OS command injection in the SonicWall SMA1000 Appliance Management Console (AMC) allows a remote authenticated administrator to execute arbitrary OS commands under specific conditions, achieving full remote code execution on the appliance. The vulnerability (CWE-78) is post-authentication and gated by administrator-level credentials, narrowing the exploitable attack surface to compromised or malicious admin accounts. No public exploit code or active exploitation has been identified at time of analysis, though SMA1000 appliances are high-value targets as network edge remote-access devices.
Remote command injection in Cobham SATCOM VSAT7090 Maritime Satellite Router (all versions through build 20260704) allows low-privileged remote attackers to execute arbitrary OS commands by supplying maliciously crafted sender or recipients values within JSON-parsed mail report configuration. The vulnerable function c_set_reports_decode in mail-report.sh passes these arguments unsanitized to shell commands, yielding full device compromise. A public proof-of-concept exploit exists, the vendor has not responded to coordinated disclosure, and no patch is available - creating an unmitigated remote code execution exposure on an operational maritime communications device.
Memory exhaustion in gRPC-Go before version 1.83.1 allows an unauthenticated remote attacker to crash any service built on this library by sending HTTP/2 streams fragmented into millions of tiny one-byte DATA frames. Each fragment is stored as a separate recvMsg object in recvBuffer, creating severe heap overhead that bypasses HTTP/2 flow-control protections - which limit payload bytes, not the number of allocated metadata objects. No public exploit has been identified at time of analysis, but the attack is fully derivable from the public GitHub advisory and PR diff.
Command injection in PHP Composer's Perforce VCS handler allows arbitrary local command execution with the privileges of the developer or CI account running package installation. Affects all Composer releases from 1.0 through 2.2.29 and 2.10.2; the flaw exploits P4PORT's undocumented `rsh:`/`jsh:` transport keywords, which instruct the Perforce `p4` client to spawn a local child process instead of connecting to a server, allowing attacker-controlled package metadata to trigger OS command execution. No public exploit identified at time of analysis, though the fix commit includes test payloads confirming the mechanism.
Uncontrolled CPU consumption in js-yaml versions 3.0.0-3.15.1 and 4.0.0-4.3.1 allows unauthenticated remote attackers to exhaust server CPU by submitting a small YAML document containing aliased sequences of empty mappings merged into many targets, triggering O(N×K) processing while the library's `maxTotalMergeKeys` safety counter is never incremented. Any Node.js application that exposes js-yaml parsing to untrusted input is affected, because merge key (`<<`) processing is enabled by default on both release lines. No confirmed active exploitation appears in CISA KEV at time of analysis, but the attack is trivially reproducible from the published advisory and pathological test case, and the library's ubiquity in the npm ecosystem makes this a high-priority availability risk.
OS command injection in yast2-users (through version 5.0.8) allows root-level arbitrary command execution on SUSE Linux systems when an administrator views a malicious LDAP user's Password Settings tab. The `get_password_term()` function reads `shadowLastChange` and `shadowExpire` LDAP attributes without numeric validation and passes them to `format_days_after_epoch()`, which interpolates the values directly into a shell command executed via Ruby backticks. No public exploit or CISA KEV listing has been confirmed at time of analysis; EPSS data is unavailable.
OS command injection in SUSE's yast2-auth-client allows an attacker who controls Active Directory configuration values to execute arbitrary commands as root on the target Linux host. The vulnerable code in Auth::AuthConf (src/lib/auth/authconf.rb) constructs Samba net ads join, net ads lookup -S, and net ads testjoin command strings by directly interpolating OU, dnshostname, AD username, and AD domain name values without validation or shell-quoting, then passes the assembled string to Ruby's Open3.popen2 or Open3.capture2, which delegates to /bin/sh. No public exploit has been identified at time of analysis and the vulnerability is not listed in the CISA KEV catalog.
Remote code execution in Elasticsearch's machine learning component allows an authenticated user with ML model deployment privileges to execute arbitrary attacker-controlled logic on the Elasticsearch host node by supplying a crafted trained model artifact. The flaw stems from unsafe deserialization (CWE-502) of model artifact data during the ML inference loading process, granting the attacker a broader OS system-call surface than the ML subsystem is intended to expose. Elastic has released fixed versions 8.19.2, 9.4.5, and 9.5.1 via ESA-2026-114; no public exploit code or CISA KEV listing has been identified at time of analysis.
