Inc.9
5. Elastic7
6. Mattermost7
7. Red Hat7
8. open-telemetry7
9. Eclipse Foundation6
10. python-pillow6