Vulnerabilities
aiohttp multipart flaw triggers resource exhaustion; patch CVE-2026-111066 in 3.14.4
Unauthenticated attackers can trigger resource exhaustion in aiohttp versions 2 through 3.14.3 via crafted multipart requests using Request.post().
CWE-400
Everything SecOps Signal has reported about CWE-400: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
phpMyFAQ 4.2.0-alpha suffers high-severity resource exhaustion flaw
Unauthenticated API endpoints in phpMyFAQ 4.2.0-alpha allow attackers to crash servers by forcing the application to load all database records into memory.