denial-of-service
Safeguard articles tagged "denial-of-service" — guides, analysis, and best practices for software supply chain and application security.
69 articles
CVE-2023-29469: A libxml2 Hashing Flaw That Crashes XML Parsers
CVE-2023-29469 lets a crafted XML document trigger a double free in libxml2 through non-deterministic hashing of empty strings. Affected versions and fixes explained.
Tornado Python Security: Hardening Your Async Web App
A security-focused guide to the Tornado Python web framework, covering the cookie-parsing DoS, secure cookie configuration, and safe deployment patterns.
Is body-parser Safe to Use? A Security Review of the npm Package
npm body-parser is Express middleware for reading request bodies, and it is safe when kept current. Here is the CVE-2024-45590 denial-of-service issue and how to configure it defensively.
CVE-2023-22081: The Oracle Java JSSE Denial-of-Service Flaw
CVE-2023-22081 is a Java SE and GraalVM vulnerability in the JSSE component that can cause a partial denial of service over HTTPS. Here is what to patch.
CVE-2022-40152: Woodstox XML Parsing Denial of Service
CVE-2022-40152 lets malicious XML with deeply nested DTD content crash Woodstox-based parsers via stack overflow. Here is the root cause, affected versions, and how to remediate it.
papaparse npm: Security Review and Best Practices
PapaParse is the go-to CSV parser for JavaScript, but older versions carry a ReDoS flaw. Here is a security review and how to use it safely on untrusted files.
Is npm body-parser Safe? A Security Review and Safe-Usage Guide
A practical look at npm body-parser, the CVE-2024-45590 denial-of-service issue, and how to configure the middleware so it does not become a liability in production.
CVE-2022-25844: The AngularJS ReDoS Bug and How to Fix It
CVE-2022-25844 is a regular-expression denial-of-service flaw in AngularJS. Here is what it affects, why there is no upstream patch, and how to remediate it.
org.json Maven: A Security Guide
The org.json Maven dependency ships a small JSON parser with a history of denial-of-service bugs. Here is how to pin a safe version and catch it transitively.
python-multipart Security: Patching the Form-Data DoS
Why the python-multipart parser behind FastAPI and Starlette had a denial-of-service flaw, how to check your version, and how to keep form uploads safe.
Uncaught Exception in Java: A Security Guide
An uncaught exception in Java is more than a crash - it leaks stack traces, kills threads, and opens denial-of-service paths. Here is how to handle it safely.
Cisco ASA and FTD CVE-2024-20481: Brute-Force DoS in VPN Services
CVE-2024-20481 in Cisco ASA and Firepower Threat Defense VPN services was actively exploited in large-scale brute-force campaigns, causing denial of service on critical VPN infrastructure.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.