Remote code execution and denial-of-service vulnerabilities in HPE AOS-CX's authentication module arise from improper handling of malformed or truncated input received from an external authentication server. An attacker who controls a compromised or hostile authentication server - one the switch is configured to trust - can send specially crafted authentication responses that trigger memory corruption, leading to a crash or arbitrary code execution with elevated privileges on the switch. No public exploit code or CISA KEV listing has been identified at time of analysis, but the potential for unauthenticated-from-the-network-device-perspective RCE on core network infrastructure elevates the operational urgency.
Administrator account takeover in the Support Genix WordPress helpdesk plugin (all versions up to and including 1.4.52) is achievable by any subscriber-level user who can obtain a single guest ticket token, exploiting a catastrophically weak encryption key derivation that yields only ~19.5 bits of effective entropy. The `guest_ticket_login()` function at the publicly reachable `/sgnix/?p=<token>` endpoint lacks capability checks, nonce validation, and session controls, allowing an attacker to exhaustively recover the site-wide AES-256-CBC key offline across ~729,000 candidates and forge an admin-authentication token. No public exploit has been identified at time of analysis, but the attack is technically straightforward given the tiny keyspace, deterministic IV construction, and unauthenticated endpoint exposure.
OS command injection in LibreNMS's libvirt discovery module (VminfoLibvirt.php) enables any authenticated administrator to execute arbitrary OS commands on the discovery worker host by setting a crafted device hostname. Affected deployments span LibreNMS 23.10.0 through 26.3.x wherever the enable_libvirt option is explicitly set to true; the vendor-released fix is version 26.4.0. No public exploit code or CISA KEV listing has been identified at time of analysis, but the attack pattern is straightforward for any actor holding admin credentials.
Privilege escalation in Mozilla Firefox's Graphics component via an invalid pointer (CWE-763) exposes users running all Firefox versions prior to 155 and ESR branches prior to 115.40, 140.15, and 153.2 to full compromise of confidentiality, integrity, and availability. The CVSS 8.8 network-vector score with no required privileges but mandatory user interaction (UI:R) places this squarely in the drive-by exploitation category - a victim visiting a crafted webpage is sufficient to trigger the flaw. No active exploitation is confirmed at time of analysis (SSVC exploitation: none, no KEV listing), but the total technical impact rating and the broad Firefox install base make this a high-priority patching target.
Privilege escalation in Dell PowerStore storage appliances allows any authenticated low-privilege user to bypass access restriction controls and gain elevated system privileges, classified under CWE-693 (Protection Mechanism Failure). The entire PowerStore T-series and Q-series lineup is affected, with a network-accessible, low-complexity attack path requiring only a valid account. No public exploit code and no CISA KEV listing have been identified at time of analysis, though the high CVSS score and broad appliance coverage make this a material risk in enterprise storage environments.
Unauthenticated disruption of scheduled live broadcasts in AVideo (all versions, CPE cpe:2.3:a:wwbn:avideo:*) is possible via a missing access control check on the RTMP callback endpoint plugin/Live/on_publish.php. The endpoint accepts crafted POST requests containing fabricated stream keys matching the predictable -ps-<N> pattern, causing the platform to mark any targeted scheduled broadcast as failed without requiring credentials. With a CVSS 4.0 score of 8.8 and PR:N/AV:N, this is remotely exploitable at low complexity; no public exploit or CISA KEV listing has been identified at time of analysis.
Privilege escalation in HPE AOS-CX allows an authenticated low-privileged user to execute arbitrary commands with the privileges of a higher-privileged or root-level account on the underlying operating system. The vulnerability is triggered through specific command-line operations within the AOS-CX CLI environment, making it exploitable over the network by any user with basic CLI credentials. With a CVSS score of 8.8 and full C:H/I:H/A:H impact, successful exploitation yields complete control of the affected switch's OS. No public exploit code and no CISA KEV listing are identified at time of analysis.
OS command injection in HPE AOS-CX's web-based management interface allows any authenticated low-privileged user to execute arbitrary commands on the underlying switch operating system, achieving full device compromise. The CVSS vector (AV:N/AC:L/PR:L/UI:N) confirms the attack is fully remote, requires no user interaction, and demands only a minimal-privilege account - not administrative credentials. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low access complexity and complete C/I/A impact make this an urgent patching priority for network infrastructure teams.
Arbitrary file write via the HPE Networking Fabric Composer API allows an authenticated low-privilege operator to escalate privileges and execute arbitrary commands on the underlying operating system, resulting in complete system compromise. The CVSS 3.1 score of 8.8 (AV:N/AC:L/PR:L/UI:N) reflects network-exploitable, low-complexity exploitation requiring only a valid operator account. No public exploit code or CISA KEV listing has been identified at time of analysis, but the clear privilege escalation path from a low-privilege role to OS-level access makes this a high-priority remediation target in any Fabric Composer deployment.
Privilege escalation in HPE Networking Fabric Composer's API allows an authenticated low-privilege operator user to elevate permissions to administrative level, resulting in complete system compromise. The flaw is exploitable over the network without user interaction, making it accessible to any attacker holding a valid operator account. No public exploit or active exploitation has been identified at time of analysis, but the low attack complexity makes this a credible internal-threat vector in any environment where operator credentials are broadly issued or have been exposed.
Privilege escalation in HPE Networking Fabric Composer allows an authenticated low-privilege operator to gain full administrative control via a command sanitization bypass in the product API. Exploitation is network-accessible with low complexity and no user interaction required, yielding complete confidentiality, integrity, and availability impact on the affected system. No public exploit code has been identified at time of analysis, and CISA has not listed this CVE in the Known Exploited Vulnerabilities catalog.
Privilege escalation in Dell PowerStore storage appliances allows an authenticated low-privilege user to invoke administrator-only management operations via the network, resulting in full confidentiality, integrity, and availability compromise of the storage system. The flaw stems from incorrect authorization checks (CWE-863), where the system fails to enforce proper privilege boundaries on API or management interface operations. No public exploit identified at time of analysis and no CISA KEV listing, but the low attack complexity and high-impact CVSS 8.8 rating make this a credible threat in multi-tenant or shared-access storage environments.
Format string exploitation in the HPE AOS-CX command line interface enables unauthenticated, adjacent-network attackers to execute arbitrary code with elevated privileges on the underlying operating system. All AOS-CX versions are affected per the wildcard CPE, and the vulnerability is disclosed alongside three other critical AOS-CX flaws in the same HPE bulletin (HPESBNW05134), suggesting coordinated security research. No public exploit code has been identified at time of analysis, and CISA KEV listing has not been confirmed.
Unauthenticated arbitrary file write in HPE AOS-CX exposes network switches to full device compromise from adjacent network segments. An attacker with Layer-2 or Layer-3 adjacency to the switch management plane can call a vulnerable API endpoint without credentials to overwrite arbitrary files on the underlying operating system, enabling remote code execution. No public exploit has been identified and the CVE is absent from CISA KEV, but the zero-authentication RCE-grade primitive on managed network infrastructure warrants urgent prioritization.
Unauthenticated command injection (CWE-77) in an HPE AOS-CX management component allows an adjacent-network attacker to execute arbitrary OS commands on affected switches without any credentials or user interaction. Multiple AOS-CX release trains are affected, spanning versions 10.10 through 10.18, per the EUVD affected-version data. No public exploit has been identified and CISA KEV does not list this as actively exploited, though full system compromise is achievable upon successful exploitation.
Privilege escalation in Mozilla Firefox for Android (versions prior to 155) allows a remote, unauthenticated attacker to achieve full compromise of confidentiality, integrity, and availability by exploiting improper access control (CWE-284) when a user interacts with attacker-controlled content. Mozilla confirmed the fix in Firefox 155, documented under MFSA2026-82. No public exploit code exists and CISA has not added this to KEV, though SSVC rates the technical impact as 'total', underscoring the severity if successfully triggered.
Privilege escalation in Firefox's WebDriver BiDi component allows network-based attackers, with user interaction, to achieve full compromise of the browser process across confidentiality, integrity, and availability dimensions. All Mozilla Firefox versions prior to 155 are affected, as confirmed by vendor advisory mfsa2026-82 and the wildcard CPE cpe:2.3:a:mozilla:firefox:*. No public exploit code has been identified at time of analysis, and SSVC confirms no observed exploitation, though CISA rates the technical impact as total.
Use-after-free in Firefox's WebGPU graphics component allows privilege escalation when a victim visits a specially crafted webpage. Affecting all Firefox versions prior to 155 and ESR prior to 153.2, a remote unauthenticated attacker can trigger memory corruption by delivering malicious WebGPU content, achieving full confidentiality, integrity, and availability impact (CVSS 8.8). No public exploit or active exploitation has been identified at time of analysis; SSVC confirms exploitation status as none and the attack is not automatable due to required user interaction.
Remote code execution in lllyasviel Fooocus 2.1.854 through 2.5.5 allows any user who can upload an image to execute arbitrary Python code on the hosting server. The vulnerability stems from the `get_list` function in `modules/meta_parser.py` passing a `styles` field extracted from image EXIF metadata directly to Python's `eval()` without sanitization or sandboxing. A detailed technical writeup exists at mrbruh.com/fooocus and the vulnerable code path is publicly visible in the repository; no confirmed active exploitation has been identified at time of analysis, and EPSS stands at 0.24% (15th percentile).
Elevation of privilege in Dell PowerStore storage appliances allows a remote, low-privileged attacker to bypass authorization controls and gain high-level access to the management plane. Affecting at least ten PowerStore hardware models across the T-series and Q-series lines, the flaw stems from incorrect authorization checks (CWE-863) - the system fails to enforce role boundaries on certain operations, allowing a low-privileged session to invoke privileged actions. No public exploit code or CISA KEV listing is identified at time of analysis, but the CVSS 8.8 score and full C/I/A impact make this a high-priority remediation item for any enterprise running PowerStore.
Worker process exhaustion in Erlang/OTP's inets httpd enables unauthenticated remote denial of service by exploiting a bare-catch error-handling flaw in the chunked transfer-encoding decoder, permanently consuming HTTP worker processes until the pool is exhausted and the server becomes unresponsive to legitimate clients. The defect lies in httpd_request_handler:handle_info/2, where a throw exception raised by an invalid chunk-size is silently coerced into a normal return tuple rather than propagated as an error, leaving the worker suspended indefinitely with the request timeout already cancelled and no default byte-rate watchdog to reclaim it. Affected OTP versions span three active release lines (27.x, 28.x, 29.x) in their default configurations; no public exploit is confirmed, though the fix commit includes a regression test that is functionally equivalent to a proof-of-concept attack.
OpenAI Codex CLI and Codex Desktop's PowerShell command-safety parser failed to recognize PowerShell's stop-parsing token (--%), misclassifying file-writing Git commands embedded after that token as safe and executing them without user approval. An attacker who tricks a developer into opening a crafted repository can cause Codex to silently write an attacker-controlled configuration; when Codex subsequently loads that configuration, it launches an attacker-designated MCP server and executes arbitrary code under the user's account. No public exploit has been identified at time of analysis (EPSS 0.16%, 6th percentile), and the default filesystem sandbox on macOS and Linux can limit the damage radius by preventing writes outside permitted directories.
Stored cross-site scripting in the HPE Networking Fabric Composer web management interface allows an unauthenticated attacker on an adjacent network segment to inject persistent malicious script into the interface, which executes in any authenticated user's browser upon visiting the affected page. The CVSS 8.8 score with S:C/C:H/I:H/A:H reflects the elevated downstream impact: a successful payload executing in a network administrator's session could facilitate full session hijacking, credential theft, or unauthorized configuration changes to the managed fabric infrastructure. No public exploit or KEV listing has been identified at time of analysis.
Eval injection in cPanel's Park API (versions 11.138.0.0 and earlier) enables remote authenticated users to execute arbitrary code with root-level privileges on affected hosting servers. The vulnerability, classified under CWE-95 (Eval Injection) and reported via HackerOne, was disclosed alongside a WebPros vendor advisory on August 27, 2026. No public exploit code or CISA KEV listing has been identified at time of analysis, though the direct path to root execution across a widely deployed hosting platform makes this a critical remediation priority.
