https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 31 Oct 2026 22:13:40 +0000 https://db.gcve.eu/vuln/cve-2026-59396 <p><strong>Affected:</strong> Cloud Foundry UAA, Cloud Foundry cf-deployment</p> <p>A denial-of-service vulnerability exists in UAA&#39;s private_key_jwt client-authentication mechanism. When UAA retrieves a remote JWKS URI, it caches the response. Invalid authentication attempts can trigger full deserialization of this cached data. An attacker with prerequisites (write access to clients or a compromised endpoint) can send anonymous requests that force repeated parsing of large cached objects, causing excessive CPU usage and potential Java heap exhaustion via OutOfMemoryError, resulting in service unavailability.</p> <p><strong>Affected:</strong> Cloud Foundry UAA, Cloud Foundry cf-deployment</p> <p>A denial-of-service vulnerability exists in UAA&#39;s private_key_jwt client-authentication mechanism. When UAA retrieves a remote JWKS URI, it caches the response. Invalid authentication attempts can trigger full deserialization of this cached data. An attacker with prerequisites (write access to clients or a compromised endpoint) can send anonymous requests that force repeated parsing of large cached objects, causing excessive CPU usage and potential Java heap exhaustion via OutOfMemoryError, resulting in service unavailability.</p> https://db.gcve.eu/vuln/cve-2026-59396