Vulnerabilities
Apache CouchDB 3.5.3 Fixes High-Severity Decompression Bomb Vulnerability
A remote denial-of-service flaw in Apache CouchDB versions below 3.5.3 is fixed in the latest release, requiring immediate updates for exposed systems.
denial-of-service
Everything Patch Observer has reported about denial-of-service: 8 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Apostrophe CMS Prototype Pollution Causes Persistent Denial of Service
A high-severity flaw in Apostrophe CMS allows low-privileged users to crash the entire Node process by deleting shared runtime methods via crafted requests.
Vulnerabilities
Rust lopdf vulnerability allows small PDFs to crash services via stack overflow
A high-severity flaw in the Rust lopdf library enables denial of service through crafted files, with a patch available in version 0.42.0 for affected applications.
Vulnerabilities
FreeRDP Before 3.32.0 Flaw Allows Remote Servers to Crash Client Apps
A high-severity flaw in older FreeRDP builds lets malicious servers exhaust file descriptors, forcing client termination via repeated serial port requests.
Vulnerabilities
Parse Server Crash Vulnerability Exposes Orgs to Denial of Service Attacks
Unhandled email errors crash Parse Server processes, allowing clients to force shutdowns until a fix is applied.
Vulnerabilities
Symfony Expression Language flaw crashes PHP processes in unpatched versions
A high-severity parsing flaw in Symfony allows attackers to crash PHP processes via deep nesting. Patches are available for all affected major version lines.
Vulnerabilities
Orgs urged to patch AWS Smithy-RS 0.66.5 to block unauthenticated Slowloris DoS in Rust servers
An unauthenticated denial-of-service vulnerability in AWS Smithy-RS affects versions through 0.66.4, with a fix available in version 0.66.5.
Vulnerabilities
High-Severity DoS in PHP Commonmark Library Risks Server CPU Exhaustion
Unauthenticated attackers can exploit CVE-2026-105830 to freeze PHP workers via malicious markdown input, requiring immediate patching.