NewsFortinet PSIRT
Allocation of resources without limits or throttling in fastapi
Teaser from the source
CVSSv3 Score: 7.5 An Allocation of Resources Without Limits or Throttling vulnerability [CWE-770] in FortiAuthenticator may allow an unauthenticated attacker to exhaust system resources, potentially resulting in a denial of service (DoS). Revised on 2026-11-10 00:00:00
This is the RSS-feed teaser. Read the full article at the original source.
Read at Fortinet PSIRTMore on Allocation
Other advisories
- MediumCVE-2026-128086OpenTelemetry-Go: Eager W3C baggage-property materialization causes bounded memory-allocation amplification
- MediumCVE-2026-128086OpenTelemetry-Go: Eager W3C baggage-property materialization causes bounded memory-allocation amplification
- Not ratedosv:CVE-2026-128086OpenTelemetry-Go: Eager W3C baggage-property materialization causes bounded memory-allocation amplification
- HighCVE-2026-124279Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc_server allows unauthenticated attackers to exhaust server memory via c…
- HighCVE-2026-126938Zipline before 4.6.4 contains a resource allocation vulnerability that allows authenticated users to bypass chunked-upload size and quota checks by forging C…
- MediumCVE-2026-112319Krb5: mit krb5 kadmind authenticated memory exhaustion dos via unbounded rpc xdr allocation
- LowCVE-2026-100290Double free after allocation failure in regcomp and regexec
- HighCVE-2026-126366msgpack-ruby JRuby decoder makes uncapped header-count allocations; a 5-byte message forces multi-GiB OOM
Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-258
ID