https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-13T09:01:33.989698+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-102554 fkie_cve-2026-102554 2026-10-13T09:01:33.991510+00:00

Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashSet, or MapMakerInternalMap instances, Guava eagerly allocates an array based on a caller-specified size parameter without throttling, permitting memory exhaustion from crafted serialization streams.

 https://db.gcve.eu/vuln/msrc_cve-2026-102554 msrc_CVE-2026-102554 — Denial of Service via Eager Array Allocation During Deserialization in Guava 2026-10-13T09:01:33.991600+00:00 msrc_CVE-2026-102554 https://db.gcve.eu/vuln/ubuntu-cve-2026-102554 UBUNTU-CVE-2026-102554 2026-10-13T09:01:33.991627+00:00

Affected: Ubuntu:14.04:LTS: guava-libraries, Ubuntu:16.04:LTS: guava-libraries, Ubuntu:18.04:LTS: guava-libraries, Ubuntu:20.04:LTS: guava-libraries, Ubuntu:22.04:LTS: guava-libraries, Ubuntu:24.04:LTS: guava-libraries, Ubuntu:26.04:LTS: guava-libraries

Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashSet, or MapMakerInternalMap instances, Guava eagerly allocates an array based on a caller-specified size parameter without throttling, permitting memory exhaustion from crafted serialization streams.