Vulnerabilities
IBM DataStage on Cloud Pak for Data Has Critical Path Traversal Flaw
A critical severity vulnerability in IBM DataStage allows remote authenticated attackers to trigger denial of service via path traversal.
denial of service
Everything Threat Times has reported about denial of service: 6 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
React Server Components Flaw Allows Single-Request Denial of Service
A high-severity vulnerability in React 19 allows attackers to freeze Next.js servers using crafted HTTP POST requests without authentication.
Vulnerabilities
CairoSVG 2.9.1 Fixes High-Severity Denial-of-Service Vulnerability in SVG Rendering
A quadratic CPU consumption flaw in older CairoSVG versions allows attackers to crash services with small files. Version 2.9.1 resolves the issue.
Cyber Attacks
Single POST Request Can Freeze Next.js Servers, Researchers Warn
Security researchers report that a single HTTP POST request can cause Next.js servers to hang, posing a denial-of-service risk to web applications.
Vulnerabilities
Cisco Fixes NX-OS Python Sandbox Escape and Control Plane DoS Flaws
Cisco has released software updates for two vulnerabilities in NX-OS, including a Python sandbox escape and a remote denial-of-service flaw.
Vulnerabilities
thephpleague commonmark Patch Fixes High-Severity DoS Vulnerability in Markdown Parser
A quadratic-time denial-of-service flaw in thephpleague commonmark allows unauthenticated attackers to exhaust PHP worker CPU resources via crafted input.