The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
474 vulnerabilities with CWE-674
CVE-2026-47320
MEDIUM
Samsung Open Source Rlottie - Uncontrolled Recursion
CVSS 6.1
CVE-2026-47306
MEDIUM
Samsung Open Source Rlottie - Uncontrolled Recursion
CVSS 6.1
CVE-2026-8936
HIGH
Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM
CVE-2026-40989
MEDIUM
Spring Cloud Function DoS via Infinite Recursion in Routing Layer
CVSS 5.7
CVE-2026-44740
MEDIUM
go-billy < 5.9.0 - Symlink Resolution Resource Exhaustion
CVSS 6.5
CVE-2026-46149
HIGH
scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()
CVSS 7.1
CVE-2026-42328
MEDIUM
go-ipld-prime: DAG-CBOR and DAG-JSON decoders unbounded recursion depth
CVSS 6.2
CVE-2026-6936
MEDIUM
IBM i is Affected by a Denial of Service Vulnerability []
CVSS 6.5
CVE-2026-45904
MEDIUM
powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling
CVSS 5.5
CVE-2026-44844
MEDIUM
eml_parser: Recursion DoS via nested message/rfc822 attachments
CVE-2026-7453
MEDIUM
WRL File Parsing Memory Exhaustion in Autodesk 3ds Max
CVSS 5.5
CVE-2026-9358
MEDIUM
postcss AST Serialization container.js toString recursion
CVSS 4.3
CVE-2026-47317
MEDIUM
Samsung Open Source Escargot 590345cc6258317c5da850d846ce6baaf2afc2d3 - Uncontrolled Recursion
CVSS 5.5
CVE-2026-47309
MEDIUM
Samsung Escargot 590345cc6258317c5da850d846ce6baaf2afc2d3 - Uncontrolled Recursion via Oversized Payloads
CVSS 5.5
CVE-2026-6811
MEDIUM
MongoDB PHP Driver 1.21.5-2.1.8 - Denial of Service via Deeply Nested BSON Document Processing
CVSS 5.9
CVE-2026-41935
HIGH
Vvveb < 1.0.8.3 Uncontrolled Recursion Denial of Service
CVSS 7.1
CVE-2026-6479
HIGH
PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursion
CVSS 7.5
CVE-2026-45205
MEDIUM
Apache Commons Configuration: StackOverflowError for YAML input with cycles
CVSS 5.3
CVE-2026-45740
MEDIUM
protobufjs: Denial of Service via unbounded recursive JSON descriptor expansion
CVSS 5.3
CVE-2026-44289
HIGH
protobufjs: Denial of service through unbounded protobuf recursion
CVSS 7.5
CVE-2026-42445
LOW
NanaZip: Uncontrolled recursion in NanaZip UFS directory traversal causes stack exhaustion
CVSS 3.3
CVE-2026-42355
LOW
NanaZip: Uncontrolled recursion in NanaZip Electron ASAR parser causes stack exhaustion
CVSS 3.3
CVE-2026-1681
MEDIUM
net: Stack Overflow with Ping (to own IP Address) via Shell
CVSS 6.1
CVE-2026-44777
MEDIUM
jq: stack overflow in module loading on mutual `include`
CVSS 5.5
CVE-2026-43896
MEDIUM
jq: Stack Overflow in Recursive Object Merge
CVSS 6.2
Details
Vulnerabilities
474