Live › vulnerability › CVE-2026-107564
Go to dashboardUnauthenticated remote DoS in gocsaf csaf_provider (the CSAF advisory-publishing web service): requests cause uncontrolled resource allocation and high CPU load (CWE-770). Versions up to and including 3.6.0 are affected; 3.7.0 fixes it. The other gocsaf tools (aggregator, checker, downloader, uploader, validator) are not affected. Reported by github.com/kta1kri.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| csaf_provider | go | >= 0.0.0, <= 3.6.0 | 3.7.0 |
3.6.0 is affected3.7.0 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
An unauthenticated remote attacker may use an allocation of resources without limits or throttling weakness in the affected product to cause high CPU load leading to a denial of service.
This page as .md · .json · in your agent: get_signal("CVE-2026-107564")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.