CWE-407

Low likelihood

Inefficient Algorithmic Complexity

Parent: CWE-405 - Asymmetric Resource Consumption (Amplification)

An algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an attacker, typically using crafted manipulations that ensure that the worst case is being reached.

59 vulnerabilities with CWE-407
CVE-2026-28804
pypdf <6.7.5 - DoS
CVE-2026-27903 HIGH
minimatch <10.2.3 - DoS
CVSS 7.5
CVE-2025-14831 MEDIUM
GnuTLS - DoS
CVSS 5.3
CVE-2026-1285 HIGH
Django <6.0.2-<4.2.28 - DoS
CVSS 7.5
CVE-2025-14550 HIGH
Django <6.0.2-4.2.28 - DoS
CVSS 7.5
CVE-2025-14822 LOW
Mattermost <10.11.9 - DoS
CVSS 3.1
CVE-2025-12084 MEDIUM
xml.dom.minidom - Info Disclosure
CVSS 5.3
CVE-2025-64460 HIGH
Django <5.2.9-4.2.27 - DoS
CVSS 7.5
CVE-2025-66382 LOW
libexpat <2.7.3 - DoS
CVSS 2.9
CVE-2025-11230 HIGH
HAProxy - DoS
CVSS 7.5
CVE-2025-64458 HIGH
Python <5.1.14-5.2.8 - DoS
CVSS 7.5
CVE-2025-58187 HIGH
Certificate Validation - Info Disclosure
CVSS 7.5
CVE-2025-62727 HIGH
Starlette <0.49.1 - DoS
CVSS 7.5
CVE-2025-55304 MEDIUM
Exiv2 <0.28.6 - DoS
CVSS 5.5
CVE-2025-27209 HIGH
Node.js <24.0.0 - DoS
CVSS 7.5
CVE-2023-30421 LOW
mjson 1.2.7 - Info Disclosure
CVSS 2.9
CVE-2025-29908 MEDIUM
Netty QUIC codec <0.0.71. Final - Hash DoS
CVSS 5.3
CVE-2025-30348 MEDIUM
Qt <6.8.0 - Buffer Overflow
CVSS 5.8
CVE-2025-24947 MEDIUM
LSQUIC <4.2.0 - Hash DoS
CVSS 5.3
CVE-2025-24946 MEDIUM
Picoquic <b80fd3f - DoS
CVSS 5.3
CVE-2025-23020 MEDIUM
Kwik < 0.10.1 - Denial of Service
CVSS 5.3
CVE-2024-12243 MEDIUM
GnuTLS - DoS
CVSS 5.3
CVE-2024-12133 MEDIUM
libtasn1 - DoS
CVSS 5.3
CVE-2024-9631 HIGH
GitLab CE/EE <17.2.9-17.4.2 - Info Disclosure
CVSS 7.5
CVE-2024-6324 MEDIUM
GitLab CE/EE <17.5.5-17.7.1 - DoS
CVSS 4.3
Details
Vulnerabilities 59
Exploit Likelihood Low