Know which CVEs
actually matter.

Denial-of-service via deadlock in the SSH channel handler of golang.org/x/crypto affects all versions prior to v0.56.0. After an SSH channel has been established, a malicious remote peer can send crafted RFC 4254 channel messages - including unhandled message types or global requests - that cause the entire SSH connection's goroutine to deadlock indefinitely, effectively killing the connection without recovery. Any Go application using golang.org/x/crypto's ssh package as a server or client is exposed; no public exploit code has been identified at time of analysis.

Denial-of-service in the SSH package of golang.org/x/crypto allows a malicious authenticated SSH peer to deadlock an entire connection by flooding incomingRequests on a channel that has been registered in the mux's chanList but not yet confirmed as established. Any Go application using x/crypto/ssh - including SSH servers, clients, proxies, and automation tooling - is vulnerable to connection-level freeze. The Go Security Team released a fix in v0.56.0; no public exploit has been identified.

Script execution enforcement failure in Sonatype Nexus Repository 3 allows privileged authenticated users to invoke pre-existing Groovy scripts via POST /service/rest/v1/script/{name}/run even after administrators explicitly set nexus.scripts.allowCreation=false to disable the scripting subsystem. The execution endpoint did not consult the administrative flag, meaning a hardening action administrators believed fully blocked script activity was silently ineffective against execution of pre-existing scripts. A vendor-released patch is available in Nexus Repository 3.96.0; no active exploitation has been confirmed in CISA KEV and no public proof-of-concept has been identified.

Out-of-bounds write in Samsung TizenFX's MediaBufferBase component allows a local low-privileged attacker to corrupt memory by supplying unchecked array indices through the Tizen.Multimedia media buffer API. The vulnerable indexer property in `Tizen.Multimedia.Common.Internal.MediaBufferBase` lacked all bounds validation prior to fixes introduced in upstream PRs #7814 and #7815, admitting negative or oversized index values. Under high-complexity conditions, successful exploitation can produce high integrity and availability impact - crashing the multimedia subsystem or enabling controlled memory corruption - on Tizen-based devices such as Samsung Smart TVs and Galaxy Watch wearables. No public exploit exists and no active exploitation has been confirmed.

Uncontrolled memory allocation in RightNow-AI OpenFang up to version 0.6.9 allows remote low-privileged attackers to degrade or crash the service by sending crafted input to the shell_exec function in the openfang-runtime crate. The CVSS 4.0 vector (AV:N/PR:L/VA:L) confirms network-reachable, authenticated exploitation with limited availability impact and no confidentiality or integrity exposure. A public proof-of-concept exploit is available on GitHub (CVE/OpenFang_ShellExec_Output_Buffer_DoS_Report), and the vendor did not respond to disclosure - no patch has been released.

Denial of service in simular-ai Agent-S up to version 0.3.2 allows low-privileged remote attackers to disrupt the GUI action execution workflow by manipulating action parameters in grounding.py. The attack targets the model-generated action budget processing logic, causing improper resource handling (CWE-404) that results in agent availability loss. A public proof-of-concept titled 'AgentS_Action_Parameter_Budget_DoS_Report' is available on GitHub; the vendor did not respond to coordinated disclosure, leaving no official patch in place.

Uncontrolled resource consumption in simular-ai Agent-S up to version 0.3.2 allows remote unauthenticated attackers to exhaust server resources via the OCR HTTP API's ImageData function. By supplying crafted img_bytes input to the exposed endpoint in gui_agents/s1/utils/ocr_server.py, an attacker can trigger a denial-of-service condition against the OCR processing service. Publicly available exploit code exists on GitHub; the vendor did not respond to responsible disclosure, leaving no official patch.

Denial of service in simular-ai Agent-S 0.3.1/0.3.2 allows authenticated remote attackers to crash or exhaust the CodeAgent service by sending crafted input to code_agent.py. The root cause is CWE-404 (Improper Resource Shutdown or Release), meaning a resource - likely a subprocess, file handle, or socket - is not properly released on certain code paths, enabling resource exhaustion. A public proof-of-concept is available on GitHub; no vendor patch exists as the vendor did not respond to disclosure.

Host-parsing ambiguity in fast-uri allows attackers to silently bypass SSRF denylists, redirect allowlists, and proxy routing rules by submitting URLs containing unbalanced authority brackets. Affected versions 2.4.5, 3.1.6, and 4.1.3 of the Fastify ecosystem URI parsing library return the malformed bracket-containing string as the host without raising an error, while Node.js's URL implementation and downstream HTTP clients resolve the same string to an entirely different host. Any application that reads the fast-uri-parsed host to enforce a security policy, then passes the original URL to an HTTP client, evaluates its controls against a string that is never the host the request actually reaches.

Stack exhaustion via uncontrolled recursion in Amazon Ion-C before version 1.1.6 allows remote unauthenticated attackers to crash any application that parses untrusted Ion data using this library. By crafting deeply nested Ion container structures, an attacker can exhaust the native call stack during recursive parsing, triggering an application-level denial of service. No public exploit has been identified at time of analysis, and Amazon has released a patched version (v1.1.6) that hardens container depth limits.

Uncontrolled memory allocation in sigoden aichat up to version 0.30.4 allows remote unauthenticated attackers to exhaust server memory via the HTTP API endpoint implemented in src/serve.rs, causing a denial-of-service condition. The vulnerability is a CWE-400 resource exhaustion flaw triggered by sending a crafted request body to the aichat serve component. A public proof-of-concept has been published; the vendor did not respond to responsible disclosure, meaning no patch has been released.

URI authority injection in fast-uri allows an attacker-supplied port value containing delimiter characters to demote the intended host to userinfo and redirect the parsed authority to an attacker-controlled hostname, bypassing downstream re-validation because both fast-uri and Node.js's built-in URL parser silently accept the malformed output as well-formed. Applications in the Fastify ecosystem that build URIs from parts — passing untrusted data into the port field of a URI object through serialize, normalize, or equal — on fast-uri versions before 2.4.6, 3.1.7, or 4.1.4 are affected. No public exploit has been identified at time of analysis, and the CVE is not listed in CISA KEV; vendor-released patches are available across all three active release lines.

Unauthenticated remote denial of service in rowboatlabs rowboat through v0.9.1 allows any network attacker to disrupt the Composio webhook endpoint by sending a crafted HTTP request body that exploits improper resource handling in the Next.js route handler (apps/rowboat/app/api/composio/webhook/route.ts). A proof-of-concept is publicly available on GitHub, removing any skill barrier for exploitation. The vendor resolved the issue in v0.9.2 by deleting the legacy Next.js application entirely rather than patching the underlying flaw, meaning no security control was introduced - only the attack surface was removed.