CVE-2026-107564: gocsaf/csaf: csaf_provider prone to uncontrolled resource consumption
Published Oct 16, 2026
·Updated
An unauthenticated remote attacker may use an allocation of resources without limits or throttling weakness in the affected product to cause high CPU load leading to a denial of service.
Affected Software
1 affected component
gocsaf csaf
Event History
Oct 16, 2026
CVE Published
via MITRE·12:55 PM
Data Sourced
via MITRE·12:55 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An unauthenticated remote attacker can exploit it. No privileges or user interaction are required.
2
What is the practical impact?
Successful exploitation can drive high CPU load and cause a denial of service. The available information does not indicate confidentiality or integrity impact.