Inefficient Algorithmic Complexity

Every one of the 293 is a mark on the map. Named now: 1 to 26, most at risk first.

1. In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of “qualit…CVE-2020-27223The Eclipse Foundation · CVSS 5.2 · 78% likely

   Eclipse Foundation

2. Redis string pattern matching can be abused to achieve Denial of ServiceCVE-2022-36021redis · CVSS 5.5 · 60% likely

   Redis

3. An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA (RFC 3490) decoder, such that a craf…CVE-2022-45061Python · CVSS 7.5 · 3.3% likely

   Python

4. Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service (multiple-minute daemon hang) via input that is mishandled during hash-table interaction. Because ther…CVE-2021-33582Cyrus · 3.1% likely

   Cyrus

5. .NET and Visual Studio Denial of Service VulnerabilityCVE-2024-43485Microsoft · CVSS 7.5 · 3.1% likely

   Microsoft

6. .NET, .NET Framework, and Visual Studio Denial of Service VulnerabilityCVE-2024-43484Microsoft · CVSS 7.5 · 3.0% likely

   Microsoft

7. The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragments. The implementation permits a remo…CVE-2016-10396Ipsec-Tools · 2.9% likely
8. .NET, .NET Framework, and Visual Studio Denial of Service VulnerabilityCVE-2024-43483Microsoft · CVSS 7.5 · 2.9% likely

   Microsoft

9. The parse() method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared…CVE-2018-12558Email::address Module Project · 2.6% likely
10. Potential denial-of-service vulnerability in XML serializer text extractionCVE-2025-64460djangoproject · CVSS 7.5 · 2.2% likely

    Djangoproject

11. knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficient…CVE-2019-19331CZ.NIC · CVSS 7.5 · 2.1% likely
12. Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption) because of algorithmic complexity. During an attack, an authoritative server must…CVE-2022-40188Nic · CVSS 7.5 · 1.9% likely

    Nic

13. Potential denial-of-service vulnerability in HttpResponseRedirect and HttpResponsePermanentRedirect on WindowsCVE-2025-64458djangoproject · CVSS 7.5 · 1.9% likely

    Djangoproject

14. Parsing large DNS messages may cause excessive CPU loadCVE-2023-4408ISC · CVSS 7.5 · 1.4% likely

    ISC

15. .NET Denial of Service VulnerabilityCVE-2026-118747Microsoft · CVSS 7.5 · 1.3% likely

    Microsoft

16. Microsoft Exchange Server Denial of Service VulnerabilityCVE-2026-118153Microsoft · CVSS 7.5 · 1.3% likely

    Microsoft

17. Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dosCVE-2024-12243Siemens · CVSS 5.3 · 1.3% likely

    Siemens

18. Werkzeug vulnerable to high resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginningCVE-2023-46136pallets · CVSS 8 · 1.3% likely

    The Pallets Project

19. The V8 release used in Node.js v24.0.0 has changed how string hashes are computed using rapidhash. This implementation re-introduces the HashDoS vulnerability as an attacker who c…CVE-2025-27209nodejs · CVSS 7.5 · 1.3% likely

    Node.js

20. .NET Denial of Service VulnerabilityCVE-2026-69651Microsoft · CVSS 7.5 · 1.3% likely

    Microsoft

21. ASP.NET Core Denial of Service VulnerabilityCVE-2026-109478Microsoft · CVSS 7.5 · 1.2% likely

    Microsoft

22. .NET Denial of Service VulnerabilityCVE-2026-96958Microsoft · CVSS 7.5 · 1.2% likely

    Microsoft

23. Windows Security Account Manager Denial of Service VulnerabilityCVE-2026-112966Microsoft · CVSS 7.5 · 1.2% likely

    Microsoft

24. .NET Denial of Service VulnerabilityCVE-2026-120796Microsoft · CVSS 5.3 · 1.2% likely

    Microsoft

25. cmark-gfm Quadratic complexity bug in handle_close_bracket may lead to a denial of serviceCVE-2023-22486github · CVSS 3.5 · 1.1% likely

    GitHub

26. Potential denial-of-service vulnerability in django.utils.text.Truncator HTML methodsCVE-2026-1285djangoproject · CVSS 7.5 · 1.1% likelycovered by CyberSIXT

    Djangoproject

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.