Defectdojo
1 CVEs
product
Monthly
DefectDojo versions up to 2.55.4 contain a denial of service vulnerability in the SonarQubeParser and MSDefenderParser components where improper handling of ZIP file input allows authenticated remote attackers to crash the service. Public exploit code exists for this vulnerability, and administrators should upgrade to version 2.56.0 or later to remediate the issue.
Denial Of Service
Defectdojo
NVD
GitHub
VulDB
CVSS 3.1
4.3
EPSS
0.0%
CVE-2026-3816
EPSS 0%
CVSS 4.3
MEDIUM
POC
PATCH
This Month
DefectDojo versions up to 2.55.4 contain a denial of service vulnerability in the SonarQubeParser and MSDefenderParser components where improper handling of ZIP file input allows authenticated remote attackers to crash the service. Public exploit code exists for this vulnerability, and administrators should upgrade to version 2.56.0 or later to remediate the issue.
Denial Of Service
Defectdojo
NVD
GitHub
VulDB