CWE-1050: Excessive Platform Resource Consumption within a Loop
Base
The product has a loop body or loop condition that contains a control element that directly or indirectly consumes platform resources, e.g. messaging, sessions, locks, or file descriptors.
Consequences
- Availability: DoS: Resource Consumption (CPU), DoS: Resource Consumption (Memory), DoS: Resource Consumption (Other), Reduce Performance
Recent advisories
- GHSA-96hv-2xvq-fx4p — ws: Memory exhaustion DoS from tiny fragments and data chunks
- GHSA-h4wv-g838-66g3 — Keycloak: Application-Level DoS via Scope Processing
- GHSA-grv7-fg5c-xmjg — Uncontrolled resource consumption in braces
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor