Skip to content
Threat Feed
Subscribe

Tag

Cpu-Exhaustion

3 briefs RSS
medium advisory

Netty XmlFrameDecoder CPU Exhaustion Denial of Service

An unauthenticated remote attacker can cause a Denial of Service (DoS) in Netty servers utilizing XmlFrameDecoder by sending a specially crafted XML payload containing repeated '</' characters, leading to CPU exhaustion of the server's EventLoop thread and unresponsiveness.

netty-codec-xml +1 denial-of-service cpu-exhaustion network-attack vulnerability
1t
medium advisory

CPU DoS Vulnerability in libp2p gossipsub

A critical vulnerability in the `@libp2p/gossipsub` library allows an unauthenticated attacker to cause a CPU-based Denial of Service by sending oversized IHAVE and IWANT control messages, which are synchronously processed, leading to Node.js event loop exhaustion and service disruption.

@libp2p/gossipsub denial-of-service cpu-exhaustion javascript nodejs library-vulnerability
1t
medium advisory

@conform-to/dom Vulnerable to CPU Exhaustion via Crafted Form Submissions

A CPU exhaustion vulnerability (CVE-2026-49250) exists in Conform's `parseSubmission` API when parsing `FormData` or `URLSearchParams` with many unique field names, allowing an attacker to craft a submission that causes excessive synchronous CPU work and potential denial of service by repeatedly scanning submitted entries.

npm/@conform-to/dom vulnerability web-application denial-of-service cpu-exhaustion npm