CWE-834

127 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 0High 44Medium 81Low 2Not scored 0

CVEs per yearBy the year they were published

CVE-2026-115911
vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread pool
vllm-project · vllm
Medium6.5
CVE-2026-115580
pypdf: Possible long runtimes for large xref table header limits
py-pdf · pypdf
High7.1
CVE-2026-90798
Apache CouchDB: Replicator follows redirects indefinitely
Apache Software Foundation · Apache CouchDB
Low0.6
CVE-2026-110596
quirc through 1.2 Denial of Service via find_alignment_pattern Spiral Search
dlbeer · quirc
Medium6.8
CVE-2026-109299
Open WebUI 0.9.0 before 0.11.4 Denial of Service via Recurrence Rule Validation
open-webui · open-webui
High7.1
CVE-2026-106576
ImageMagick: Denial of service possible when parsing an XMP profile.
ImageMagick · ImageMagick
Medium5.3
CVE-2026-91137
Apache Thrift: PHP `thrift_protocol` accelerator: zero-byte container elements
Apache Software Foundation · Apache Thrift
High8.7
CVE-2026-53493
Containerd has image-pull DoS via crafted OCI index graph amplification
containerd · containerd
Medium6.9
CVE-2026-87721
Denial of Service via Exponential Backtracking in ANTLR Search Query Parser in Gerrit Code Review
Gerrit · Gerrit
High8.7
CVE-2026-77399
icalendar: Denial of service via unbounded VALARM REPEAT expansion
collective · icalendar
Medium6.5