Skip to content
OpenAdvisories
High · 7.5 CVE-2026-107564 EUVD-2026-102868GHSA-j8w7-6x6g-56p6

gocsaf/csaf: csaf_provider prone to uncontrolled resource consumption

Published Oct 16, 2026 · Updated Oct 16, 2026 · Assigned by CERTVDE

Description

An unauthenticated remote attacker may use an allocation of resources without limits or throttling weakness in the affected product to cause high CPU load leading to a denial of service.

Affected products

VendorProductAffectedFixed
gocsaf Development Community csaf_provider 0.0.0 – ≤ 3.6.0 —

References