Privilege escalation to root on Dell PowerStore storage appliances allows an authenticated user with limited privileges to execute arbitrary code at the operating system's highest privilege level. Affecting the full PowerStore T and Q product families (500T through 7000T confirmed via CPE), this CWE-829 flaw exploits the inclusion of functionality from an untrusted control sphere - meaning a low-privileged local user can influence a privileged execution path by supplying or manipulating untrusted code or configuration loaded by a higher-privileged process. No public exploit identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Remote code execution in LibreNMS versions before 26.5.0 stems from the AboutController passing the snmpget configuration value directly to shell_exec() with a validation mechanism rendered ineffective by a PHP assignment operator bug. An authenticated administrator can update the snmpget setting to reference any executable already present on the server filesystem, then trigger code execution by visiting the /about endpoint, yielding full host compromise under web server privileges. No public exploit has been identified and this vulnerability is absent from CISA KEV; vendor-released patch 26.5.0 is available.
PHP object injection in Cypht before 2.12.2 allows authenticated users to execute arbitrary OS commands as the web server process by submitting a crafted serialized payload via the logout handler. The `back_query` GET parameter is base64-decoded and passed directly to PHP's `unserialize()` with no allow-list, signature check, or type restriction, enabling gadget-chain exploitation. A vendor patch is available in v2.12.2 and no public exploit code has been identified at time of analysis.
Unauthenticated denial of service in Erlang/OTP's inets httpd allows any remote attacker to exhaust a server's process pool, memory, and file descriptors by holding open an unlimited number of TCP connections. The flaw affects all inets httpd deployments across OTP 17.x through 29.x that do not explicitly configure the max_clients option; when that option is absent, a type-comparison defect caused by Erlang's term-ordering rules makes the connection-count guard unconditionally pass, accepting connections without bound. Vendor patches are available in OTP 27.3.4.17, 28.5.0.6, and 29.0.6; no public exploit code or CISA KEV listing has been identified at time of analysis.
OS command injection in Dell PowerStore allows a locally authenticated user with limited privileges to execute arbitrary commands with root privileges, achieving full appliance compromise. The CVSS:3.1 vector (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H, score 8.8) confirms low-complexity local privilege escalation with scope change to root, covering complete confidentiality, integrity, and availability impact. No public exploit or CISA KEV listing has been identified at time of analysis, but the low attack complexity and full impact triad make this a meaningful risk for environments where multiple accounts share local PowerStore access.
Remote code execution in the FS-Poster WordPress plugin (versions up to and including 8.0.1) allows any authenticated user with subscriber-level access to execute arbitrary OS commands on the underlying web server. The vulnerability combines two weaknesses: the FFmpeg path parameter accepted by the plugin's REST API is passed unsanitized to PHP's exec() function (CWE-77 command injection), and the REST API endpoints responsible for this functionality lack proper authorization checks. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low privilege bar - a standard subscriber account - makes this accessible to any registered WordPress user.
Command injection in Dell PowerStore storage appliances allows an authenticated low-privileged local user to execute arbitrary operating system commands with root privileges, achieving full appliance compromise. The CVSS scope-change metric (S:C) reflects that root access on a storage platform threatens all data hosted on the array, extending blast radius beyond the appliance itself. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog at time of analysis, but the low attack complexity once local access is established makes this a priority remediation for organizations running affected PowerStore T and Q series hardware.
SQL injection in TMT Machine Industry and Trade Ltd. Co.'s Talassoft Industrial Management Software (versions V.4 through V.16) exposes industrial operations data to full database compromise by low-privileged authenticated remote attackers. Exploitation over the network requires only a valid user account, with no interaction from other users, enabling full confidentiality, integrity, and availability impact against the backend database. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, but the low attack complexity and high impact make this a significant risk for affected deployments.
Heap-based buffer overflow in the gvfs SFTP backend (gvfsd-sftp) exposes GNOME desktop users to process-level denial of service or potential arbitrary code execution when connecting to a malicious SFTP server. The read_reply() function trusts the server-supplied response length without validating it against the client's allocated buffer, allowing a rogue server to overflow adjacent heap memory in the gvfsd-sftp daemon. No public exploit or CISA KEV listing is confirmed at time of analysis, but the high CVSS score of 8.8 and the C:H/I:H/A:H triad reflect worst-case RCE potential once a user mounts an attacker-controlled share.
Privilege escalation in Dell PowerStore enterprise storage appliances allows authenticated low-privileged users to bypass the platform's access control enforcement and gain elevated system privileges. Classified as CWE-693 (Protection Mechanism Failure), the flaw resides in the protection layer governing role-based access within the PowerStore management stack, spanning at least ten appliance models from the 500T to the 7000T series. The CVSS 8.8 score reflects full confidentiality, integrity, and availability impact, though network access with valid limited-privilege credentials is required; no public exploit code or active exploitation has been identified at time of analysis.
OS command injection in Dell PowerStore storage appliances enables a locally authenticated user with limited privileges to execute arbitrary commands at the root level, achieving full privilege escalation on the appliance. The CVSS scope change (S:C) reflects that root access on a storage platform extends impact beyond the immediate process boundary to the entire appliance and potentially dependent workloads. Dell has published advisory DSA-2026-330, but no specific patched version was provided in available data. No public exploit identified at time of analysis.
Code injection in Dell PowerStore storage appliances (500T through 7000T series and potentially additional models) allows an authenticated user with limited privileges to execute arbitrary code at root privilege level, achieving full appliance compromise. The CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H vector confirms that exploitation requires only local authenticated access with low-level credentials and no user interaction, with the resulting code execution crossing a privilege boundary into a root context. No public exploit code has been identified and this vulnerability is not listed in the CISA KEV catalog at time of analysis.
Arbitrary file write in Dell PowerStore allows authenticated low-privileged users to write attacker-controlled content to arbitrary filesystem paths via a Protection Mechanism Failure (CWE-693). Exploitation requires only network access and limited credentials, making this a credible lateral movement or privilege escalation vector within storage environments. No public exploit code has been identified at time of analysis, but the low complexity and low privilege bar make this a realistic threat against enterprise storage infrastructure.
Privilege escalation to Administrator level is possible on Dell PowerStore storage appliances through an authentication bypass by spoofing vulnerability (CWE-290). Any attacker holding a low-privileged account on the PowerStore management plane can exploit this network-accessible flaw without user interaction to gain full administrative control, impacting confidentiality, integrity, and availability of the storage system. No public exploit code has been identified at time of analysis and this vulnerability is not listed in CISA KEV, but the impact of Administrator-level compromise on enterprise storage infrastructure elevates operational risk considerably.
Erlang/OTP's inets HTTP server (httpd) is vulnerable to a slow-body resource exhaustion attack exploitable by unauthenticated remote attackers across OTP versions 17.0 through 29.0. The request handler cancels its active timeout after successfully parsing request headers, then re-arms the socket for body data without installing any replacement timer, allowing an attacker to open connections with syntactically valid headers and a large Content-Length and then stall indefinitely - permanently occupying a worker process per connection. Vendor patches are available for the OTP 27.x, 28.x, and 29.x branches; no public exploit code or CISA KEV listing has been identified at time of analysis.
Unsafe PyYAML deserialization in ModelScope through v1.40.0 enables remote code execution when users load model configuration files from attacker-controlled repositories. The vulnerability exists in at least two documented components - the audio TTS voice module (voice.py) and the multimodal mPLUG configuration loader (configuration_mplug.py) - which use PyYAML's unsafe yaml.Loader that processes Python object construction tags such as !!python/object: during deserialization. An attacker who publishes a poisoned model repository can achieve full code execution on any victim system that loads the model, with no public exploit identified at time of analysis.
Quadratic namespace-map allocation in xmldom's SAX parser allows unauthenticated remote attackers to exhaust the Node.js process heap by sending a compact, crafted XML document with repeated namespace prefix declarations. The unmaintained legacy `xmldom` package (versions 0.1.5-0.6.0) has no available fix, while `@xmldom/xmldom` is patched in releases 0.8.15 and 0.9.12. No public exploit has been identified at time of analysis, but the CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) indicates the attack is trivially automatable against any application that parses untrusted XML with this library.
Two independent quadratic-complexity denial-of-service paths in the xmldom JavaScript XML parser allow remote unauthenticated callers to exhaust CPU and memory by submitting crafted XML. The `@xmldom/xmldom` package before versions 0.8.15 and 0.9.12, and all versions of the legacy `xmldom` package (0.3.0-0.6.0), expose both paths through the default `DOMParser.parseFromString()` interface, requiring no authentication or special configuration. No public exploit has been identified at time of analysis, but the security advisories and fix commits are publicly available on GitHub.